A pattern emerging across Ethereum transaction records reveals how automated scam campaigns are exploiting wallet behavior rather than technical vulnerabilitiesA pattern emerging across Ethereum transaction records reveals how automated scam campaigns are exploiting wallet behavior rather than technical vulnerabilities

Etherscan Warns Ethereum Users About Rising Address Poisoning Attacks

2026/03/15 04:23
4 min read
For feedback or concerns regarding this content, please contact us at crypto.news@mexc.com

A pattern emerging across Ethereum transaction records reveals how automated scam campaigns are exploiting wallet behavior rather than technical vulnerabilities.

Etherscan issued an alert on March 12, 2026, warning that address poisoning attacks are rapidly increasing, with automation allowing attackers to flood user transaction histories with deceptive wallet addresses.

The warning highlights how these attacks rely on social engineering rather than protocol flaws. By inserting lookalike addresses into recent transaction lists, attackers attempt to trick users into copying the wrong destination when sending funds.

Automated Attack Activity Surges After Network Upgrade

According to the warning, the scale of these attacks increased significantly after Ethereum’s Fusaka upgrade, which was activated on December 3, 2025.

The upgrade reduced transaction costs across the network, lowering the barrier for attackers to launch large-scale campaigns. As a result, the number of so-called “dust transfers”, transactions typically worth less than $0.01, has surged across several major stablecoins.

Data referenced in the warning shows:

  • USDT dust transfers increased by 612%
  • USDC dust transfers rose by 473%
  • DAI dust transfers climbed by 470%

These transactions are typically sent by automated bots that monitor blockchain activity in real time. When a legitimate transfer occurs, attackers quickly send a small transaction from a vanity address designed to resemble the correct destination wallet.

Because many users copy addresses from their recent transaction history, the fake address can appear legitimate at a glance.

High-Profile Losses Highlight the Risk

The consequences of these attacks can be significant when victims mistakenly copy a poisoned address.

In early March 2026, a user known as Sillytuna reportedly lost approximately $24 million in aEthUSDC after accidentally transferring funds to a spoofed wallet address.

Security researchers estimate that address poisoning scams have already caused roughly $62 million in losses during the first two months of 2026.

The scale of automated activity can also be intense. One reported victim received 89 automated poisoning alerts within just 30 minutes, triggered after making only two legitimate transfers.

How the Scam Works

Address poisoning relies on the fact that many cryptocurrency wallet interfaces only show the first and last few characters of a long address. Attackers generate vanity addresses that mimic those visible characters so that the fraudulent address appears nearly identical to the correct one.

Once the attacker sends a small transaction from this address, it becomes visible in the victim’s transaction history. If the user later copies the address from that history instead of verifying it manually, funds can be sent directly to the attacker.

Security Measures Recommended by Etherscan

To reduce the risk of falling victim to address poisoning attacks, Etherscan and blockchain security researchers recommend several protective measures.

Users should always verify the full wallet address, rather than relying on the abbreviated format shown in many interfaces. Even a single incorrect character can redirect funds permanently.

Another recommended step is enabling Etherscan’s Address Highlight feature, which visually marks trusted addresses or frequently used wallets to make suspicious ones easier to detect.

Security experts also suggest using Ethereum Name Service (ENS) addresses or wallet address books with private labels. These tools reduce the need to copy addresses from transaction histories where spoofed entries may appear.

Finally, many blockchain explorers now hide zero-value or suspicious dust transfers by default, helping prevent malicious entries from appearing in a user’s recent transaction list.

Growing Threat for Ethereum Users

Address poisoning campaigns demonstrate how attackers increasingly rely on automation and behavioral manipulation rather than direct protocol exploits. As transaction costs fall and network activity expands, the ability to run high-volume scam campaigns becomes easier for malicious actors.

For Ethereum users, the warning underscores a simple but critical habit: always confirm the entire destination address before sending funds, especially when copying it from a transaction history.

The post Etherscan Warns Ethereum Users About Rising Address Poisoning Attacks appeared first on ETHNews.

Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact crypto.news@mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

MoneyGram launches stablecoin-powered app in Colombia

MoneyGram launches stablecoin-powered app in Colombia

The post MoneyGram launches stablecoin-powered app in Colombia appeared on BitcoinEthereumNews.com. MoneyGram has launched a new mobile application in Colombia that uses USD-pegged stablecoins to modernize cross-border remittances. According to an announcement on Wednesday, the app allows customers to receive money instantly into a US dollar balance backed by Circle’s USDC stablecoin, which can be stored, spent, or cashed out through MoneyGram’s global retail network. The rollout is designed to address the volatility of local currencies, particularly the Colombian peso. Built on the Stellar blockchain and supported by wallet infrastructure provider Crossmint, the app marks MoneyGram’s most significant move yet to integrate stablecoins into consumer-facing services. Colombia was selected as the first market due to its heavy reliance on inbound remittances—families in the country receive more than 22 times the amount they send abroad, according to Statista. The announcement said future expansions will target other remittance-heavy markets. MoneyGram, which has nearly 500,000 retail locations globally, has experimented with blockchain rails since partnering with the Stellar Development Foundation in 2021. It has since built cash on and off ramps for stablecoins, developed APIs for crypto integration, and incorporated stablecoins into its internal settlement processes. “This launch is the first step toward a world where every person, everywhere, has access to dollar stablecoins,” CEO Anthony Soohoo stated. The company emphasized compliance, citing decades of regulatory experience, though stablecoin oversight remains fluid. The US Congress passed the GENIUS Act earlier this year, establishing a framework for stablecoin regulation, which MoneyGram has pointed to as providing clearer guardrails. This is a developing story. This article was generated with the assistance of AI and reviewed by editor Jeffrey Albus before publication. Get the news in your inbox. Explore Blockworks newsletters: Source: https://blockworks.co/news/moneygram-stablecoin-app-colombia
Share
BitcoinEthereumNews2025/09/18 07:04
Middle East War Cancels F1 Races and Disrupts Crypto Events in Dubai

Middle East War Cancels F1 Races and Disrupts Crypto Events in Dubai

TLDR TOKEN2049 Dubai has been postponed to April 2027 and TON Gateway Dubai canceled due to Middle East conflict F1 officially canceled the Bahrain (April 12) and
Share
Coincentral2026/03/15 15:44
Remittix Presale Edges Closer To Sell Out As Only $6 Million Remains

Remittix Presale Edges Closer To Sell Out As Only $6 Million Remains

Interest in the best crypto presale opportunities is rising as investors search for projects that combine strong demand with clear utility. Many early-stage launches
Share
Captainaltcoin2026/03/15 15:30