Skip to main content

Phishing Alert: Beware of Similar Wallet Addresses (Same Prefix/Suffix, Altered Middle)

 

We would like to inform you that phishing cases exploiting wallet addresses have recently been increasing. Please make sure to verify the entire address before making a transfer to prevent potential loss.

 

1. What kind of phishing is this?​

This is a phishing method where only part of the wallet address is altered while the beginning and ending appear identical, tricking users into sending funds to a fraudulent address. It exploits the habit of not checking the full address.

 

2. How does it usually happen?​

[Clipboard malware]​

Even if you copy a correct address, it may be replaced with the attacker’s address when pasted.

[Impersonation via messenger / email / SNS]​

Attackers impersonate acquaintances, administrators, or support teams and send a “new” or “urgent” address.

[Phishing sites / fake wallet apps]​

Fake interfaces resembling official services display the attacker’s address.

[Small transfer to gain trust]​

A small amount is sent from a similar address to trick users into trusting it.

[Address Poisoning]​

  • Creation of a fake address very similar to a real one

  • Sending a small transaction to the victim

  • Making it appear in recent transaction history

  • Inducing the user to copy the address from recent records

[Example]​

User A had repeatedly sent funds to exchange address A. Later, a small amount was received from a similar-looking address B. Mistaking it as a legitimate transaction, User A copied address B from recent history and sent a large amount, resulting in irreversible loss.

 

3. Warning signs​

  • Receiving an address via unofficial channels (messenger, SNS, etc.)

  • The address looks similar but not exactly the same

  • Suspicious behavior when copying/pasting addresses

  • Unusual pop-ups, ads, or unknown installations on your device

If any of the above applies, stop the transfer and verify the full address.

 

4. Prevention methods​

[Check the full address]​

Verify all characters, not just the beginning and end.

[Use official sources]​

Always obtain addresses from official apps or websites.

[Do not reuse addresses from transaction history]​

Avoid copying addresses from unknown or suspicious sources.

[Use trusted information only]​

Rely only on saved addresses or official guides.

[Verify on hardware wallet]​

When using D’CENT, confirm the address displayed on the device screen.

[Maintain device security]​

Keep OS and security software up to date and avoid installing unknown apps.

 

5. If you have already sent funds​

Blockchain transactions cannot be reversed once completed.

To prevent further damage:

  • Create a new wallet on a secure device and transfer remaining assets

  • Scan your device for malware

  • Change passwords and enable two-factor authentication

Even when using a new wallet, verifying the address is the most important habit.

 

6. Final checklist before sending​

  • Have you checked the entire address from beginning to end?

  • Did you obtain the address from an official source?

  • Is your device free from suspicious activity?

  • Did you perform a small test transaction for large amounts?

If you are unsure about any of the above, do not proceed and verify again.