Address Poisoning on TRON: How Scammers Steal Your USDT

What Is Address Poisoning?

Address poisoning is one of the most common scams on the TRON network. Scammers exploit a simple human habit: copying the last transaction address from your history.

How the Attack Works

Step 1: Reconnaissance

The scammer monitors the blockchain for your transactions. When you send USDT to an exchange (e.g., Binance), they note the receiving address.

Step 2: Create a Lookalike Address

The scammer generates a new address that matches the first 2 and last 4 characters of the real exchange address. On TRON, addresses start with 'T' and are 34 characters long — most users only check the beginning and end.

Example:

Real: TRqtSahVi28Rfd1uEW5ap6NzFoGWDwDUyu

Fake: TRqtXk9mP7vJ2nLcQ8Wy3bFhKzR4ewDUyu

Step 3: Dust Transaction

The scammer sends a tiny amount (0.001 USDT) from the fake address to your wallet. This transaction appears in your history.

Step 4: The Trap

Next time you want to send USDT, you open your transaction history, see what looks like the exchange address, copy it, and send your funds — directly to the scammer.

Scale of the Problem

Our spam detector has identified 204 confirmed spam addresses on TRON that are actively running address poisoning campaigns. Each address sends 100+ dust transactions to different victims.

How We Detect Spam Addresses

Our spam_detector procedure analyzes TRON transfers in real-time:

Finds addresses sending many small transfers (< 10 USDT)

Checks if these addresses match the pattern of legitimate counterparties (same first 2 + last 4 characters)

Verifies the legitimate counterparty recently sent large amounts to the same victim

Confirms the suspect has 100+ dust transactions and fewer than 5 legitimate ones

How to Protect Yourself

Never copy addresses from transaction history — always use your exchange's deposit address page

Verify the FULL address — not just the first and last characters

Use address labels/whitelists in your wallet

Check addresses on USDTBanList — our database flags known spam addresses

Enable withdrawal whitelists on exchanges

Check Any Address

Use our free tools to verify addresses before transacting:

Website checker

Telegram bot — instant results

Sanctions list — OFAC & NBCTF database

---

*USDTBanList monitors TRON and Ethereum 24/7, detecting spam addresses, blacklist events, and sanctions in real-time.*