Address poisoning protection
A scammer generates an address that starts and ends like one you recently paid, then sends you dust or a fake token from it. In your wallet history it looks like your recipient. Copying "the last address" from history is enough to send them your money.
Check a wallet
Paste a public Solana address: yours or one you watch. We find transfers from addresses posing as someone this wallet really paid, and list the genuine recipients you can safely copy from.
How to stay safe
- Never copy an address from historyHistory also shows scammers' transfers. Get the address from the recipient or your wallet's address book.
- Check the middle, not the endsA fake has the same first and last characters. Compare a few characters from the middle, or paste it into "Before you send".
- Large amount: test firstSend a small amount and ask the recipient to confirm before sending the rest.
- Leave unknown tokens aloneA fake USDC or a token with a link in its name is bait. Hide it in your wallet, do not sell it and do not visit the site in its name.
A Solana transfer cannot be reversed. No "support" or "recovery" service can get the funds back, and such helpers are usually the next scam.
How we check
- Transfers
- We read up to 80 of the address's latest successful transactions from 90 days and take the SOL and SPL token transfers out of them (Token-2022 and inner instructions included), both ways.
- Genuine recipients
- Addresses this wallet sent funds to. If an address sent bait first, was paid only later and resembles another recipient, we do not treat it as genuine: it is a fake that worked.
- Lookalike
- A different address with at least the same first 3 and last 3 characters as a genuine recipient or as the wallet itself. That is the rule from the Bitquery address poisoning study. Case matters, because base58 is case-sensitive.
- Bait
- SOL dust (under 0.001 SOL), a zero-amount token transfer or a token other than USDC and USDT. We show every transfer from a lookalike, larger ones too, since those also exist to land in history.
- Before you send
- The pasted address is compared in the browser with the report's recipients and lookalikes. Nothing is sent to the server.
- What we miss
- Transactions older than the latest 80, lookalikes matching only at one end and addresses that look alike some other way. Under a spam flood genuine recipients can fall out of the window. "No lookalikes" means we found none, not that there are none.
Also check whether bots eat into your swaps in the Sandwich audit.
An educational tool, not financial advice.