Address Poisoning

An attack where the scammer sends a zero-value (or dust) transaction from an address whose first and last characters match an address the victim has previously used. The fake address appears in the victim's transaction history. On the next transaction the victim copies an address from history, copies the poisoned one, and sends funds to the attacker. Defence: never copy addresses from transaction history — always re-verify the full address against an original source, and use address-book features that name-tag known recipients.