1
/
7
What is lookalike address phishing?
<b>Lookalike address phishing means attackers usually will create a new address that looks very similar to the target address, to trick victims into sending assets to the wrong address.</b>
A common method is to make the same ending, or the same prefix/suffix, and send small transfers to the victim. This mixes the two addresses in the victim's history, leading them to send funds to the wrong one.
To avoid this, always double-check the wallet address before you transfer.
<b>Lookalike address phishing means attackers usually will create a new address that looks very similar to the target address, to trick victims into sending assets to the wrong address.</b>
A common method is to make the same ending, or the same prefix/suffix, and send small transfers to the victim. This mixes the two addresses in the victim's history, leading them to send funds to the wrong one.
To avoid this, always double-check the wallet address before you transfer.
1
/
7
Creating an address with the same ending
In the example, the attacker used the phishing address TCQ...<b>hWT</b> to send a small transfer to the victim, causing confusion with the correct address TSK...<b>hWT</b>.
The last 3 characters of the phishing and correct addresses are the same.
1
/
7
Using a similar prefix or suffix but different letter case
In the example, the attacker changed the letter case to create the phishing address 0xB1<b>F</b>8...93C6<b>D</b> and sent a small transfer, making it easy to confuse with the correct address 0xB1<b>f</b>8...93C6<b>d</b>.
Although the first and last 5 characters match, the letters f and d are in different cases.
1
/
7
Using a similar prefix or suffix but different middle characters
In the example, the attacker changed a middle character to create the phishing address 0x654<b>d</b>...c49198 and sent a small transfer, making it easy to confuse with the correct address 0x654<b>1</b>...c49198.
Although the first 5 and last 6 characters match, the 6th character is different: d vs 1.
1
/
7
How to protect transfer safety?
When you transfer with Bitget Wallet, we will always scan your target address. If we detect any of the above similarities with addresses you transferred to recently, we will warn you immediately. If you see a warning, carefully verify the target address to avoid scams.
1
/
7
How to avoid phishing
<b>Carefully verify the target address</b>
Before sending any assets, verify the entire address. Matching only the first or last few characters is not enough – check the middle too.<b>Don't copy from history</b>
Lookalike address phishing can pollute your history to mislead you. Don't copy from your history; copy from the wallet's receive page, or use the QR code of the address.
<b>Use the address book</b>
In Bitget Wallet, we provide a dedicated address book. Add frequently used addresses to it instead of copying, to reduce risk.
1
/
7
How to avoid phishing
<b>Do a small test transfer</b>
Send a small amount first as a test. After the target address confirms receipt, send the full amount.
<b>Heed security alerts</b>
Take security alerts during transfers seriously. Stay alert and avoid potential phishing attacks.
