A cryptocurrency user has lost nearly $50 million after falling victim to an address poisoning scam, highlighting the growing sophistication of crypto fraud as U.S. lawmakers push for tighter enforcement through new legislation.
How the scam unfolded
According to blockchain security firm Web3 Antivirus, the victim mistakenly sent 49,999,950 stablecoins to a fraudulent wallet address after copying it from their transaction history. Just minutes earlier, the user had successfully sent a small test transfer to the correct recipient.
The scam worked by exploiting a common habit rather than a technical flaw. Attackers sent a tiny transaction from a look-alike wallet address designed to closely resemble the legitimate destination. When the victim later copied the address from their history, they unknowingly selected the poisoned address and authorized the massive transfer.
What is address poisoning?
Address poisoning scams rely on visual deception. Fraudsters generate wallet addresses that closely match a target address, often sharing the same starting and ending characters. These fake addresses appear in transaction histories, tricking users who rely on copy-paste rather than full address verification.
Security experts stress that this type of scam does not involve protocol vulnerabilities or smart contract exploits. Instead, it preys on user behavior, making even experienced traders vulnerable during high-value transfers.
Binance withdrawal linked to the loss
Web3 Antivirus noted that the victim’s wallet had been active for nearly two years and was primarily used for stablecoin transactions. The funds were withdrawn from Binance shortly before the poisoned transfer occurred, suggesting the attacker timed the scam around expected wallet activity.
The incident now ranks among the largest on-chain losses of 2025, as crypto-related fraud and hacking incidents continue to rise across the industry.
Lawmakers respond with SAFE Crypto Act
As scams escalate, U.S. senators Elissa Slotkin and Jerry Moran have introduced the bipartisan SAFE Crypto Act. Officially titled the Strengthening Agency Frameworks for Enforcement of Cryptocurrency Act, the proposal aims to establish a federal task force dedicated to combating crypto fraud.
The task force would coordinate efforts between government agencies, law enforcement, and private-sector experts, while also involving exchanges, stablecoin issuers, custodians, blockchain analytics firms, consumer protection groups, and victims’ advocacy organizations.
According to the bill’s sponsors, the initiative would focus on identifying trends in scams such as Ponzi schemes, rug pulls, fake token launches, money laundering operations, and financial grooming tactics that disproportionately impact older investors.
Staying safe during large crypto transfers
Security professionals recommend several precautions to reduce the risk of address poisoning:
- Always verify wallet addresses character by character before sending funds
- Avoid copying addresses directly from transaction history
- Use address-whitelisting features where available
- Rely on hardware wallets for large transfers
- Employ on-chain monitoring and security tools to flag suspicious activity
Outlook
As crypto adoption grows, address poisoning scams are becoming more frequent and costly. The $50 million loss serves as a stark reminder that even simple mistakes can have severe consequences, reinforcing the need for stronger safeguards, better user education, and coordinated regulatory oversight.
