Trust Wallet launches automatic Address Poisoning Protection to help prevent increasingly common attack

Trust Wallet has launched a new security feature to protect users from a common type of crypto scam called address poisoning. The feature will be available on Trust Wallet for mobile across 32 EVM chains, with additional chains planned.

According to an announcement, Trust’s new Address Poisoning Protection will automatically scan user transactions to detect incorrect addresses and alert users before they mistakenly send funds, a scam that involves sending small transactions from lookalike wallet addresses to trick users into copying the wrong destination.

The tool will use aggregated intelligence from HashDit and Binance Security to cross-check known scam and lookalike addresses. It will also create a side-by-side comparison to show where the addresses differ.

"The threat is designed to be invisible: a handful of characters buried in the middle of a long string, easy to miss and expensive to ignore," Trust Wallet CEO Felix Fan said. "Address Poisoning Protection is our response to that reality: automatic, real-time alerts that give users the information they need before they act."

Crypto scams are a multi-billion-dollar industry, and a persistent factor limiting crypto adoption. Chainalysis found that a record $17 billion was lost to crypto scams in 2025, particularly driven by the rise of AI-enabled impersonation tactics. 

Beefing up protections

Trust Wallet is not the first to enable automatic transaction protections. Ledger Live, for instance, offers "clear signing" to show full transaction details as well as a whitelisting option for trusted addresses. 

Safe, which also offers some address poisoning protections, said that this form of "spoofing" is relatively new and has been a growing problem in recent years. 

Security firm Cyvers said it has been detecting over 1 million address-poisoning "preparations" per day on Ethereum, while Trust estimates 34,000 attacks happen every hour targeting 17 million victims, according to a spokesperson.

For its part, Trust Wallet notes Address Poisoning Protection is meant to build on its existing security stack, including a transaction-level risk tool introduced in 2023.

"While Security Scanner evaluates the full transaction before a user confirms it, flagging phishing contracts, malicious dApps, and suspicious token approvals, Address Poisoning Protection operates at an earlier point in the process; stepping in the moment a user copies or enters a destination address," the company said.

The Trust Wallet Chrome extension was compromised in an apparent supply chain attack in late December, resulting in an estimated $8.5 million in losses.

Binance acquired Trust Wallet in July 2018 before building its native Binance Wallet. Trust Wallet operates as an independent company.