Jameson Lopp, security chief at Bitcoin custody firm Casa, has raised concerns about Bitcoin address poisoning attacks, a type of scam where fraudsters use similar-looking addresses from victims’ transaction histories to trick them into sending funds to a malicious address. In his article, Lopp explains that these attacks have been tracked since mid-2023, with nearly 48,000 suspicious transactions noted. He advises Bitcoin users to double-check addresses before sending payments and calls for better wallet designs to help prevent these scams. Additionally, cybersecurity firm Cyvers reported over $1.2 million was stolen through such attacks in March 2025, underscoring the growing threat of cryptocurrency fraud.
Jameson Lopp, the Chief Security Officer at Bitcoin custody company Casa, recently raised concerns about a serious scam involving Bitcoin address poisoning attacks. This deceptive practice involves criminals creating fake Bitcoin addresses that closely resemble those a victim has used before. By doing this, they trick victims into sending their funds to these malicious addresses instead.
In a detailed analysis published on February 6, Lopp explained how hackers generate these fraudulent addresses by mimicking the first and last digits of legitimate addresses in the victim’s transaction history. His investigation highlighted troubling trends, noting that since the first instance of this type of attack was recorded on July 7, 2023, there have been approximately 48,000 transactions that fit this dangerous pattern.
Lopp urges Bitcoin users to double-check any address before sending funds. He emphasized the need for improved wallet technology that clearly displays recipient addresses to help prevent these scams.
The dangers associated with address poisoning are alarming, especially as cybersecurity threats continue to evolve. Experts from Cyvers reported that over $1.2 million was stolen through such attacks in March 2025 alone, following a staggering $1.8 million in losses the previous month. Overall, the crypto landscape is plagued by various scams, with losses from different attacks exceeding $1.6 billion in the first quarter of 2025.
With the involvement of sophisticated hackers, including those associated with North Korea, the urgency for enhanced protection and awareness in the crypto community has never been higher. Users are encouraged to stay vigilant and to adopt better practices to safeguard their assets against these growing threats.
Tags: Bitcoin scams, address poisoning, cryptocurrency security, Jameson Lopp, Bitcoin threats, cybersecurity risks.
What is Bitcoin address poisoning?
Bitcoin address poisoning is a type of scam where attackers send fake transactions to a Bitcoin address. This confuses users and can lead them to send real money to the wrong place.
How does address poisoning work?
Attackers send tiny amounts of Bitcoin to a target address. The goal is to make the address look active. When someone tries to send Bitcoin to that address, they might mistakenly trust it, thinking it’s safe.
What should I do if I think I’m a victim?
If you believe you’ve fallen for an address poisoning attack, stop any transactions immediately. Double-check the address you’re sending to and use trusted wallet tools. It’s also a good idea to change your wallet passwords.
How can I protect myself from these attacks?
To stay safe, always verify Bitcoin addresses before sending. Use wallet features that show you the transaction history and ensure you’re sending money to the intended recipient. Avoid clicking on links or addresses from unknown sources.
Where can I learn more about Bitcoin security?
You can find more information on Bitcoin security from reliable websites, forums, and books. Following Bitcoin experts on social media can also provide valuable insights into current threats and safe practices.
