What Is Address Poisoning on TRON?

Address poisoning (also called "address dusting") is a phishing technique where attackers send tiny amounts of TRX or TRC-20 tokens to your wallet from addresses that visually resemble addresses in your transaction history. The goal is to trick you into accidentally copying and sending funds to the attacker's address.

How the Attack Works

Attackers generate TRON addresses sharing the first 4–6 and last 4–6 characters with a legitimate address in your history. They send a tiny "dust" transaction from this lookalike. If you later copy an address from your transaction history instead of your saved contacts, you may send to the attacker.

How to Protect Yourself

• Always verify the full TRON address character by character before confirming any transaction.
• Never copy addresses from your transaction history for outgoing payments.
• Use TronLink's address book to save trusted addresses.
• Be especially careful with USDT TRC20 transfers — they are irreversible once confirmed.

Recognizing Suspicious Dust Transactions

If you receive an unexpected small amount of TRX or a TRC-20 token from an unknown address, do not interact with it. Do not attempt to transfer the received dust. Blockchain security firms like TRM Labs actively monitor for address poisoning campaigns on TRON.

Security Best Practices

Use a hardware wallet (Ledger) for large TRX holdings. Enable multi-signature protection where available. Regularly audit your TRON address on TRONSCAN for suspicious incoming transactions. Never share your private key or 12-word mnemonic phrase with anyone.