There have been a total of $50 million in losses incurred by cryptocurrency traders due to address poisoning attacks in December 2025 alone. The increase in losses is attributed to recent attacks that affected more than a million Binance customers in recent months, indicating the growing threats that crypto users face.
How Address Poisoning Scams Work
There has been a marked rise in the use of address poisoning by scammers as of early 2025. The ploy involves the creation of blockchain addresses that are nearly identical to those belonging to actual users, luring traders into sending their funds to the wrong address. Coin Bureau’s analysis explains why the tactic works so well in the fast-moving realm of crypto: it exploits the fact that users tend to rely on a visual inspection of an address.
Scale of the Threat: Daily Incidents and Affected Users
We are seeing address poisoning scams on an alarming scale. According to Blockade, the security firm has put the numbers in perspective: every day since January 2025 there have been more than 160,000 such incidents. The figures from Coin Bureau are equally telling; they note that over a million Binance users were tricked into giving up their assets to deceptive addresses in the two months leading up to December 2025. Given how widespread these attacks have become, it is imperative that platforms improve wallet security and that users exercise much more caution.
Ethereum Network Updates and the Surge in Attacks
One can point to the Ethereum network upgrade of December 2025 as a major reason for the recent upsurge in address poisoning scams. While the overhaul was meant to bring down Layer 2 transaction fees, it had the unintended effect of lowering the cost for scammers to run mass ‘dusting’ operations. The figures bear this out: January 2026 saw a spike in such attacks to 3.4 million. According to research from Coin Bureau, attackers are methodically targeting new users; two out of three new Ethereum addresses were hit with a dust transaction immediately after their first stablecoin activity.
Private Key Security Remains the Weakest Link
Coin Bureau has put the matter in perspective: for all the concern over address poisoning scams, it is private key management that poses the greatest security challenge. The numbers bear this out; more than 80 percent of crypto assets that are stolen go missing due to an infrastructure breach where a private key or recovery phrase has been compromised. Then there is the recent spate of address poisoning to consider. It is a case in point that as new attack methods emerge, every holder of crypto needs to make the protection of private keys and sound security procedures their top priority.
Source — Coin Bureau: https://www.youtube.com/watch?v=Z6j-eOB8pZk