MetaMask launches address poisoning attack detection feature

According to ChainCatcher, citing Crowdfund Insider, MetaMask has launched an address poisoning attack detection feature to identify scam addresses that are highly similar to those users have previously interacted with. Address poisoning attacks refer to attackers sending small amounts of tokens to a user's wallet, causing disguised addresses to appear in transaction histories and tricking users into copying and transferring to the wrong address. In recent years, address poisoning attacks have surged. According to security data from Blockaid alone, between January 2025 and February 2026, there were over 65.4 million such incidents.

The new MetaMask feature automatically compares pasted addresses with previously interacted addresses when users paste an address; if the beginning and ending characters match but the middle characters differ, a blocking alert will appear during the transfer process. MetaMask has also improved address display by showing more characters, reducing the possibility of confusion. This feature is now available on MetaMask Mobile and the browser extension.