← Verdix

Base address poisoning checker

Paste a Base address before you send funds to it. Free. We check it against the lookalike addresses, fake tokens and poisoning contracts our watcher has flagged on Base.

What is address poisoning?

A scammer watches who you pay. Minutes later they create an address that starts and ends with the same characters as your real recipient, and make it appear in your wallet history: with a zero-value transfer, or with a fake token named like USDC. The next time you copy an address from your history, you may copy theirs. The funds are gone the moment the transaction confirms.

How to protect yourself

  1. Never copy an address from your transaction history. Take it from the recipient directly, or from your wallet's saved address book.
  2. Compare the whole address, not just the first and last few characters. Poisoners match those on purpose.
  3. After a test payment, don't re-copy the address. Poisoners strike between the test and the real payment, often within minutes. Reuse the address you already verified.

What the answer means

Flagged: our watcher saw this address in an address-poisoning transfer on Base (as the lookalike, the fake token, or the contract sending them). Treat it with caution and double-check the full address with your recipient. How an address gets flagged →

This is an automated flag, not an accusation: it records what our watcher saw on-chain, not who controls the address.

Not flagged: we have no poisoning record for it. That does not mean it is safe: this checker only covers address poisoning on Base, seen since 23 September 2026. It doesn't check sanctions, scam lists or contracts. The Verdix API does, from $0.01 per check.

Think an address is flagged by mistake? Email lauras@verdixapi.com and we'll review and correct it.

If our watcher is running behind, the checker says so and gives no answer rather than an out-of-date one.

For developers

The same check as JSON, free and rate-limited (30 per minute, 500 per day per IP):

curl 'https://api.verdixapi.com/check/api?address=0x…'
{"flagged": true, "first_seen": "2026-10-02T14:31:07Z", "kind": "poisoning_lookalike"}

kind is poisoning_lookalike, fake_token or poisoning_dispatcher; first_seen and kind are null when not flagged.

For businesses: real-time feed / API of flagged addresses → lauras@verdixapi.com