← Verdix

Base address poisoning checker

Paste a Base address before you send funds to it. Free. We check it against the lookalike addresses, fake tokens and poisoning contracts our watcher has flagged on Base. Ethereum addresses can be checked too, against a daily scan (not live).

What is address poisoning?

A scammer watches who you pay. Minutes later they create an address that starts and ends with the same characters as your real recipient, and make it appear in your wallet history: with a zero-value transfer, or with a fake token named like USDC. The next time you copy an address from your history, you may copy theirs. The funds are gone the moment the transaction confirms.

How to protect yourself

  1. Never copy an address from your transaction history. Take it from the recipient directly, or from your wallet's saved address book.
  2. Compare the whole address, not just the first and last few characters. Poisoners match those on purpose.
  3. After a test payment, don't re-copy the address. Poisoners strike between the test and the real payment, often within minutes. Reuse the address you already verified.

What the answer means

Flagged: our watcher saw this address in an address-poisoning transfer on Base (as the lookalike, the fake token, or the contract sending them). Treat it with caution and double-check the full address with your recipient. How an address gets flagged →

This is an automated flag, not an accusation: it records what our watcher saw on-chain, not who controls the address.

Not flagged: we have no poisoning record for it. That does not mean it is safe: this checker only covers address poisoning on Base, seen since 23 September 2026. It doesn't check sanctions, scam lists or contracts. The Verdix API does, from $0.01 per check.

Ethereum: we scan each finished UTC day once, the next morning, for 4+4 lookalikes that received a zero-value or fake-token bait transfer (seen since 28 September 2026). An Ethereum answer is never live: it shows the last day fully scanned (“Data through”), so a lookalike planted today won't show until tomorrow.

Think an address is flagged by mistake? Email lauras@verdixapi.com and we'll review and correct it.

If our watcher is running behind, the checker says so and gives no answer rather than an out-of-date one.

For developers

The same check as JSON, free and rate-limited (30 per minute, 500 per day per IP):

curl 'https://api.verdixapi.com/check/api?address=0x…'
{"flagged": true, "first_seen": "2026-10-02T14:31:07Z", "kind": "poisoning_lookalike"}

kind is poisoning_lookalike, fake_token or poisoning_dispatcher; first_seen and kind are null when not flagged.

For Ethereum add &chain=ethereum: the answer also carries data_through (last UTC day fully scanned) and "coverage": "daily, not live".

For businesses: daily file of flagged addresses (API, updated hourly, on request), free sample and 14-day trial → Verdix for businesses

Run a company? Get a free daily e-mail when a lookalike of one of your own Base wallets is flagged: Verdix Watch.