Scam-Address Payment
Pronunciation: SKAM AD-dress PAY-muhnt
Definition
Scam-Address Payment is a payment sent to or received from an address credibly associated with fraud, impersonation, theft, phishing, or another scam pattern.
Overview
How it works and why it matters
Scam-address payment occurs when funds are intentionally or mistakenly sent to a fraudulent recipient controlled or presented by an attacker. Typical vectors include address poisoning, clipboard replacement, fake invoices, impersonation and malicious QR codes. Blockchain validity does not verify the receiver's identity.
Important technical and operational details
Related operational concepts include Crypto Payment Address Poisoning , Fake Crypto Payment Proof , and Crypto Payment Clipboard Hijacking .
Specific scope: a payment sent to or received from an address credibly or another scam pattern.
Practical decision points
Most address-substitution attacks exploit a trusted workflow rather than breaking blockchain cryptography. A fake vendor invoice, malicious browser extension or clipboard hijacker can change the destination even when the underlying wallet signs correctly. Safeguards include independent address verification, approved beneficiary lists, clear transaction review screens, limits for new recipients and a separate authorization channel for changes. Detecting suspicious addresses requires judgment: an explorer label or blacklist cannot establish innocence or guilt. Once a transfer settles, recovery depends on recipient cooperation or lawful intervention, not on re-signing or invalidating the original transaction.
Related concepts
Crypto Payment Address Poisoning; Fake Crypto Payment Proof; Crypto Payment Clipboard Hijacking
Further reading
Example
An operator copies an address from a recent transaction list, mistaking an attacker-made lookalike for a saved vendor. A transaction may settle irreversibly while never reaching the intended supplier. Out-of-band address confirmation and trusted address books reduce this risk.
Comparison
A blockchain explorer can verify where funds went, not whether the recipient was legitimate. Never rely solely on matching the first and last few address characters.
Key Takeaway
Blockchain validity cannot establish that an apparently familiar destination belongs to the intended party.
Sources
- Sanctions Compliance Guidance for the Virtual Currency Industry — U.S. Treasury OFAC (2026-08-02)
- OFAC Virtual Currency FAQs — U.S. Treasury OFAC (2026-08-02)
- Payment Processing — Bitcoin Developer Guide (2026-08-02)