Learn

How to check if a crypto address is a scam

A crypto scam checker can only find known problems. You can check an address for free before you send anything: look up its labels and history on a block explorer, see who it has dealt with, and search for public scam reports. Together these catch many known scam addresses, but none of them can prove an address is safe. Here are the checks in the order that makes sense, and what each one can and cannot tell you.

Read this first: an address check finds known problems. A brand-new scam address has no history and no reports yet, so a clean result is a reason to feel a bit better, never a guarantee. If someone is pressuring you to pay, that pressure is the warning sign, whatever the address looks like.

1. Confirm it is exactly the address you meant, on the right chain

Before judging an address, make sure it is the one you were supposed to get. Scammers create look-alike addresses that start and end with the same characters as a real one, and "address poisoning" tricks you into copying one from your own transaction history. Compare the full address, not just the first and last few characters, and get it from a source you trust rather than from a chat message. Also check the network: the same Ethereum-style address exists on many chains, and a token sent on the wrong one can be lost.

2. Look it up on a block explorer

Paste the address into the explorer for its chain, for example Etherscan for Ethereum, Tronscan for Tron or Solscan for Solana. Look for a name tag or warning label (explorers tag some addresses as phishing or hacks), and read any comments left by other users. No label proves nothing either way; see what a "known entity" label actually means. If you are new to explorers, reading Etherscan for beginners explains the tabs and columns.

3. Check how old it is and what it does

When did the address first appear, and has it been active since? A wallet created last week that claims to belong to an established seller does not fit the story. New alone proves nothing, but it should make you slow down. Also look at the pattern: many small payments in from unrelated wallets, all quickly forwarded to one destination, is typical of addresses that collect victims' money (and also of some legitimate businesses, so treat it as a lead, not a verdict).

4. See who it is connected to

Scam addresses rarely work alone. If the address has sent funds to or received funds from an address that is already known as a scam, a drainer or an exploit, that connection matters more than the address's own label. Paste the address into Hopchain and every counterparty is shown once, with known names attached. Connections that appear in public scam and exploit lists are marked red and link to a short explainer. You can browse the flagged addresses we cover on the flagged addresses page. The list is small compared with the whole chain, so a missing flag means little, while a flag is worth taking seriously.

5. Search for public reports

Search the full address in a web search engine and in community report sites such as Chainabuse. Reports are made by victims and are not verified, so they can be wrong or malicious, but an address with several matching reports from different people is a strong reason to stop. Absence of reports is, again, weak evidence: most addresses are reported only after someone has lost money.

6. If it is a token or contract, check that too

If the address is a smart contract or a token rather than a person's wallet, the questions change. Is the contract's code verified on the explorer? How old is it? Does a token security checker flag it for things like a honeypot (a token you can buy but not sell) or hidden owner powers? Token-level checkers such as GoPlus Security cover this. (Hopchain's own badge uses GoPlus only to check whether the searched address itself is flagged as malicious, not to audit a token's code.) Be extra careful with any contract that asks you to approve unlimited spending; see unlimited token approvals and how to revoke them.

7. Send a small test amount first

If everything looks fine and you still need to pay, send a small amount first and confirm that it arrived and that the recipient sees it before sending the rest. This protects against typos and wrong-network mistakes. It does not protect you against a recipient who simply takes your money, so it is a mistake-catcher, not a fraud check.

Warning signs that matter more than the address

  • Urgency, secrecy, or a request to move the conversation to a private chat.
  • Guaranteed returns, "limited" offers, or a fee you must pay before you can withdraw your own money.
  • A request to "verify" or "sync" your wallet by signing a message, connecting to an unfamiliar site, or entering your seed phrase. Never share your seed phrase.
  • A payment address that changed between messages, or differs from the one on the official site.

More on judging a counterparty before a payment: how to check a wallet before sending crypto.

What a clean result does not tell you

"No flags found" only means nothing turned up in the sources that were checked. Every list is incomplete, new scam addresses appear constantly, and a scammer can use a fresh address for each victim. An address can also be perfectly clean and still belong to someone who will not deliver what you paid for. Use the checks to rule out the obvious, and let your judgment about the person or offer make the final call.

Frequently asked questions

Can I check if a crypto address is a scam for free?
Yes. A block explorer shows an address's history and any public labels, scam-report sites list community reports, and Hopchain shows who an address has dealt with and flags connections that appear in public scam and exploit lists. None of this needs an account.

Does "no flags found" mean a crypto address is safe?
No. It only means nothing turned up in the sources that were checked. New scam addresses are created constantly and no list covers every address on every chain, so a clean result lowers the odds of a known problem but never proves safety.

What if the address belongs to a token or smart contract instead of a person?
Check whether the contract's code is verified on the block explorer, how old it is, and run the token through a contract security checker. Be especially careful with any contract that asks you to approve unlimited spending or to sign something you do not understand.

I already sent crypto to a scam address. Can I get it back?
Usually not, because blockchain transactions cannot be reversed. Stop sending money, keep the transaction hashes, report it to the exchange if the funds moved to one and to the police or fraud authority in your country, and ignore anyone who offers to recover the funds for a fee, since that is a common second scam.

This is general information, not financial, legal or security advice.

Keep reading

Have an address to check? Paste it on the home page. It's free and needs no signup.