How to Check if a Crypto Address Is a Scam

How to Check if a Crypto Address Is a Scam Before You Send

You are about to send funds, accept a payment, or follow money across a ledger — and a 42-character hex string is staring back at you. Is it safe? Knowing how to check if a crypto address is a scam is the difference between a clean transaction and an irreversible loss. On a public blockchain, a transfer cannot be clawed back, so the only real protection is verification before you press send.

The problem is that a raw address tells you nothing. It looks identical whether it belongs to a legitimate counterparty or to a phishing operator who has already drained dozens of victims. You need a way to turn that opaque string into a verdict.

What the Noxos Scam Tracker Does

The Scam Tracker in Noxos answers one question fast: has this address been flagged before? Paste an address and it is checked against a flagged-address database — a curated and community-reported collection of known scammer, phishing, and honeypot wallets. You get back three things:

• A clear verdict — found or not-found, so there is no ambiguity about whether the address is on record.
• The category, if flagged — whether it has been associated with phishing, scam payouts, or honeypot contracts, so you understand the type of risk.
• Source attribution — where the flag came from, so the result is something you can stand behind rather than a black-box score.

A "not found" result is not a guarantee of safety — it means the address has no recorded history of abuse yet. But a "found" result is a hard stop. Treat it as a signal to walk away.

The 5-state diff banner: what changed since last time

Reputation is not static. An address that looked clean last week may be flagged today after fresh reports come in, and occasionally an address is cleared. The Scam Tracker remembers your previous scan of the same address and shows a diff banner across five states:

• Newly flagged — clean before, on record now. The most important alert.
• Newly clean — previously flagged, now cleared.
• Category changed — still flagged, but the type of abuse has shifted.
• Still flagged — the warning stands.
• Still clean — no change, no recorded abuse.

This turns a one-off check into ongoing situational awareness. If you re-screen a counterparty before each settlement, the banner tells you instantly whether anything has moved.

From a Single Flag to a Full Investigation

A verdict is the start, not the end. If an address comes back flagged, you usually want to know where the money went — and where it came from. The Scam Tracker includes a one-click "trace in case workspace" deep-link that opens a full multi-chain trace with the address already filled in.

From there you are no longer looking at a single wallet. You are following funds across chains and through bridges as they move toward exchanges and cash-out points. If you have not seen how that works, our guide to multi-chain fund tracing walks through the method investigators use to follow value end to end.

Who This Is For

Different users reach the same tool for different reasons:

• Serious crypto users screening a counterparty before an OTC trade or a large transfer.
• Compliance and AML teams running a quick pre-transaction check against known-bad wallets.
• Investigators and asset-recovery specialists confirming whether a suspect address is already on record before they commit to a deeper trace.
• Anyone who received an unexpected payment request and wants a second opinion that is not the sender's word.

Pair It With Labels and Domain Intelligence

A scam check is strongest when it is part of a layered workflow. Two companions make it sharper. First, address labels: even when a wallet is not flagged as malicious, knowing it is a known exchange wallet, a bridge, or a sanctioned address changes how you read it — see address labels explained. Second, most scams arrive through a fake site or a spoofed link before any address is ever shared, so screening the domain matters too. Our phishing and domain intel tool catches the lure before the wallet ever enters the picture.

Used together, you check the message, the domain, and the address — three independent signals instead of one hopeful guess.

Check First, Send Second

The cost of a scam check is seconds. The cost of skipping it is everything in the transaction. Before you send to an unfamiliar address, run it through the Scam Tracker, read the verdict and its source, watch the diff banner for anything newly flagged, and if something looks wrong, trace it in one click. Start screening addresses with Noxos and make verification a habit rather than an afterthought.