First, identify the network
| Address starts with | Network | Explorer |
|---|---|---|
| T, 34 characters | TRON (TRC20) | Tronscan |
| 0x, 42 characters | Ethereum (ERC20) or BNB Chain (BEP20) | Etherscan or BscScan; check both |
The five-minute address check
- Labels. Paste the address into the explorer you typed in yourself. Look for tags such as “Phish”, “Fake” or “Scam”, and for a warning banner on the page.
- Age. Look at the first transaction. An address created days ago for a “long-established company” is a warning.
- Pattern. Look at the transfers. Many incoming payments from different people, each forwarded out within minutes, is a collection pattern.
- Reports. Search the address on a scam report database such as Chainabuse, and in a web search with the word scam.
- Freeze status. Check whether Tether has blacklisted the address. See the USDT freeze checker.
How to read what you find
| What you see | What it suggests |
|---|---|
| A scam or phishing label | Reported enough times for the explorer to flag it. Do not pay. |
| Reports on Chainabuse matching your situation | Others met the same scam. Do not pay. |
| Frozen by Tether | Linked to a law enforcement request. Do not pay. |
| New address, no history | No evidence either way. Rely on the offer itself. |
| Long history with an exchange label | An exchange deposit address. Ask why a private person gave it to you. |
What an address check cannot tell you
Scammers create new addresses constantly, so a clean address proves nothing. The offer matters more than the address: USDT below market, flash USDT, guaranteed returns or a fee to release funds are scams whatever the address looks like. Use the red flags alongside this check.
Check the address is the one you meant
Before sending, compare the full address with the one you were given, not just the first and last characters. Scammers create look-alike addresses and plant them in your history with zero-value transfers. See address poisoning.
If the address is a scam
- Report it on Chainabuse with the details of the scam.
- Report the seller or contact on the platform where you met them.
- If you already paid, keep the transaction hash and follow our recovery steps.
Worked example: checking an address before a P2P payment
A seller on a Telegram group offers 5,000 USDT and gives you a TRON address to pay first. Here is what the check looks like in practice.
- The address starts with T, so you open Tronscan by typing its address and paste it in.
- The first transaction is from three days ago. The seller said they had traded for years.
- The transfers tab shows a dozen incoming USDT payments of 200 to 1,500 from different senders, each moved out to the same second address within an hour.
- A search on Chainabuse finds two reports describing a “bulk USDT seller” on Telegram.
Each point alone could have an innocent explanation. Together they describe a collection address. The right move is not to pay, and to report the address with what you saw.
Which tools to trust for an address check
| Tool | What it shows | Watch out for |
|---|---|---|
| Tronscan, Etherscan, BscScan | Full history, labels and token holdings | Look-alike explorer sites; type the address yourself |
| Chainabuse | Community scam reports by address | Absence of reports proves nothing |
| The USDT contract’s blacklist check | Whether Tether froze the address | Only applies to official USDT |
| Third-party “address checker” sites | Risk scores | Never connect a wallet or pay to see a result |
If a site asks you to connect your wallet to check someone else’s address, close it. See fake verification sites.
Questions people ask about checking addresses
Can a scammer change the address after I check it?
Yes. Some send a second message with a “new” address, or rely on clipboard malware that swaps the address when you paste. Compare the full address on the confirmation screen just before you send.
The address belongs to an exchange. Is that safer?
An exchange deposit address means the funds go into someone’s exchange account. That account holder can still be a scammer. It does help investigators later, because exchanges know their customers.
Should I send a test amount to check the address?
A test proves the address can receive, nothing more. Scammers are happy to receive tests.
Questions people ask
How do I check if a crypto address is a scam?
Look it up on the network’s explorer for warning labels and its transaction pattern, search scam report databases like Chainabuse, and check whether Tether has frozen it.
Does a clean address mean it is safe?
No. New scam addresses have no history. Judge the offer as well as the address.
Can I see who owns a USDT address?
Not directly. Explorers show activity, and sometimes labels for exchanges or known scams, but not personal names.
Where do I report a scam address?
On Chainabuse, on the platform where you met the scammer, and to the police if you lost money.
Sources
Not sure about an offer?
Send it to us before you pay. A person reads it. It costs nothing.
Ask us about it