Phishing & Address Poisoning
Strict Definition
"Deceptive attacks designed to steal private keys or trick users into sending funds to the wrong address."
Liability Check // Risk Analysis
The 'User Error' risk. Scammers send a $0 transaction to your wallet from an address that looks *almost identical* to your own. You then 'copy/paste' that address from your history for your next real transaction, sending funds to the attacker.
Knowledge Context // Related Terms
Auditor NotesVS-AN-2026
"Implement 'Contact Whitelisting'—only send funds to addresses that have been previously 'saved and verified' in your software."
"Always verify the *entire* address, not just the first and last 4 characters. Use 'Transaction Simulation' to see the recipient's metadata."
"Conduct monthly security training for treasury staff specifically focused on 'Visual Address Verification' and phishing signatures."
SCHEMA_VER: AEO_3.2
LAST_AUDIT: 1/8/2026
HASH: NECDO