Learn to identify and avoid zero-value transfer scams
Educational Purpose Only
Scammers use a technique called "TransferFrom Zero Transfer" to confuse users and potentially trick
them into making mistakes with their crypto assets. This challenge will teach you how to identify
and avoid these scams.
In this simulation, you'll experience how scammers use the TransferFrom function to execute
zero-value transfers that appear in your transaction history, creating spoofed addresses that look
similar to legitimate ones you've interacted with before.
These zero-value transfers are a common tactic used by scammers to:
Create spoofed addresses that look similar to legitimate addresses you've interacted with
Establish a transaction history with these fake addresses
Later use these addresses in phishing attempts, hoping you'll mistake them for legitimate
addresses
Notice how the addresses 0x1234...567890 and 0x1234...567890 look very similar? This is intentional!
Scammers use various techniques to make addresses look similar:
Using similar character patterns at the beginning and end
Relying on the fact that most wallets truncate addresses in the middle
Exploiting the human tendency to only check the first and last few characters
Note: Etherscan has a default setting enabled called "Zero-Value Token
Transfers" that hides zero-value token transfers from being displayed on the site. However, TRON
blockchain explorers still show these transactions, making this attack vector still relevant on
TRON.
Complete the Challenge
To complete this challenge, identify the correct addresses:
Challenge Completed!
Great job identifying the zero-value transfer scam! Here's how to protect yourself:
Always verify the full address - Don't rely on truncated addresses shown in
wallets
Use address book features - Save addresses you frequently interact with
Check transaction history carefully - Be suspicious of zero-value transfers
Use hardware wallets - They display the full address for verification
Enable security features - Use whitelisting and transaction signing
confirmations