Copy-Paste Error Costs Crypto User $50 Million in Wallet Scam

Key Highlights

Copy-paste errors in crypto can cost millions, showing that careful address checks are vital to avoid devastating losses.
Scammers rely on trust and urgency, not tech flaws, using impersonation and branding tricks to steal funds from even cautious users.
Wallet mistakes aren’t just USDT—sending the wrong tokens or collectibles can cause costly losses, highlighting the need for user vigilance.

A simple copy-paste mistake cost a cryptocurrency user $50 million in USDT. According to blockchain analytics platform Lookonchain, the incident involved a user identified as 0xcB80, who became a victim of an address-poisoning scam when he intended to transfer 50 million USDT.

Before the main transfer, the user sent 50 USDT as a test to his own wallet, 0xbaf4b…95F8b5. However, immediately after, a scammer spoofed the same first and last four characters of the wallet, thus discovering the common approach of concealing middle wallet address characters.

As such, when the victim copied the address from transaction history for the full transfer, close to 50 million USDT went directly to the scammer. This incident has underlined how small mistakes could spell disaster in crypto.

A victim (0xcB80) lost $50M due to a copy-paste address mistake.
Before transferring 50M $USDT, the victim sent 50 $USDT as a test to his own address 0xbaf4b1aF…B6495F8b5.
The scammer immediately spoofed a wallet with the same first and last 4 characters and performed an… pic.twitter.com/eGEx2oHiwA
— Lookonchain (@lookonchain) December 20, 2025

Scammers exploit trust over technology

The case mirrors larger trends in crypto fraud, where attackers exploit trust rather than technology. Recently, the Brooklyn District Attorney’s Office charged a man for running an impersonation scheme targeting Coinbase customers.

The defendant allegedly posed as a Coinbase representative, convincing victims their accounts were at risk. Victims then transferred funds to wallets controlled by the scammer, resulting in nearly $16 million in alleged thefts. Coinbase confirmed their cooperation with law enforcement, stating, “Crypto scams aren’t anon. Coinbase is committed to working with law enforcement to trace funds, support victims, and pursue accountability.”

ZachXBT, an independent blockchain investigator, added, “I am glad to share that the threat actor ‘Ronald Spektor’ (Ron) was recently arrested in New York. In November 2024, I published an investigation exposing his role in a $6M Coinbase support scam.”

These examples emphasize that psychological attacks will prove successful when technological defenses fail. Scammers use tactics such as urgency, reputable brand identities, and fraudulent legitimacy.

Wallet mistakes aren’t limited to USDT

Apart from such impersonation frauds, wallet management continues to be a problem. In April, one user mistakenly sent their Bitcoin Ordinal, which is like a non-fungible token (NFT), to the Binance deposit address for Bitcoin (BTC).

Binance was recommending its customers send only regular BTC. The mistake that occurred led to miscommunication and blame-shifting after the Ordinal turned up on the platform, Magic Eden. The incident sparked social media outrage, with accusations of theft, illustrating how easily human error can trigger public disputes and misunderstandings.

These incidents show just how important it is to be careful when sending crypto. Double-checking addresses and avoiding quick copy-paste shortcuts can prevent huge losses. Scammers rely on mistakes, not glitches in the system.