Crypto investor loses $2.6M in stablecoins in double phishing scam

Zero-Value Transfer Scams: A Growing Threat in the Cryptosphere

A sophisticated phishing technique known as a zero-value transfer (ZVT) is causing significant losses in the cryptocurrency space. This method abuses token transfer functions to trick victims into sending real funds to attackers. The attack begins with a seemingly innocuous transaction: the attacker initiates a transfer of zero tokens from the victim’s wallet to a spoofed address. Because no funds are actually transferred, the victim’s private key signature isn’t required for the transaction to be recorded on the blockchain.

The crucial element of the scam lies in the victim’s perception. The zero-value transaction appears in their transaction history, creating a false sense of familiarity and trust with the attacker’s address. This seemingly legitimate interaction paves the way for the second, devastating stage of the attack. Subsequently, the victim unknowingly sends substantial funds to the attacker’s address, believing it to be a safe recipient.

This technique represents a significant evolution of address poisoning, a tactic where attackers send minuscule amounts of cryptocurrency to addresses closely resembling the victim’s, often sharing the same beginning and ending characters. This encourages accidental reuse of the attacker’s address due to the user’s reliance on partial address matching or clipboard history. ZVT scams amplify this tactic by establishing apparent legitimacy through the prior zero-value transaction.

The scale of the problem is substantial. A January 2025 study revealed over 270 million poisoning attempts on BNB Chain and Ethereum between July 1, 2022, and June 30, 2024, with 6,000 resulting in losses exceeding $83 million. One recent high-profile case involved a victim losing $2.6 million in stablecoins (USDT) within three hours through two separate ZVT attacks. This highlights the devastating financial impact of these attacks and the need for increased user awareness and robust security measures.

The development of AI-based detection systems offers a glimmer of hope. Crypto cybersecurity firms are actively working to combat this threat, with some claiming detection success rates as high as 97%. However, user vigilance remains crucial in preventing these sophisticated attacks from succeeding. Understanding the mechanics of ZVT scams and practicing safe cryptocurrency handling habits are paramount to mitigating this growing risk.