USDT's popularity makes it the most-targeted token in crypto. These are the schemes that actually drain wallets today, and the countermeasures that work.
1. Address poisoning
Attackers watch the chain for your outgoing transfers, then send you a zero-value or dust transaction from an address crafted to look like one you recently used (same first 6 and last 6 characters). If you later copy your "recent" address from your history without checking, you paste theirs. Countermeasure: always verify the full address character by character, or better — use your own address book / QR, never your transaction history.
2. Fake support and "validation" sites
No legitimate service will ever ask for your seed phrase or private key — not for "validation", "syncing", "unlocking staking", or "reversing a stuck transaction". Any page that asks is a theft page. Our wallet never asks for your phrase after setup; anyone claiming to be from "USDT Wallet support" is an impostor — there is no account, therefore no support ticket system that could need your keys.
3. Lookalike tokens
Anyone can mint a token named "USDT" with any contract address. Fake USDT appears in airdrops and dust attacks hoping you will try to "swap" it through a malicious approval site. Countermeasure: compare the contract address against verified deployments (see our network page) and never interact with unexpected tokens.
4. Clipboard hijackers
Malware that swaps a copied crypto address for the attacker's. Countermeasure: after pasting, check at least the first 8 and last 8 characters against the intended address.
5. Malicious approvals
On EVM chains, signing a rogue approve lets a contract drain your token balance later — no second signature needed. Countermeasure: read what you sign; revoke unused allowances periodically via a revoke tool; keep a separate hot wallet with small balances.
The meta-habit
Self-custody means there is no admin who can reverse a mistake. Slow down on every send: right network, right address, right amount. Thirty extra seconds is the cheapest insurance in crypto.
