deploya tokenTools / Address Check
Menu
Network
Theme
⌘K
HomeAll tools
Deployment ConsoleTax TokenVanity Address
Revoke AuthoritiesMint & BurnUpdate MetadataUpdate NFTFreeze AccountsBulk FreezeTransfer Fee SettingsCollect Transfer Fees
Transaction CheckAddress CheckLaunch ChecklistLogo & Metadata CheckRug Check
MultisenderNative MultisenderHolder SnapshotTop Holder AirdropClaim SiteToken VestingToken StakingPresaleNFT Holder SnapshotNFT Hashlist
Liquidity PoolAdd / Remove LiquidityOpenBook MarketBurn LP TokensLiquidity Locker
IncineratorNFT IncineratorNative Wrapper
GuidesFAQ

Check a Solana Address Before You Send

Find out what an address really is, and whether a lookalike has been planted in your history to be mistaken for it.

Solana
Note
Never copy an important address from your history. That is exactly where a poisoned lookalike is planted, and a transfer to the wrong address is permanent, so verify here and copy from the original source every time.

Common questions

What is address poisoning?

An attacker generates an address that matches the first and last few characters of one you use, then sends you a tiny amount from it so it lands in your transaction history. Later you copy an address out of that history, recognise the shortened form your wallet shows, and pay the attacker instead. It costs them almost nothing and it works because nobody reads all 44 characters.

Could a lookalike be a coincidence?

Effectively never. Two different addresses agreeing on four specific characters at the start AND four at the end happens with probability around one in 58 to the eighth power, roughly one in 128 trillion. If this tool finds one in your history, someone generated it deliberately to be mistaken for an address you use.

How much of my history does it check?

The last 25 transactions of the wallet you give it. That is deliberate: poisoning dust is sent to be seen, so it sits in recent history where a person would actually scroll, and a deeper scan is more likely to be refused by a public RPC endpoint than to find anything new.

Do I need to connect my wallet?

No, and you should not have to. Paste your wallet's address as text. This tool only reads public on-chain data and signs nothing, so there is no reason for it to touch your wallet and no way for it to move anything.

It says the address is a token mint. What does that mean?

You have pasted the token's own address instead of the recipient's. It is the most common paste mistake there is, because both appear side by side on an explorer page. Tokens sent to a mint are destroyed permanently.

What does off the curve mean?

The address is valid but no keypair could ever sign for it, so whatever arrives there can never be spent by anyone. Program-derived addresses work this way. They parse perfectly and look completely normal, which is what makes them dangerous as a destination.

Can I get funds back if I already sent to the wrong address?

No. Solana transfers are final and there is no reversal, no clawback and nobody to appeal to. If the address belongs to an attacker they simply have your funds; if it belongs to nobody the funds are gone. This tool exists because checking beforehand is the only protection that exists.

Why this tool exists

Every transfer on this site is final, and valid is a very low bar: a program, a token mint and a token account are all perfectly valid addresses that destroy whatever they receive. Address poisoning exploits the same finality by planting a lookalike in your history that matches the few characters your wallet shows, so the rule worth adopting is to compare the whole address and copy it from the original source, never from a history or a chat.

The Multisender, the SOL Multisender and the Top Holder Airdrop all validate every address before signing, and you can check a token rather than an address with the Rug Checker.

Sources

  • Solana: SPL Token basics
Note
Never copy an important address from your history. That is exactly where a poisoned lookalike is planted, and a transfer to the wrong address is permanent, so verify here and copy from the original source every time.
More in Checks
  • Transaction Check
  • Launch Checklist
  • Logo & Metadata Check
  • Rug Check
All tools →
deploya token
HomeAll toolsGuidesFAQ

DeployAToken is a non-custodial interface. You sign every transaction from your own wallet and we never take custody of your keys or your tokens. Creating a token is not an offer, endorsement or guarantee of value, and nothing here is financial or legal advice. Fees shown are estimates; the exact amount is displayed in your wallet before you approve.