Fake USDT and Token Impersonation Scams: How to Verify You Have the Real Contract

The FBI issued a specific warning about this in 2023 as impersonation scams grew over 1,000% year-over-year. Anyone can deploy an ERC-20 token with any name, ticker symbol, and logo in about five minutes. The technology has no built-in gatekeeping for what a token claims to be.

How token impersonation works

Deploying a fake token is straightforward. You write a standard ERC-20 contract, set the name to "Tether USD," the symbol to "USDT," and the decimals to 6 (matching the real thing). You upload Tether's logo. You mint as many tokens as you want. You send them to whoever you want. Cost: under $20 in gas.

The receiving wallet has no way to know this isn't the real USDT. It sees an incoming ERC-20 transaction, reads the self-reported name and symbol, and displays it accordingly. MetaMask, Trust Wallet, Coinbase Wallet — they all behave the same way. The token shows up looking exactly like real USDT.

The fake token has no value. It's not backed by dollars. It can't be redeemed anywhere. You can try to swap it on Uniswap — there's no liquidity. The only thing the contract can do is exist in your wallet and mislead you.

The scenarios where this causes real losses

P2P trades and OTC deals. Someone offers to buy your crypto with USDT. They send the USDT first to prove they have it. You see it arrive, verify the amount, and send your side of the deal. The USDT in your wallet is fake. They have your real crypto.

Freelance and service payments. A client pays an invoice in "USDT." You see the transaction, assume it's complete, and deliver the work or goods. You try to use your USDT later and it has no value.

Address poisoning combined with fake tokens. Scammers sometimes send tiny amounts of fake USDT from an address that looks like a legitimate exchange address, poisoning your transaction history with both a fake token and a fake source address at once.

How to verify the real contract address

The only reliable check is comparing the contract address against an authoritative source. The token's name means nothing — the address is what matters. Official contracts for the most common stablecoins on Ethereum:

• •USDT (Tether): 0xdAC17F958D2ee523a2206206994597C13D831ec7
• •USDC (Circle): 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48
• •DAI (MakerDAO): 0x6B175474E89094C44Da98b954EedeAC495271d0F
• •BUSD (Binance — deprecated): 0x4Fabb145d64652a948d72533023f6E7A623C7C53

For any other token, look it up on CoinGecko or CoinMarketCap before accepting payment. Both sites list official contract addresses for every chain. If the address on the transaction doesn't match the one listed on CoinGecko, it's fake.

Address poisoning attacks use a similar deception through your wallet history — read our guide on address poisoning attacks for the related threat. You can also learn how to read a blockchain transaction to verify contract details directly on Etherscan.

Frequently asked questions