Crypto & wallets

Phishing Wallet Lookup

Network: PhishDestroyNew

Use Phishing Wallet Lookup

What it does

Look up crypto addresses in the PhishDestroy phishing-wallets database, the addresses that block explorers tag as phishing, before you send funds or answer a "support" agent.

The addresses you look up are sent to PhishDestroy (/phishing-wallet/api/wallet.php) and checked against the phishing-wallet database, which first asks for a one-time hCaptcha check in your browser.

Example

An ordinary Ethereum address

Input
0x52908400098527886E0F7030069857D2E4169EE7
Output (captured 2026-10-20)
One step first: the phishing-wallet database is protected against scraping by an hCaptcha check. Open the phishing-wallet database, complete the check there (it stays valid for an hour in this browser), then come back and press Look up again.

The address is sent to /phishing-wallet/api/wallet.php. The database first asks for a one-time hCaptcha check in your browser; after that the answer is either the record (network, explorer tag, balance, transactions, date added) or not in the database.

FAQ

Why does it ask me to verify on another page?

The phishing-wallet database is protected against automated scraping by an hCaptcha check. Complete it once on the phishing-wallet page; the check is tied to your browser and lasts an hour, and this tool then uses it for its lookups.

Where do the flagged addresses come from?

From blockchain explorers that tag addresses as phishing (name tags such as Fake_Phishing), collected by PhishDestroy for several networks. Each record shows the network, the explorer tag, the balance and transaction count, and when it was added.

What if an address is not in the database?

That only means no explorer tagged it as phishing yet. Compare it character by character with the address you expect, check it with the address-poisoning checker, and never trust an address copied from a chat or a transaction history.