Why address poisoning works without stealing private keys

Address poisoning works by cluttering your transaction history with fake entries, tricking you into sending funds to a scammer’s address by mistake.