How to Verify a Token's Official Contract Address

To verify a token's official contract address, take the address from the project's own website or documentation, confirm it matches on at least one independent source, and check on a block explorer that the contract's history and holders look like the real project. Names and tickers prove nothing — anyone can create a token called "Ethereum" with the ticker ETH — so the contract address is the only reliable identifier.

Copycat tokens are one of the most common ways people lose money, especially right after a new project launches or trends on social media. Scammers deploy look-alike tokens within minutes, buy their own liquidity and wait for rushed buyers. A two-minute check prevents almost all of these losses.

Why the contract address is the only identifier that matters

On smart-contract blockchains such as Ethereum and Solana, a token is simply a program deployed at an address. The name, ticker and logo are labels the deployer chooses. Nothing stops a second, third or hundredth token from using exactly the same labels.

Wallets and decentralized exchanges often display the label first and the address in small print, which is why fake tokens work. If you search a DEX for a popular ticker you may see several results with identical names. Only one of them — at most — is the real token. See also: How to Use a Decentralized Exchange (DEX) for the First Time. Our article How to Check an NFT Is Authentic expands on this point.

The address, by contrast, is unique on its network. If you know the official address, you can never be fooled by a copycat, no matter how convincing the name or logo is. Related reading: What Is a Crypto Wallet Address? Formats and Safety.

Step 1: Start from the project's official channels

Your first source should always be the project itself:

1. 1The official website. Most projects publish the address on their homepage, a "token" page or in their documentation. Make sure you are on the real domain — fake sites are common, so check the URL carefully and avoid clicking links from ads. Our guide on how to verify a website is the official project site covers this in detail.
2. 2The official documentation or GitHub. Technical docs usually list deployed contracts per network.
3. 3Official announcements. A pinned post on the project's verified social account often contains the address at launch.

If the project does not publish its contract address anywhere official, treat that as a warning sign in itself.

Step 2: Cross-check with an independent source

One source can be compromised — websites get hacked, and social accounts get taken over. Confirm the address with at least one independent source that you reach on your own:

• A reputable market-data site. On every coin page at Certified Crypto Market, the contract addresses we list are shown per network, so you can compare them character by character.
• The listing page on a major exchange, which often shows the deposit network and contract.
• The project's documentation mirrored on GitHub.

Compare the entire address, not just the first and last few characters. Attackers deliberately generate addresses that start and end with the same characters as the real one — the same trick used in address poisoning attacks.

Step 3: Inspect the contract on a block explorer

Paste the address into the block explorer for the right network (Etherscan for Ethereum, for example, or a Solana explorer). If you have never used one, our walkthrough on how to use a block explorer explains the basics. Then check:

A token that claims to be an established project but was deployed yesterday is almost certainly fake. For a deeper look, see How to Read an Etherscan Token Page.

Step 4: Match the address to the network

Many projects issue the same token on several chains — for example natively on Ethereum and as bridged versions on layer-2 networks. Each version usually has its own contract address. If you want to go further, read NFT Royalties Explained.

Before you buy or send anything:

• Confirm which network your wallet or exchange is using.
• Look up the official address for that specific network.
• Be careful with bridged versions: some are official, while others are created by third-party bridges and may not be supported by the project.

Sending tokens on the wrong network is a separate but equally expensive mistake. Our guide to choosing the right network when withdrawing from an exchange walks through it.

Step 5: Add the token to your wallet the safe way

Once you have confirmed the address, add the token manually in your wallet using that address rather than searching by name. Save the address somewhere you control, such as a note or a watchlist, so you don't repeat the search next time — repeated searches are where mistakes creep in. Our article How to Add a Custom Token to Your Wallet Safely expands on this point.

Common traps to avoid

• Addresses in replies and DMs. Scammers reply to official posts with "the contract is…" messages. Official teams do not announce addresses in replies.
• Search-ad links. Paid ads for popular token names frequently point to phishing sites or fake tokens.
• "Migration" announcements. Fake messages claiming a token has moved to a new contract are a classic scam. A real migration is announced on all official channels at once, as explained in our article on fake token contracts.
• Trusting the logo. Logos are uploaded by token creators and prove nothing.

Bottom line

Treat a token's name and ticker as decoration and its contract address as its identity. Take the address from the official source, confirm it independently, check its history on a block explorer and make sure it matches the network you use. These steps take a couple of minutes and remove the single most common way people end up holding a worthless copycat.