Crypto mistakes usually end the same way.
Money gets sent to the wrong wallet…
and it’s gone forever.
No refunds.
No support tickets.
Just a permanent loss on the blockchain.
But a recent incident in the TON ecosystem had a very unusual ending.
It Started Normally
The user had already sent funds earlier that day to a trusted wallet address.
Two transactions went through successfully:
• 10,000 TON (~$13K)
• 9,000 TON (~$11.7K)
Everything looked normal. The address was familiar, and the transfers worked perfectly.
Nothing seemed suspicious.
But scammers were already preparing a trap.
The Dusting Attack
A little later, two tiny transactions appeared in the wallet:
• 0.0001 TON
• 0.0001 TON
These tiny transfers were part of a dusting attack.
Scammers often send microscopic amounts of crypto from addresses that look almost identical to a real one. They copy the same first and last characters so the address looks legitimate in transaction history.
The goal is simple:
Make the fake address look familiar enough that someone copies it by mistake.
The $160,000 Mistake
Later, the user wanted to send a much larger amount.
126,000 TON (~$160,000).
Instead of pasting the saved address or verifying it fully, the user opened the transaction history and copied what looked like the same wallet.
But it wasn’t.
It was the fake address planted by the dusting attack.
The transaction went through.
And just like that… $160,000 was gone.
The Twist Nobody Expected
Normally, this is where the story ends.
But minutes later, something strange happened.
The scammer sent funds back.
Not all of it — but most of it.
116,000 TON (~$150K) was returned to the victim.
The scammer kept 10,000 TON (~$13K).
Along with the transfer, he left a message:
“I'm sorry, but this is far too much. Please take it back — I know it's a serious amount of money. Peace.”
A scammer apologizing is something you almost never see in crypto.
The Real Lesson
Whether it was guilt, reputation, or something else, this incident highlights an important security lesson.
Dusting attacks rely on one very common habit:
Copying wallet addresses from transaction history.
To stay safe:
• Always verify the entire wallet address
• Save trusted wallets in contacts
• Ignore random micro-transactions
• Never rely on transaction history alone
Because next time…
The scammer might not return anything.