---
title: "Whether an address was targeted by address poisoning"
method: GET
path: "/address_poisoning/{network}/{address}"
tags: ["Addresses"]
---

# Whether an address was targeted by address poisoning

`GET /address_poisoning/{network}/{address}`

## Request

- Base URL: `https://sochain.com/api/v3`
- URL: `https://sochain.com/api/v3/address_poisoning/{network}/{address}`
- Auth: one of:
  - none
  - API key in header `API-KEY`
  - API key in query parameter `api_key`

Look-alike addresses that sent it dust, imitating an address it really paid or was paid by, so a careless copy from its history pays the scammer.

## Path parameters

- `network` 'BTC' | 'LTC' | 'DOGE' | 'ZEC' | 'BTCTEST' | 'LTCTEST' | 'DOGETEST' | 'ZECTEST', required
- `address` string, required

## Query parameters

- `limit` integer

## Response `200`

Success.

- object
  - `status` 'success', required
  - `data` AddressPoisoning, required
    - `address` string, required
    - `building` boolean, required: true while the check is catching up on the network's history.
    - `findings` object[], required
      - `dust_txid` string
      - `amount` string: An exact decimal amount of coins with 8 decimals. Signed amounts may start with '-'. Parse as an integer of the smallest unit, not a float.
      - `sender` string: The look-alike.
      - `imitates` string: The real address it copies.
      - `real_txid` string
      - `real_height` integer
      - `real_amount` string: An exact decimal amount of coins with 8 decimals. Signed amounts may start with '-'. Parse as an integer of the smallest unit, not a float.
      - `receiver_paid` boolean
      - `shared_prefix` integer
      - `shared_suffix` integer
      - `sender_kind` 'new' | 'dust_bot'
      - `sender_txs` integer
      - `height` integer, nullable
      - `confirmed` boolean

## Other responses

- `400`: A bad parameter or body; the message says which.
- `401`: An invalid key, no key where one is needed (buckets, webhooks, /account_info), a locked account or expired plan, or both the month's requests and the keyless rate used up. Kept as 401, with this message, for v3 compatibility.
- `404`: Unknown network, not an address on it, or a network without the check.
- `429`: Without a key, past the day's 2,500 lookups from this IP while SoChain is busy (Retry-After: 60), or past the day's most (Retry-After: seconds to 00:00 UTC). With or without one, too many requests in flight at once (Retry-After: 1, not counted).
- `503`: Briefly unavailable; retry with backoff. May carry Retry-After.

---

[API](https://skmtc.dev/sochain/apis/sochain-api.md) · [All operations](https://skmtc.dev/sochain/apis/sochain-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sochain/apis/sochain-api/revisions/80682797b38f?raw)