Is it safe to share your wallet address? What it shows

Is it safe to share your wallet address? For receiving funds, yes: sharing it lets people pay you and read your on-chain history, but it cannot move your funds: that takes your private key or your signature, and the address carries neither. This guide is for anyone about to post an address in a bio, an invoice or a group chat. It walks each real risk with a check you can run, then shows how strangers can reach an address on Cherry (cherry.fun), the wallet-to-wallet messenger and community app for crypto where any wallet address can be messaged directly.

Yes, for receiving funds, with two conditions: you accept that the address shows everything it holds, and you never trust an address you did not copy from its source. Every Solana address and its holdings are public on-chain. Whoever has yours can see the following.

Someone with your address can	Someone with your address cannot
See every token, NFT and SOL balance it holds	Move any of it
Read every transfer in and out, with dates	Sign anything in your name
Follow transfers to the other wallets you use	Learn your private key or recovery phrase
Tie it to you, once it appears next to your name or a `.sol` or `.skr` name you use	Read your end-to-end encrypted DMs
Send you tokens, NFTs and tiny transfers you did not ask for	Approve or claim anything for you

The risk sits in the left column. Balances make you a target for scam DMs, and unsolicited transfers are how address poisoning and link-carrying spam tokens reach you.

Before you start

You need two things:

The address you plan to share, copied from the receive screen of your wallet app.
A block explorer such as Solana Explorer or Solscan , which show any address’s balances and history to anyone, with no sign-in.

Step 1: Look up your own address on an explorer

Paste the address into the explorer and read it the way a stranger would: balance, tokens, NFTs, and the transfer history back to its first transaction. If you own a .sol or .skr name, remember that it points at the address, so anyone who knows the name can find the wallet.

While you are there, look for tokens and NFTs you never bought. They are the usual spam: worthless tokens dressed as a known one, or an NFT whose name or description carries a website. Leave them alone and do not visit the link. Spotting a fake airdrop covers the claim pages they lead to.

You know it worked when you can list what the address reveals and you are comfortable with a stranger seeing all of it.

Share an address whose history you are happy to publish. One way to do that is a separate wallet for public use: it receives tips, payments and airdrops, holds little, and has never sent anything to their main wallet. That last part matters, because a single transfer between the two links them on-chain for good.

On Cherry, your account is a Cherry ID that can hold several wallets, and each one you link shows on your profile only as far as you choose. When you add a wallet in the Cherry web app, the screen says “Sign a message to prove it is yours. Nothing moves.” and then asks you to “Choose how much of it shows”. A wallet whose address your profile shows is tied to your name: its card in a chat reads “Belongs to” followed by your display name. The wallet you opened your account with starts with its address shown, wallets you add later start with it hidden, and you can change either. The Cherry Wallet, the wallet the web app creates when you sign up with Google, Apple or X, always shows. A wallet whose address your profile does not show looks, on Cherry, like any address with no account behind it.

That setting changes only what Cherry’s profile shows next to your name. On-chain, the address and its holdings stay public, and transfers between your wallets remain visible to anyone who follows them. Cherry ID explains how linked wallets work.

You know it worked when the wallet you are about to share has no transfers to or from a wallet you want kept apart.

Copy the address from your wallet’s receive screen, with its copy button or its QR code, every time. An address typed by hand or copied from an old message or your history can be wrong or tampered with. If you own a .sol or .skr name, you can share the name, and a payer whose wallet supports that name service can send to it directly. What a .sol domain is explains how those names point at a wallet.

You know it worked when the address you sent matches the receive screen character for character.

Step 4: Check the whole address on receipt

This step defends against address poisoning. Etherscan’s information center (January 2024) describes the pattern: attackers use a “vanity” address generator to create an address that closely resembles one you use, then send “tiny amounts of legitimate tokens” from it so it lands in your history. “When truncated in the middle, it appears exactly the same as the target address.” The next time you copy the latest address from your history, you copy theirs. Trezor’s guidance is to “avoid copying addresses from transaction history” and to send a small test transaction first.

The checks, for both sides of a payment:

Compare every character of the address, the middle included.
Copy from the source: your receive screen when you share, the recipient’s own message or name when you pay.
Never copy an address from your transaction history.
For a large transfer, send a small amount first and have the other side confirm it arrived.

Address poisoning has the full definition.

You know it worked when the payer reads back the full address, or the test transfer shows up on your receive screen.

Step 5: Handle the DMs that follow

A public address can be messaged. On Cherry, anyone can DM any wallet address, even one that has never signed in, and the conversation waits for its owner. What reaches you is limited:

A stranger’s free first DM lands in your Requests tab, under Hidden, with no notification.
Declining is silent: the sender is not told, and their request looks as unopened as before.
A stranger gets a notification only by sending a paid DM, 0.01 SOL by default as of 10 September 2026, and the message is delivered only after that payment confirms on-chain. The fee goes to Cherry’s treasury; the recipient receives none of it.
Brand-new wallets cannot post in public groups, and their free cold DMs land hidden like everyone else’s.

A request card shows the sender’s on-chain figures, Balance, Volume and NFTs among them, above “Accept” and “Decline”. It works both ways: whoever you DM sees those figures for your wallet, because they are public. DMs on Cherry are end-to-end encrypted, with keys derived from your wallet. Group chats are not, by design, so moderation and bots can work, and an address you post there is readable by everyone in the room. Message requests and paid DMs and Cherry’s anti-spam layers cover the rest.

You know it worked when strangers’ messages sit in Hidden until you open them, and only paid requests make your phone buzz.

Troubleshooting

A token I never bought appeared in my wallet. Anyone can send tokens to a public address. Do not swap it, open its URL, or use a site it names to get rid of it. If your wallet app can hide it from the list, that is all it needs.

A lookalike address showed up in my history. That is a poisoning attempt, and it has cost you nothing yet. Do not copy anything from that history; take addresses from their source from now on, and save the ones you pay often in your wallet’s contacts.

A stranger DMs me about my holdings. They read your balance on an explorer, which anyone can do. A message that offers help, recovery or an exclusive deal and then asks you to sign, connect or share a recovery phrase is a scam. Decline it; on Cherry the sender is never told. Is it safe to connect your wallet shows how to read a prompt before you sign one.

Is it safe to connect your wallet to a chat app?
DM a wallet address , the free path and name resolution
Address poisoning
Spot a fake airdrop

Want to check what your Cherry profile shows? Open chat.cherry.fun , sign in with the wallet you plan to share, and open Settings to see which of your wallets show.

FAQ

Can someone steal my crypto with my wallet address? Not with the address alone. Moving tokens out of a wallet takes a signature from its private key, which the address does not contain. Losses that start with a shared address come from what follows it: a lookalike address you copy by mistake, a spam token whose link you open, or a prompt you sign.

Is my wallet address public? The address is a public identifier, and everything attached to it is public too. Anyone who pastes it into a block explorer sees its balances, its tokens and NFTs, and every transfer it has made. Keeping the address to yourself only keeps people from knowing it is yours.

Can a wallet address be traced? Yes. Every transfer between addresses is on-chain, so wallets that send to each other can be linked by anyone who follows the history. An address is tied to you the moment you post it next to your name, a .sol or .skr name, or a profile that shows it.

Can someone message my wallet? On Cherry, yes: anyone can DM any wallet address, even one that has never signed in. A stranger’s free first message lands in your Requests, under Hidden, with no notification. A stranger reaches you with a notification only by paying for a paid DM, 0.01 SOL by default as of 10 September 2026.