The scammers will use wallet addresses generated from vanity address generators and match the first and last characters of their victim’s wallet address.
Address poisoning, MetamaskRead More
You might also be interested in reading FTX’s Liquid exchange hopes to return customer assets next year.