A security alert has been issued for Monad users regarding a scam involving fake ERC-20 token transfers. Attackers are generating transactions that appear to originate from legitimate or known wallets to deceive users into interacting with malicious contracts. This attack vector exploits the flexibility of token standards to spoof sender addresses in block explorers. Users seeing unexpected tokens or transfers from known contacts should verify the contract address directly rather than trusting the visual representation in transaction history. Security researchers emphasize that ERC-20 is merely an interface standard, making it easy for bad actors to write smart contracts that simulate transfers from any address without the actual owner's private key.