According to Phantom, to avoid address poisoning, users should never copy and paste an address from their transaction history, always verify their wallet address before sending funds, and consider using Phantom usernames instead of addresses to minimize risk.