what is happening here is a new kind of scam, where scammers send 0 transactions from their fake generated address that has first 4 and last 4 characters same.
Then they rely on people only checking these characters and copying their fake address instead of a legit one from their history.
Described in more detail in here:
Basically, you always have to be sure you are sending to the address you want, always verify in full and copy only from the legit source.