The scammer creates an address with the same first and last characters as one you use and sends you a tiny or zero-value transaction. Later you copy the "familiar" address from your history and send funds to the scammer.
Always copy addresses from your own contacts list or the source, and check all the characters.