Post
Topic
Board Bitcoin Technical Support
Merits 6 from 1 user
Re: Was a friend of mine scammed or hacked somehow?
by
Cricktor
on 03/09/2025, 21:13:22 UTC
⭐ Merited by LoyceV (6)
Here's a tip: whenever you send any amount, always check the prefix and suffix of the recipient address and confirm the address with the recipient before sending.

Check at least that the first four characters (prefix) and last four characters (suffix) of the copied address are correct and that it's the same address provided by the recipient.
This is in my opinion not enough to check, especially when you omit a portion to be checked somewhere else than at the start and end of an address.

As OP said and it's what I practice: I check 6 to 7 symbols (excluding the address type prefix) at the front, at the end and a few at the same position around the middle. If those three spots match, it's extremely unlikely that anything else doesn't match too.

The crucial thing is, you have to verify any of the transaction's outputs always, without exception. Best of course on the independent display of a hardware wallet.


Remember, the most recommended option is to purchase a hardware wallet, but even a hardware wallet won't protect you from this malware (which is basically a mini-keylogger, as it monitors the clipboard and acts upon identifying a Bitcoin address). Although, as Mia Chloe mentioned, there's no way to be 100% certain that there's worse malware that not only monitors Bitcoin addresses but also monitors private keys and BIP39 seeds.
A malware that alters the transaction details before it's passed to be signed on a hardware wallet is not science fiction. That's why you always have to check all transaction details before you sign and broadcast a transaction. Every time!

A hardware wallet protects your private keys from malware. Your private keys and your mnemonic recovery words should never touch an online device. Your hardware wallet creates your mnemonic recovery words in a secure environment. You write an analog paper backup (or better multiple redundant copies of it) which never go online. You create maybe also an analog metal backup for fire protection. This again never becomes online stuff. This is Bitcoin safety 101.