Bitcoin Forum

I sent around 80$ to 381jqxGPdFBRYAETnpYHxp7K1TCxtFLXNX on Paxful but for some reason it sent it to 1KsHQa735fPjZuYBeM713eHo7rGC3wAVuB

I double checked to see if I was sending to the right address and it was right... and I was on the legit website... why did it do this? I am contacting support right now but I have a feeling they wont do anything and say I got hacked or something, I have been using this website every day consistently for 2+months now without any problems...

Did you login to the BTC address that you said it sent to? Also, did you verify TXID and other information on Paxful? We need more info in order to figure anything out.

The 381jqxGPdFBRYAETnpYHxp7K1TCxtFLXNX address was generated by a poker website (Blackchippoker) I never logged in to this address but I have never had problems before doing this... and I am not to sure how to view the TXID.

This is the TXID from the Paxful transaction 78c74cd94c4eb19858332ddcba14984cfff066566789b5c0090f33a41ff4fd1b

This is how to view your transaction ID (https://www.blockchain.com/btc/address/1KsHQa735fPjZuYBeM713eHo7rGC3wAVuB)
What you are trying to tell is that you tried to send the coins from a poker site, which i have never heard and you double checked everything before sending and still it went to another address, if that is the case the poker site you mentioned has the coins, if there is a support system, do contact them.
Your heading is also misleading, Paxful did not send your coins to a different address if the above mentioned happened.

No I bought BTC from Paxful and sent it to the poker site BTC address (381jqxGPdFBRYAETnpYHxp7K1TCxtFLXNX) but after sending the coins I looked at my transaction description and it said it sent to (1KsHQa735fPjZuYBeM713eHo7rGC3wAVuB) which I have no idea what that address is.

That transaction is sending to 43 different addresses, not just 1KsHQa735fPjZuYBeM713eHo7rGC3wAVuB. Paxful does this to save money on transaction fees. Unfortunately, yours is not one of them. Are you sure about both the address and transaction ID?

Yes I am sure that the address I entered was correct, I should've also noted that when I tried to send my BTC from Paxful I got some sort of message that I have never seen before (I think it said something about not having enough for a transaction fee or something like that I can't really remember) but I looked at the address I entered and it was still the right one (381jqxGPdFBRYAETnpYHxp7K1TCxtFLXNX) but then after pressing send I noticed in the transaction description that it was sent to a totally different address... (1KsHQa735fPjZuYBeM713eHo7rGC3wAVuB), I don't know what happened, I am very careful about everything... could it be an error from Paxful side? I am trying to contact support right now but its a long wait.

Thank you all for trying to help I really appreciate it hopefully we can figure out what happened...

this doesn't make sense. do you have a previous login history? and you haven't deleted it. Is Paxful a new platform? If  Paxful is a new platform. then you have to ask to the platform developer. so. your problem can be solved.

I have been logged in the site for over a week now and have done transactions without any problems, Paxful is a trading platform where users can buy crypto with paypal and other methods, I would say it is popular and it's been up and running for a while now I am surprised you have not heard about it.

Here is the transaction you referenced: https://www.blockchain.com/btc/tx/78c74cd94c4eb19858332ddcba14984cfff066566789b5c0090f33a41ff4fd1b

Perhaps your coins were never sent because of the problem that it reported to you.

I see, but why would it send my BTC to this address? It's strange but I am pretty naive in the workings of BTC but the only thing I can think of is because of the problem or error it gave me. But why would it send it to this address instead of the one I wanted it to be sent to? The right address was entered.

Are you signed up in unknown site that suddenly appeared in your screen when you transfer your bitcoin to other wallet? If you do there is a big possibility that you are already hacked because that is their strategy to get your info and your BTC. Try to contact support to have an assistant to your problem.

It could possibly be an error on the gambling websites part, often their address and balance system is weird and is based on a rotating address system. It's very easy for your bitcoins to get lost in the shuffle, I would contact support on there end as someone said above to see if they can check their logs.

That's not a possibility. No bitcoins were sent to the address 381jqxGPdFBRYAETnpYHxp7K1TCxtFLXNX, so there are only a few possibilities and neither has anything to do with the receiving site:

• 1. The bitcoins were never sent.
• 2. The bitcoins were sent to an address other than 381jqxGPdFBRYAETnpYHxp7K1TCxtFLXNX. Here are the possible causes:
  • A. You entered a different address. FYI, it is unlikely that there was a typo since addresses contain validation info.
  • B. Browser malware replaced your destination address with a different one.
  • C. Paxful sent the bitcoins to a different address for some unknown reason.

In all cases, you should:

• 1. Check the gambling site to see if the bitcoins were received.
• 2. If your Paxful account has a transaction log, check that. It should have valuable information.
• 3. Contact Paxful support if the bitcoins were deducted from your account but never received.

Thank you, I have contacted support and they will have an admin inspect if anything went wrong on there part... if they find nothing then I guess I have some sort of malware? I don't know how I could possibly have something like that since I am very careful but I guess I could be wrong.

If the bitcoin was sent to the wrong address means then you lost it completely no matter of which side the mistake was.

Personally I never used paxful but it is one of the best site so they are going to risk their reputation for $80? I don't think so.

So malware from your pc caused all those problems.

Do you have the log of the transaction ? Something like this:

[/quote]
If the bitcoin was sent to the wrong address means then you lost it completely no matter of which side the mistake was.

Personally I never used paxful but it is one of the best site so they are going to risk their reputation for $80? I don't think so.

So malware from your pc caused all those problems.
[/quote]

It has nothing to do with risking there reputation there might of been an actual bug that happened.

Do you have some screenshot like what codehtcmail posted above? Can you share it here?

If you want to make sure if there's a malware that attacks your clipboard or not, try to copy some BTC address on your browser and then on wallet like Electrum, and paste it somewhere. See if your copied address is the same or not. If it is not the same, it's very likely that you've been attacked by malware.

If bitcoins were sent into different address then you most likely do have that malware (clipboard) ones which have been known in the past.

Ive been asking too on the same thing on posting up some screenshots on where these funds being sent out so that everyone would compared on what part you went wrong.

This is most likely what happend. Maybe it wasn't exactly clipboard malware (since that is visible), but rather an addon on your browser which edited the input of the adress to theirs (1.. instead of the 3.. one), and modified the client side to make it look like you were still "sending" to your own adress.

They probably didn't care enough to also edit the data you received back from Paxful, (as that would require very specific headers to be changed(too much work for them)) hence why in the description the actual adress you were sending money to was shown.

If i were you, i'd at the very least run some virus scans, and check for malicious browser plugins?

Yes. Please run some virus scans and check your browser plugins/addons.

Well after talking with support they told me to replicate what I did and record it, nothing happened this time, I also successfully bought and sent BTC again without this "malware" problem happening, its weird I am very careful what I look at on the web and links etc, I am very impressed if this is actually some kind of malware.

Wouldn't hurt to run some scans though, would it?

I don't really see what else it could be, other than a sloppy copy paste (which you already ruled out.)

Perhaps the malware only triggers on site X, for balance greater than y. I don't know.


You mean when you are about to make the transaction, and they ask you to look over the transaction once more because;
Or after you already made the transaction?
If it was before, i doubt Paxful made a mistake.

However, if it was after the fact, there might be a rare possibility that Paxful could've done something wrong? (Although i really doubt it.)

It just happened again! And this time I recorded it on video, here is the video... what do you think?

After getting this error message I close the window and refresh and my BTC are gone and sent to another address, rip :[

https://www.youtube.com/watch?v=FqOTtYOM3-k&feature=youtu.be

Okay, now that i see this, it definitely looks like there's something wrong on Paxful's side of things.

You shouldn't be able to send the full amount of BTC in the first place, since paxful will need like 5% to pay the fees on your transaction, (atleast that's what happens always in my case. I'm always left with some arbitrary number like ~0.001 in dust. I've never had 0BTC on my account)

Which means that this transaction should've not even been possible in the first place, and is definitely some sort of internal tx...?

---

OR, after you entered your password and clicked send; it said the "Cannot send out less than X, excluding Y fees.", which means a transaction was already initiated?
Perhaps there is some sort malware which immediately initiated a transaction after you filled out your transaction/password, and was the 0.0000546 BTC what was left over.

But what's not explained is why your balance afterwards isn't 0.0000546, but 0.

It's kind of far-fetched.

---

Yea im not sure, I sent the video to support, well see what they have to say. I'l update when they do.

That video explains a lot. It definitely looks like a bug in Paxful's software, but it could also be malware on your computer.

If it is a Paxful bug then perhaps it occurs when you try to send the full balance and there is not enough left over to pay the "network fee", and that confuses Paxful.

If it is malware, the malware is possibly intercepting your input and somehow inserting a request that sends the money to the scammer first, then Paxful gets your request and there is no money left, so it shows an error.

The wonky numbers in the error message ("Please add $-84.35 ...") lead me to believe that it is more likely to be a Paxful problem.

That video kinda explains it.. It definitely looks a bug from their side if whatever @Adolfin says about the 5% thing is correct. I'm afraid this could be a small portion of a big attack by a middleman. It's literally modifying the address on the server-side. This isn't supposed to happen for a reputed exchange like Paxful.

Watching this case.

I had an issue like this before.. I think that you might have a malware as some members have said.. This malware is somehow pasting another address when he detects a btc address. I don't think that paxful will ever think about scamming 80 usd.. Recheck your pc mate.. Hope that you will recover your lost funds.

Never said it had anything to do with Paxful trying to scam me for 80 usd.

Well apparently someone got access to my account and that's why, I still don't understand how having access to my account they where able to send my BTC to a different address like that?

I think you have malware or rogue addon/extension on your computer
and the script steals your bitcoin by modifying withdraw request at the time you enter your password
that explains why the transaction happens only when you request withdraw not immediately after you made deposit
and this is why turning on 2FA email confirmation on withdrawal is important? doesn't Paxful have it?

I really doubt that I have some kind of malware but I could very well be wrong... could it also be that some of my usernames and passwords where sold or possibly hacked from a websites data base?

I use a lot of the same passwords/usernames for forums I browse etc...

Is that even a thing?

BTW an update on Paxful, since I changed my password I haven't had any problems.

And from looking at the logging on my Paxful account there was some foreign ip that did log in so that is probably what happened?

Most likely the case if you do see some different ip address activity on your account then its definitely one of the reason why you have those indirect transactions on your account.
Good thing that you have changed up your password and just for an advise it is always been suggested on not to use the same passwords on any sites you are engage into.