Funds sent without my knowledge

[falcone]

Hi, Please help as I am new to Bitcoin and Electrum Wallet. On Sunday 29 October at 08:58 I received funds that I had transferred from another wallet in my Electrum Wallet. I could see the Amount and Balance which was correct. I assumed the funds are now safely in the wallet. However on Sunday 29 October at about 23:45 the funds were Sent from my wallet and my balance is now zero. I did not send the funds myself. Can someone please explain what happened and where my funds were sent to?

Thank you and Best rgds

[1714078535]

1714078535

[1714078535]

1714078535

[1714078535]

1714078535

[buwaytress]

It's really hard to determine exactly what happened here, but if you really can confirm that your funds were spent from your Electrum wallet, then at face value, your private keys were compromised, wallet accessed, and funds sent out.

1. Is your Electrum fully synced (Large green button on bottom right screen), and balance shown in bottom left corner is zero? Then your wallet is indeed empty.
2. Can you see the transaction listed in your wallet? If you click on it to view the transaction on block explorer, do you recognise any of the addresses associated with the tx?
3. If you can share the tx ID here, we can help determine some things, but likely not recover the funds, if (1) is confirmed.
4. Does anyone else besides yourself have your Electrum seed and/or encryption pass?

If (1) is confirmed, and you answered no to (4), then someone somehow stole your seed and/or pass. The best thing to do right now is perform a full scan of your device. Ensure it is clean and safe before creating a new wallet and/or changing your password.

[falcone]

Hi buwaytress

Thank you very much for your response. Answers follow below.

1. Yes the wallet is fully synced and the large green button is on the bottom right screen. Also the balance on bottom left is zero.

2. Yes I can see the transaction listed.I do not however recognise any of the addresses. I sent the funds from my Cryptopay wallet to Electrum wallet.

3. The TX ID is 029f70aaeb6d99cd4b9cd3d53f28667e77b2cc109b84a70bcea037b428cce9c2

4. No, no one has my Electrum Seed or encryption pass

I have done a scan of my PC and found no malware, viruses etc

Any help would be greatly appreciated. I tried to insert a screenshot here but unable to do so. I click on Insert Image button but then it just displays http://

Best rgds

[HeRetiK]

Have you installed any alt coin wallets or otherwise, possibly questionable software lately? Problem being that malware that isn't "off-the-shelf" often avoids detection by most antivirus software. To be honest I'd consider wiping my hard drive and re-installing my operating system at that point.

Unless someone else you know had direct access to your device I'm afraid those coins are gone for good.

[error08]

There must be a leaked which your bitcoin could be stolen in this case;
1. This is your address: 113Eab3eyWW4wfdpeZ3rNgD2gLWtDU84Gr ??
2. This is the address of the thief: 13y2Ct6ee6E7s6y7qK9z798oktVfb1jJ1R ??

You said;
1. have sent the funds from Cryptopay wallet to Electrum wallet
2. On Sunday 29 October at 08:58 I received funds that I had transferred from another wallet in my Electrum Wallet. I could see the Amount and Balance
    which was correct

But, after check on your address 113Eab3eyWW4wfdpeZ3rNgD2gLWtDU84Gr there is no any amount received on 29 October, instead of 27 October > BTC0.0165 received from 36TEeqDrHnMFz9izKjgJipquvooJ7iTDa7

[falcone]

Hi HeRetik and error08

Firstly thank you for your response.

HeRetiK - No, I have not installed any other wallets nor any other software. I downloaded the Electrum software from https://electrum.org/#download and selected the Windows Standalone Executable file and installed from there. I am the only one with access to my laptop.

error08 - I initiated the transfer on the 27 October but I only saw the funds in my wallet on the 29 October at ab
out 11:00 when I logged into the wallet. Another transaction then appeared in the History list at 23:45 and that was the one where the funds were transferred out of the wallet.

It was a small amount - $95 so not a big deal. I am just now wary of using Electrum again.

Thank you both for your responses.

[error08]

I am sorry for your loss.
But, it really makes me curious; how could it happen. Even though we know the funds unlikely to recover.
However, I've been using electrum wallet for months, for most of my bitcoin in electrum. Never have a single problem with it.
That's why this mystery should be solved, at least we know how did this happen, just for precaution act.

[Lm2e4]

I also feel sorry for you men. But based on what I've seen, maybe you are not that too careful, because someone just got inside in your account. This should be a lesson for all of us. If there is only a way to recognize the thief, I'll do my best. But I'm afraid there isn't. Be careful next time brother, so it won't happened again. And also try to make a new account.

Just making an advice.

[Jake052478]

I think this is the danger of our digital wallets if it lacks a tough security feature. Anything is the net can be hack so having a good digital wallet is something to be treasured.  I felt sorry for you man... This is a danger really if our digital wallet cannot be registered after all.  Just like that... can you not trace where it was sent to... when... and how...  What I know is that you can view your transaction history.  So, I hope you can trace it and have it back soon....

[rjbtc2017]

Okay, First check your CryptoPay if there is still balance. Some of the web wallet -- most of them honestly will send your balances to another address for security purposes. You said that you are just new to electrum therefore here is my answers on the possible scenario.
(Again, this is just my opinion and i think what possibly happened).
1. You sent from CryptoPay to your electrum wallet.
2. You saw the balance.(Maybe the transaction was not verified therefore the sending from CryptoPay to your electrum wallet was cancelled).
3. The Balance of your CryptoPay bitcoin address was sent to another wallet ( probably CryptoPay's "security wallet").
4. You still have the balance on CryptoPay BUT on that exact address it will not show (on the blockchain) that you have still balance.
I assume that:
>Your CryptoPay's  Bitcoin address (on the block explorer) will not show your balance.
>Your CryptoPay's Web Wallet will still show your balance, you can still spend it ( if there will be no errors on this transaction)
>Your Electrum wallet showed the balance yet it was not yet verified [ it may happened that the transferring of Your CryptoPay's balance to their secure wallet was done at the same time with you which causes double spend which the first verified one will be processed first)
My Questions are
1. what is your CryptoPay's Account Balance as of now?
2. what is your CryptoPay's Bitcoin Address?
3. What is your Electrum's Wallet Address?

[falcone]

Thank you to all those that responded. I am generally very careful when on the net and have checked my laptop with anti virus and malware scanners but nothing found on laptop.

rjbtc2017 -

1. Cryptopay account balance is now 0.0929 (This is funds that I transferred into Cryptopay yesterday from another source so that is correct). No sign of the finds transferred to Electrum

2. Cryptopay address is 3EL14BoZCDXBmV65uCGAawXAZZxvnvZwN7

3. Electrum address is 1MREVrSRXyFbnbt4c6X5YdqDHQnFJHnW7Q

I will wait and see if it eventually pops up in Cryptopay

Thank you once again to all

[rjbtc2017]

Thank you to all those that responded. I am generally very careful when on the net and have checked my laptop with anti virus and malware scanners but nothing found on laptop.

rjbtc2017 -

1. Cryptopay account balance is now 0.0929 (This is funds that I transferred into Cryptopay yesterday from another source so that is correct). No sign of the finds transferred to Electrum

2. Cryptopay address is 3EL14BoZCDXBmV65uCGAawXAZZxvnvZwN7

3. Electrum address is 1MREVrSRXyFbnbt4c6X5YdqDHQnFJHnW7Q

I will wait and see if it eventually pops up in Cryptopay

Thank you once again to all

Okay this is weird.
>your CryptoPay Address(3EL14BoZCDXBmV65uCGAawXAZZxvnvZwN7)
has : Final Balance   0.10993723 BTC   (which you can see on https://blockchain.info/address/3EL14BoZCDXBmV65uCGAawXAZZxvnvZwN7)
>Electrum Wallet (1MREVrSRXyFbnbt4c6X5YdqDHQnFJHnW7Q) Doesn't have any TRANSACTIONS
>on the transaction: https://blockchain.info/tx/029f70aaeb6d99cd4b9cd3d53f28667e77b2cc109b84a70bcea037b428cce9c2
113Eab3eyWW4wfdpeZ3rNgD2gLWtDU84Gr was used to send bitcoin to 13y2Ct6ee6E7s6y7qK9z798oktVfb1jJ1R
which possibly a secure wallet of cryptopay before sending it to the electrum address.
>The Possible Problem i can see here is that cryptopay already deducted that to your account on cryptopay and failed to send that to your electrum. Call the CryptoPay technical service personnel to guide you on what to do for the lost bitcoin.

[falcone]

Hi rjbtc2017

Thank you. I will contact Cryptopay right away. Will let you know what their response is.

[falcone]

Have emailed Cryptopay support and awaiting their response

[falcone]

Just received a response from Cryptopay. They say the funds was not sent to them. So I guess the Electrum Wallet was hacked. Lesson well learnt and I hope others will learn from this experience as well.

Thanks to all who responded!

[rjbtc2017]

You'll just let it slide? as what i've said your CryptoPay Bitcoin Address has 0.10993723 BTC but the recorded on their web is  0.0929BTC . Cleary they

deducted the BTC you are supposed to send but you didn't received for some apparent reason ( that i assume that the transaction was cancelled

because of double spending --again i assume this might be wrong).

contact them again and ask them why you didn't received any funds while your Bitcoin address didn't send any amount and also didn't received any

amount as per BlockChain Records and also as per blockchain records, you still have  0.10993723 BTC on your cryptoPay's Bitcoin address.

Do not let it slide.

[falcone]

Hi rjbtc2017

Gosh, that slipped my mind. I will definitely contact them again right now..

[rjbtc2017]

Wait, can i ask is there any info on your electrum wallet GUI? like details of the coins sent? can you screenshot it?
maybe the address that you posted here were the second address on your electrum application.
Can you look for Electrum Address tab and Find the "Used Address" caption and Paste here the address, maybe we are misunderstanding your post.

[falcone]

I made screenshot but am unable to post it here. How do I do that? I tried the Insert Image but it's not working

[rjbtc2017]

I made screenshot but am unable to post it here. How do I do that? I tried the Insert Image but it's not working

upload it on imgur and then post it using this code

Code:

[img]link of the picture here[/img]