Something not right.

[Bitstarzisascam]

Hello.


I felt something weird like 3 hours ago when my friend sent me his bitcoin wallet to send him around $1k for his services, so what I did I came online quick copied his Bitcoin address quickly pasted it in the blockchain send form, writed 1000, then I hitted send from then I went offline I came back He was like nothing was recevied I checked his bitcoin address and nothing was there, I checked my online wallet and I found out that it was sent to a different Bitcoin address with the same first words!
"14wEFYsvqiTDXA6ru9rV6xiS1gkxHTioVy" the address I wanted to send to, I'm sure I copied & pasted it I am 100% sure now I see that the bitcoins are sent to different wallet which "14wEycrQ2eb1DAbh51z4oQ3AYCA12Qeitm" Now the bitcoins are lost, because the guy claims it's not his address.


Can anyone figure this out?

[npredtorch]

Could you provide which app/website did you used for this transaction?
Are you using windows OS?

You might have been a victim of a malicious malware that hijacks the clipboard.
Reference: https://youtu.be/Ty-_IjavYH4?t=204

As soon as you've used the copy-paste function, it'll paste a different address and commonly, it only changes the last characters to deceive the user. (most users check only the first set of characters of a bitcoin address)

[Bitstarzisascam]

Could you provide which app/website did you used for this transaction?
Are you using windows OS?

You might have been a victim of a malicious malware that hijacks the clipboard.
Reference: https://youtu.be/Ty-_IjavYH4?t=204

As soon as you've used the copy-paste function, it'll paste a different address and commonly, it only changes the last characters to deceive the user. (most users check only the first set of characters of a bitcoin address)

I use Blockchain.info wallet.

Yes I use Windows OS

How can I scan/get rid of that? I'm really frustrated..

That's what exactly has happend out of no where I don't download anything nor enter shady websites, I only visit websites that I know of.


P.S Now I copy paste the address and nothing changes I have done it twice now nothing is changing when I pasted the same address I copied

[crwth]

How can I scan/get rid of that? I'm really frustrated..

Probably reformat your PC or use a hardware wallet. It's safer to keep your coins there. It's better to be safe than sorry.

That's what exactly has happend out of no where I don't download anything nor enter shady websites, I only visit websites that I know of.

You can never know right now but right in front of you already happened, I'm sorry for your loss. Right now your best bet is to take action with your computer and know that it's the one that you can control.

A lot of hacks have been reported too. Keep safe.

https://www.affiliateguarddog.com/community/threads/blockchain-info-wallet-hacked-emptied-warning.11666/
https://www.reddit.com/r/Bitcoin/comments/8qo5jp/my_blockchaininfo_wallet_hacked_on_june_11th_0/

[Bitstarzisascam]

https://www.blockchain.com/btc/address/14wEycrQ2eb1DAbh51z4oQ3AYCA12Qeitm


The coins are not moved yet, which is a strange thing, you guys think?

[crwth]

The coins are not moved yet, which is a strange thing, you guys think?

I don't think it's strange just because it hasn't moved yet. Maybe he is just waiting for other confirmations with the linked wallets then form one big transaction to save fees or something. I just know that it's a hackers address.

[pooya87]

a copied address doesn't just randomly change and you said it is not happening again so the possibility of a clipboard hijacker is nearly zero. it is better if you start retracing your steps. go back to the start and check what address did your fiend send you. for example if it was sent to you in an email then check that email and see if it was actually the other address!
also try to remember if you copied the entire string not just partially or with additional stuff, blockchain.com wallet is known to have weird bugs which could be the cause. try to see if you can reproduce it.

[joniboini]

a copied address doesn't just randomly change and you said it is not happening again so the possibility of a clipboard hijacker is nearly zero.

Or the hijacker decided not to change the address if it was used before to deceive the users. Never see one like this, though.

How can I scan/get rid of that? I'm really frustrated.

It's time-consuming to search for it, so a clean install is probably your best choice. Use Linux and never open/click malicious links.

[Bitstarzisascam]

a copied address doesn't just randomly change and you said it is not happening again so the possibility of a clipboard hijacker is nearly zero. it is better if you start retracing your steps. go back to the start and check what address did your fiend send you. for example if it was sent to you in an email then check that email and see if it was actually the other address!
also try to remember if you copied the entire string not just partially or with additional stuff, blockchain.com wallet is known to have weird bugs which could be the cause. try to see if you can reproduce it.

I think that's the case, Blockchain might have a bug because theres no way I don't download nor visit any shady sh*t on my private computer because I use it for $ & business purposes, I'm switching to a different wallet immediately and yes you right, I'm sure I copied the right address because it was also weird that the address has same 4 letters as the main one which doesn't go thru my mind at all

a copied address doesn't just randomly change and you said it is not happening again so the possibility of a clipboard hijacker is nearly zero.

Or the hijacker decided not to change the address if it was used before to deceive the users. Never see one like this, though.

How can I scan/get rid of that? I'm really frustrated.

It's time-consuming to search for it, so a clean install is probably your best choice. Use Linux and never open/click malicious links.

I clean it up every 2 weeks no virus/or any type of malware to be found, so I believe it might be the blockchain thing, if so I'm done with them seriously, always issues with them

[DaMut]

I had experienced this too 2 years ago, the script was working in just 2 places if I remembered it correctly which were Bittrex and Huobi.
It did not work in another place and as soon as I filled the form on those 2 exchanges, the address changed automatically. Have you tried it again on Blockchain.com?
and I needed to reinstall my OS to fix this issue, removing and installing the browser again won't fix it.

[joniboini]

I clean it up every 2 weeks no virus/or any type of malware to be found, so I believe it might be the blockchain thing, if so I'm done with them seriously, always issues with them

Your antivirus or malware might not detect it too. I'm not defending blockchain, but it's unlikely your copy-pasted address changed unless somebody hijacks their servers. But if that does happen, then the hacker would empty your wallet without waiting for your input.

and I needed to reinstall my OS to fix this issue, removing and installing the browser again won't fix it.

Then there may be a clipboard hijacker on your OS.

[Bitcoin_Arena]

How can I scan/get rid of that? I'm really frustrated..

That's what exactly has happend out of no where I don't download anything nor enter shady websites, I only visit websites that I know of.


P.S Now I copy paste the address and nothing changes I have done it twice now nothing is changing when I pasted the same address I copied

You definitely have a malware in your system. Just wipe out the OS and start a fresh. Just a simple tip so as to avoid sending funds to the address next time. Always check the address character by character as though you just type the address yourself. I know it's time consuming but it saves you from losing your money. I usually do that when I am about to send or receive money on to my account

[The Cryptovator]

This case happened multiple time on blockchain. I have seen some complaints from multiple people those are use blockchain wallet. They also did same, just copy paste address and sent bitcoin. There is nothing except hacked your system or keyboard/clipboard. Attacker able to control your clipboard but you will not aware about this. I think this was happened with you. I don't think this bug from blockchain wallet. If so then how they will business,no one will user their services. I will suggest format your device and install everything new including operating system. So in future that kind of problems will never happen if you do not install unknown software. That's the reason why everyone should double check sending address always.

[Pmalek]

The easiest way to check if you have been infected with a clipboard virus is to just copy any address, paste it somewhere and check if it is the same address that you copied.
Here, 34xp4vRoCGJym3xR7yCVPFHoCNxv4Twseo, I think this one belongs to Binance. Copy it and paste it in an empty document. Is the pasted address the same as the one I posted?

If it changes - you are infected with a clipboard virus.
If it stays the same - you are not infected with a clipboard virus and either your friend gave you the wrong address, you copied the wrong address or there was a bug with blockchain as suggested by some users.   

[TIDOVEE]

Note: sometimes when you are typing your wallet address, it use to bring options of related digits, if one is not careful and small difference in your digits will produce another wallet number. And you may not verify well before punching the send. That is automatically a loss or better still a prayer answered for another person.

[Jet Cash]

Don't reinstall your OS - switch to Linux. Mint is fairly close to Windows if you are not familiar with Linux.
Windows 10 includes Cortana, which cannot be removed. This is a keyboard logger ( amongst other things ), and stores all of your info and communications in the Microsoft cloud.

[Ulven]

You definitely have a malware in your system. Just wipe out the OS and start a fresh. Just a simple tip so as to avoid sending funds to the address next time. Always check the address character by character as though you just type the address yourself. I know it's time consuming but it saves you from losing your money. I usually do that when I am about to send or receive money on to my account

I don’t think he have a malware in him system, and If him device already contains malware, his entire balance will be emptied.I think the reason is sending by mistake.

[posi]

How can I scan/get rid of that? I'm really frustrated..

That's what exactly has happend out of no where I don't download anything nor enter shady websites, I only visit websites that I know of.


P.S Now I copy paste the address and nothing changes I have done it twice now nothing is changing when I pasted the same address I copied

You definitely have a malware in your system. Just wipe out the OS and start a fresh. Just a simple tip so as to avoid sending funds to the address next time. Always check the address character by character as though you just type the address yourself. I know it's time consuming but it saves you from losing your money. I usually do that when I am about to send or receive money on to my account

I don't think he have malware on his system cause if he does the hacker would have swipe out all his wallet as we speak and as above user have said the problem will be either clipboard hijackers which have occurred to some window OS user before or Blockchain wallet bugs and what the OP have to do is reinstall his OS and also use a hardware wallet (trezor).

[Lucius]

Just a simple tip so as to avoid sending funds to the address next time. Always check the address character by character as though you just type the address yourself. I know it's time consuming but it saves you from losing your money.

I never had contact with clipboard malware, and I use online, desktop, mobile and hardware wallets. But besides device safety (av/antimalware/firewall), I always check any address a few times before using it. Most wallets have a preview option, and even blockchain allows a user to check all info before sending it.

Since OP is saying that he can not reproduce this issue, is it possible that malware is changing send address only in the moment when the user clicks send button?

[evgenia_volkova]

Don't reinstall your OS - switch to Linux. Mint is fairly close to Windows if you are not familiar with Linux.
Windows 10 includes Cortana, which cannot be removed. This is a keyboard logger ( amongst other things ), and stores all of your info and communications in the Microsoft cloud.

When I was a victim it was advised to me to change the hard-disk and when asked they said changing OS is not the permanent fix. Can you explain which one is the right.