Wrong BTC Adress, copied from Binance's Dashboard

[Yatsan]

There are no transactions in the block chain sending 0.10 BTC to 13PcbKjLBjVUYcSevYELQDc1pLDm6Bb9Di. Why is that?

I'd see it already, and until now the balance hasn't move or touched. I'm confuse on what is really going on.

That is why, you always need to double check your address before you confirm the transaction, no matter how strong or genuine your OS or security it, it is still breachable because in the world of IT, there's no system that is safe. Meaning, you should be personally responsible and be observant. But you can reduce the risk of it happening again, install a genuine anti virus and prevent yourself from downloading from sites that aren't trusted. Make sure that you don't have any plugins even in your browser that causes this issue.

Malware these days are good enough that even the experts and experienced ones can hardly distinguish it from their devices that's why the account of every action we take over should be us coz no one's really accountable for that, not even the exchange. So if it's true that you have been attacked by one of these malware or some kind of virus, might as well be observant the next time and this should serve a lesson for you.

I'm confuse, really really confuse right now coz if I were going to send a huge amount in btc I would definitely check the address I'm sending into however he did not do it. Watching the video made me more confuse coz  there is no mic for you to speak so we will just be basing on your pointer gesture. You did able to copy the amount and pasted it in the address bar and it pasted correctly, not the case for the time you copied the address of yours but you did not let us see that you pasted it using your mouse pointer, you did was a keyboard shortcut. I'm not telling you that you just made it in hope to get a refund from Binance.

CTRL+V is not the same as CTRL+Z. I tried it after watching the video and it works. I can make the fake address out of my screen after hitting CTRL+Z and not CTRL+V.
So now can you get this done with mouse only? of course you can't coz you said you already formatted your computer and the malware was out, right?

THE SHOW IS OVER MAN.

I will record it again, with all those infos / ctrl + z / ctrl + v / ctrl + c

Unfortunately I don't believe you yet since I wasn't able to see you do it but I would be glad if you enlighten me. In addition to that, I think the antivirus installed to your device is enough to collect data threats like what you to from a random click over the internet. Windows defender can manage to determine malware attacks on the computer base on the tests that Microsoft did from 2018 up to 2020, So I guess any malware cannot get into that. And I wonder why did the creator of the "malware" isn't touching the bitcoin that you sent mistakenly?

I would be glad if you upload a video considering my desires to seek the truth. tia.

[kayvie]

1. Install anti-virus software to scan/kill Trojan and other viruses as soon as possible;
2. Disable plug-in/extensions for your browser, trading bot or third-party APP and uninstall unknown software on your computer;
3. Change the password for your devices and accounts;
4. In a critically dangerous situation you should format your hard drive and reinstall the OS (operating system) on your computer (If you are not sure how to do this, seek professional assistance);
5. Consider seeking help from an information security expert to determine how to achieve the best possible level of security;

As you have said, you already formatted your computer and you are done scanning for malware and detected nothing, right?
But have you followed their instructions regarding your extensions? It seems that it is the problem that you are looking for. It is safe to assume that you should remove those extensions to be safe.

[posi]

Mhmmm, i agree with you, but, since i'm not expert, n have created my wallet in April/2020 "around 10 days or less", im a newbie and don't know those things.
Don't you think this issue is a really bad one?

What about the new investments? Newcomers?

I agree there's a lot of malwares / scamwares / viruses, but, if the virus exist, and it only affect a button, its a simple button, what about protect that button? or maybe making a different kind button?

In that case, the button should'nt exist then, right?

Well, my ctrl + c / ctrl + v is working good. if there's was no "Copy Address" this problem wouldn't happen, agree?

Your "my ctrl + c / ctrl + v" is okay I guess, but the malware immediately changes the wallet address, so you don't realize it. That happened too with some of my friends, but then they formatted their laptops and installed a new system. After that, they try to copy-paste the wallet address, and they are fine, and the malware is not there. You should format your computer, and instal a new system if you don't want to get the other bad experience.

This lesson is worth for you, at least, you know that there is a malware which can infect your copy-paste command, and you should be careful. Make sure you double check or triple check on the wallet destination and make sure it is right before you click the send button.

You are right about him formatting his computer that wint be enough to save him next time if some situations happen again and i will advise the OP to always use an updated paid antivirus, cross checking very wallet address before sending payment and never open, visit untrusted site or install app from unknown source in the extension platform.

[maxreish]

Ive seen some issues like this. Copying wrong btc address. Binance isn't responsible about that .1 you have sent to the wrong address. You have a malware inside your phone or pc. Maybe you have downloaded some malicious app or click some malicious sites containing this malware which you will copy pasted wrong btc address. Unfortunatelty, if the transaction was successful, you can't get back that .1 btc.

Haven't you triple check your btc address before sending it out? This maybe a lesson learned not just for you but to everyone here.

[Lucius]

Deep scan feature of Malwarebytes does not reveal these type of malware inside your system, unfortunately. I have had intentionally infected my old laptop with such and it turns out, it pretty much blends in within your aystem apps causing Defender and Malwarebytes to pass it as a false-negative.

Everything really depends on how well malware is made, and if the security software cannot detect it, or it can detect it but it cannot remove it, then we can try to scan in safe mode. In this way, we can prevent malware from running at all from the OS, so security software will have a better chance for detecting and removing threats.

Some viruses/malware are too complicated to remove, and the only solution is to format the disk. Crypto users should pay more attention to prevention than others, which means better security software, use of Linux OS, and hardware wallets that force us to confirm a coin address before approving a transaction.

[Twentyonepaylots]

Ive seen some issues like this. Copying wrong btc address. Binance isn't responsible about that .1 you have sent to the wrong address. You have a malware inside your phone or pc. Maybe you have downloaded some malicious app or click some malicious sites containing this malware which you will copy pasted wrong btc address. Unfortunatelty, if the transaction was successful, you can't get back that .1 btc.

I agree, If the said problem is caused by a malware attack secretly installed then Binance is out of your problem otherwise if this happen to be a system breach from the greatest exchange in current time then it would be a blast but I don't think it was their mistake since it is just you that I have seen this kind of problem. Most probably it was due to malware attack that you caught from your browsing style, you might clicked something that isn't good for your computer.

Haven't you triple check your btc address before sending it out? This maybe a lesson learned not just for you but to everyone here.

Old and gold reminder, always double check the recipient of  your funds, it may takes time but at least it will be safe.

[kryptqnick]

From my diagnosis, the 0.1 bitcoin actually exists in 13PcbKjLBjVUYcSevYELQDc1pLDm6Bb9Di. I'm sorry for your loss. However, I am not sorry. When copying and pasting a wallet address, you're meant to look closely at what you're doing. When I copy a wallet address (for my little $20 transaction), one of my modes to check if it's OK is checking the first and the last characters of they correspond to that of the source. It could have been better if just a character was tempered with but here, you copied a whole different wallet address and send a whooping 0.1bitcoin without caring if it's destination was right.

Mhmmm, i agree with you, but, since i'm not expert, n have created my wallet in April/2020 "around 10 days or less", im a newbie and don't know those things.
Don't you think this issue is a really bad one?

What about the new investments? Newcomers?

I agree there's a lot of malwares / scamwares / viruses, but, if the virus exist, and it only affect a button, its a simple button, what about protect that button? or maybe making a different kind button?

In that case, the button should'nt exist then, right?

Well, my ctrl + c / ctrl + v is working good. if there's was no "Copy Address" this problem wouldn't happen, agree?

The scammers will always find a way, so rather than making their ways more sophisticated by blocking some stuff, it's important to raise awareness of how different existing scam techniques work. I've heard about the 'Copy' scam, one which seems to be even more elaborate than the one to which you were a victim because the copied scammer's address even had, like, the first 3 symbols the same with the original address. That's why I always double-check the addresses when making transactions. And from what I've read, the malware attacks the clipboard, so I don't see how using the keyboard would make a difference. Maybe it did in your case, but it's not universally so. Keep in mind that another dangerous scam is with QR-code generators which substitute the original address thus also getting people to send money to a wrong place.

[joniboini]

Erm... have you watched the video?
There's nothing wrong with my computer nor action "Ctrl + C / Ctrl + V", it's only happening on  Binance's "Copy Address" button.
And it happen's only for the 1st click, because if i click 2 times more, it copy my real wallet address normally

The malware might not always change your address to prevent being easily detected like this. It's really difficult to tell how the malware works when the malware itself is hiding perfectly on your system. If you want to argue with Binance over this then you're going to have a tough battle.

Binance and probably most people would not accept your "if there is no copy button then this won't happen" argument because they'll reply with "you should not get a virus in the first place and you should always double-check". What matters right now is securing your new system.

[LittleBigIvan]

None of them are crypto-related unfortunatelly

Could you show us the list of extensions installed? That helps us to more or less identify if the malware came from the browser or the system.

Sure, here they are;

https://ibb.co/jwcY2YK

https://ibb.co/W58vn34

[LittleBigIvan]

Erm... have you watched the video?
There's nothing wrong with my computer nor action "Ctrl + C / Ctrl + V", it's only happening on  Binance's "Copy Address" button.
And it happen's only for the 1st click, because if i click 2 times more, it copy my real wallet address normally

The malware might not always change your address to prevent being easily detected like this. It's really difficult to tell how the malware works when the malware itself is hiding perfectly on your system. If you want to argue with Binance over this then you're going to have a tough battle.

Binance and probably most people would not accept your "if there is no copy button then this won't happen" argument because they'll reply with "you should not get a virus in the first place and you should always double-check". What matters right now is securing your new system.

You're right on everything you said, unfortunatelly 

[LittleBigIvan]

From my diagnosis, the 0.1 bitcoin actually exists in 13PcbKjLBjVUYcSevYELQDc1pLDm6Bb9Di. I'm sorry for your loss. However, I am not sorry. When copying and pasting a wallet address, you're meant to look closely at what you're doing. When I copy a wallet address (for my little $20 transaction), one of my modes to check if it's OK is checking the first and the last characters of they correspond to that of the source. It could have been better if just a character was tempered with but here, you copied a whole different wallet address and send a whooping 0.1bitcoin without caring if it's destination was right.

Mhmmm, i agree with you, but, since i'm not expert, n have created my wallet in April/2020 "around 10 days or less", im a newbie and don't know those things.
Don't you think this issue is a really bad one?

What about the new investments? Newcomers?

I agree there's a lot of malwares / scamwares / viruses, but, if the virus exist, and it only affect a button, its a simple button, what about protect that button? or maybe making a different kind button?

In that case, the button should'nt exist then, right?

Well, my ctrl + c / ctrl + v is working good. if there's was no "Copy Address" this problem wouldn't happen, agree?

The scammers will always find a way, so rather than making their ways more sophisticated by blocking some stuff, it's important to raise awareness of how different existing scam techniques work. I've heard about the 'Copy' scam, one which seems to be even more elaborate than the one to which you were a victim because the copied scammer's address even had, like, the first 3 symbols the same with the original address. That's why I always double-check the addresses when making transactions. And from what I've read, the malware attacks the clipboard, so I don't see how using the keyboard would make a difference. Maybe it did in your case, but it's not universally so. Keep in mind that another dangerous scam is with QR-code generators which substitute the original address thus also getting people to send money to a wrong place.

Damnit, those scammers are everywhere

[UserU]

Sure, here they are;

https://ibb.co/jwcY2YK

https://ibb.co/W58vn34

Thanks. I checked and they seem to be legit.

And I've also logged into my account and confirmed the Copy button is not compromised (i.e. copied address is the same when pasted).

There's a chance your system has been compromised. Run a malware/ spyware scan on your system using some tools like Malwarebytes and check if anything shows up.

[coolcoinz]

I've made a habit of double checking the addresses since I read about this switching malware for the first time. You don't even have to be thorough with it, just check 3 first and 3 last positions in both addresses. The malware often tries to pick a substitute that starts the same as the copied adres, so checking the first part only could not work, but the beginning and the end has always worked for me.
Another good habit is testing out the address before you send big money to it and 0.1BTC is not a small amount. In most countries this is more than the average monthly salary, so I'd first send 0.01 and then the rest of it if the first one gets through fine. Paying the fee twice is a small price for safety.

[sheenshane]

I've made a habit of double checking the addresses since I read about this switching malware for the first time. You don't even have to be thorough with it, just check 3 first and 3 last positions in both addresses. The malware often tries to pick a substitute that starts the same as the copied adres, so checking the first part only could not work, but the beginning and the end has always worked for me.

Tent to agree with this, no need to hurry every time you have made transaction in crypto. Checking the first 3 and last digits of the Bitcoin address is a way you can avoid form malware hack.

As OP question, Binance support was right. You might have a malware infection in your PC that you need to format, there's nothing that Binance can do. You can't get back your lost Bitcoin, no offense but the fact this is your fault. Due to carelessness hackers successfully stole your Bitcoin. I hope you will learn from this mistake and will not happen again.

[Zeke_23]

Sure, here they are;

https://ibb.co/jwcY2YK

https://ibb.co/W58vn34

Thanks. I checked and they seem to be legit.

And I've also logged into my account and confirmed the Copy button is not compromised (i.e. copied address is the same when pasted).

There's a chance your system has been compromised. Run a malware/ spyware scan on your system using some tools like Malwarebytes and check if anything shows up.

Right, follow this instruction from @UserU, your system was compromised and the only solution is to remove it. If you still failed to found the malware and the problem still occur, try to reformat your personal computer and start to avoid installing unnecessary applications including chrome extensions.

[o_e_l_e_o]

Thanks. I checked and they seem to be legit.

Most extensions which include malicious code seem to be legit, otherwise nobody would download them. They have to perform some actual function which people want, and perform it properly, for the extension to be widely downloaded and not immediately uninstalled because it doesn't work. Seeming legit does not mean there isn't clipboard or other malware buried somewhere in the extension. Unless the extension is open source and you can review the code, then installing it is a risk, regardless of how legit it seems.

There are very few extensions which you actually need to install, and all of them should be open source and have GitHubs you can review. Extensions like uBlock Origin, Privacy Badger, HTTPS Everywhere, NoScript. The vast majority of extensions which people install are completely unnecessary and serve only to pose a security risk.

[qory]

I have the same cases with you but my problem with etherwallet address because when I want to copy my wallet but after paste I got wrong wallet because got malware with my computer, I try other way but still the same and solution to restart my computer and malware gone, you need to restart your computer first.

[o_e_l_e_o]

I try other way but still the same and solution to restart my computer and malware gone, you need to restart your computer first.

I don't know if there is some meaning being lost here in a language barrier, but restarting your computer (as in shutting it down and booting it back up) is not going to remove any malware. You need to reformat it (as in, wipe the hard drive and reinstall your operating system and all your programs from scratch).

If you were experiencing the effects of clipboard malware, and these effects disappeared after a restart, that doesn't mean the malware has been removed. There is some clipboard malware which does not change the copied address every time. Sometimes it will deliberately not change the address, as a way to disguise itself, make it so that if people are double checking the address (as you always should!) that they will think it is correct, make people think it has been removed, and so forth.

If you previously had clipboard malware and haven't reformatted your computer, there is a good chance you still have it. Make sure you double and triple check every address.

[LittleBigIvan]

Sure, here they are;

https://ibb.co/jwcY2YK

https://ibb.co/W58vn34

Thanks. I checked and they seem to be legit.

And I've also logged into my account and confirmed the Copy button is not compromised (i.e. copied address is the same when pasted).

There's a chance your system has been compromised. Run a malware/ spyware scan on your system using some tools like Malwarebytes and check if anything shows up.

Right, follow this instruction from @UserU, your system was compromised and the only solution is to remove it. If you still failed to found the malware and the problem still occur, try to reformat your personal computer and start to avoid installing unnecessary applications including chrome extensions.

Already did it, but it keeps happening on this computer, but it arent happening on my notebook, for example, goddamn crap technology i will throw this computer away on the street

[UserU]

Already did it, but it keeps happening on this computer, but it arent happening on my notebook, for example, goddamn crap technology i will throw this computer away on the street

Looks like a complete system reformat is the last resort. Backup your files and perform a clean reinstall.

Guaranteed you won't find those buggers on the PC anymore.