Electrum wallet not receiving confirmed transaction

[Electrumuser2020]

Hello all,

I was hoping someone might be able to help with a problem I have with a confirmed transaction that is not appearing in my Electrum wallet.

Bitcoin Client Software and Version Number: Electrum 4.0.5
Operating System: Windows 10
System Hardware Specs: AMD CPU
Description of Problem: I purchased bitcoin from a coin exchange, and transferred them to my Electrum wallet, using a 'receive' address I copied from the wallet. The transaction ID is showing that the transaction has beeen confirmed (over 30 times), but my Electrum wallet has never indicated that it has received the coins. When I use 'Load transaction from the blockchain' it says that the transaction exists in the block chain, but Electrum still does not receive the coins.
Any Related Addresses: The receive address was bc1qe2ejfuyvmyzvc0q88hxqqujf3m8p7nm2hmcqxu however, this is not listed in the Electrum 'Addresses' tab
Any Related Transaction IDs: The transaction ID confirms the address I used was correct and the transaction is completed.
Screenshot of the problem:

transaction ID

https://i.ibb.co/5c8P2xJ/transaction-ID.png

Wallet address
https://i.ibb.co/3p5sPzb/wallet-address.png

The receiving address is not listed as a receiving address on the 'addresses' tab of Electrum
https://i.ibb.co/4Yx3dSR/receiving-addresses.png

I've never had this problem before and purchased coins multiple times from the same coin exchange and used the Electrum wallet. Is there anything I can do to get this transaction to appear in my wallet?

[1715362690]

1715362690

[1715362690]

1715362690

[1715362690]

1715362690

[ranochigo]

It's weird that the address has so many transactions AND the address is not showing up on your wallet. I'm suspecting that you might have been infected with a clipboard virus that could've replaced whatever address that you copied with their own.

Hopefully, that's not the case but have you used that specific address to receive the coins before? Did you copy and paste the address and did you verify that it's in your wallet before sending funds to it?

Could you go to Console and type ismine("bc1qe2ejfuyvmyzvc0q88hxqqujf3m8p7nm2hmcqxu"). Let me know the results.

[Electrumuser2020]

Hi,

Thanks for the quick feedback. I typed the console command and it said 'false'

You are connected to an ElectrumX 1.10.0 server.
>>>  ismine("bc1qe2ejfuyvmyzvc0q88hxqqujf3m8p7nm2hmcqxu")
false
>>>


I haven't used that address before, I just opened Electrum like I usually do, go to the receive tab, and copy and paste the address it gives me into the coin exchange.

[ranochigo]

Hi,

Thanks for the quick feedback. I typed the console command and it said 'false'

You are connected to an ElectrumX 1.10.0 server.
>>>  ismine("bc1qe2ejfuyvmyzvc0q88hxqqujf3m8p7nm2hmcqxu")
false
>>>

That's weird. Addresses don't just disappear like that.

Can you copy a random address (try mine from the profile) and paste it somewhere and see if it has been changed?

[Electrumuser2020]

I copied your address from your profile (from the Skype field) and ran the same command in the console and got a false

>>>
You are connected to an ElectrumX 1.10.0 server.
>>>
You are connected to an ElectrumX 1.10.0 server.
>>>  ismine("bc1qe2ejfuyvmyzvc0q88hxqqujf3m8p7nm2hmcqxu")    < This is my address
false
>>> ismine ("bc1qw0kuknm09z65h58rr3lgez7qtcu7famwk6tjte")       < This is the address I copied from your profile
false
>>>

[Electrumuser2020]

i think you may be correct.

When i cut and paste from Electrum into notepad, the address changes

https://i.ibb.co/hHgmjWX/address-change.png

This doesn't look good......

[ranochigo]

I copied your address from your profile (from the Skype field) and ran the same command in the console and got a false

>>>
You are connected to an ElectrumX 1.10.0 server.
>>>
You are connected to an ElectrumX 1.10.0 server.
>>>  ismine("bc1qe2ejfuyvmyzvc0q88hxqqujf3m8p7nm2hmcqxu")    < This is my address
false
>>> ismine ("bc1qw0kuknm09z65h58rr3lgez7qtcu7famwk6tjte")       < This is the address I copied from your profile
false
>>>

That's not my address. The first few characters may look similar but the remaining characters are very different.

You've probably been infected by a clipboard virus. The malware changes any Bitcoin addresses that it detects in the clipboard and changes it to one that looks similar and that they control. You have to backup all your important files and do a complete wipe of your computer. Some may be fairly persistent and using an antivirus would not be sufficient.

[Electrumuser2020]

Thanks ranochigo, im 100% certain you have found the problem and I will do a complete wipe and re-install of Windows. I have run malware bytes and this seems to have fixed the problem, but I will do a re-install to be sure.

As I was copying and pasting the address, I did not realise that all the searching i was doing using the 'fake' address, not my actual one. Even in my opening post of the thread! When I now search for an address related to my actual address - bc1qxsw5p6mjvnuaezjyucc3r9yn5uq22yrx3j6ztu - it finds no transactions.

>>> ismine ("bc1qxsw5p6mjvnuaezjyucc3r9yn5uq22yrx3j6ztu")
true
>>>

In terms of the bitcoin, I'm guessing I have lost them?

[ranochigo]

In terms of the bitcoin, I'm guessing I have lost them?

Unfortunately, yes. There's no way of getting them back.

[NotATether]

Slightly off topic but I am wondering if Windows provides Win32 APIs for detecting clipboard access and seeing which applications are writing stuff to it. The idea is to make a simple program that kills anything that replaces a BTC address in the clipboard with another BTC address. Or if that program is running with System privileges, at least "suspend" the execution of that program using the appropriate Win32 syscall (most viruses just exit if another instance of it is running, but they don't check if it's suspended). Maybe some Windows devs can weigh in on this to see if this idea is feasible to implement.

[Kakmakr]

Yea... good work #ranochigo .... I also thought it was that, but I did not want to say it before I was sure that it was, because I too lost a small amount of coins that way.

Since then I just Copy & Paste the address in the Clipboard to WordPad to see if I did not pick up the Clipboard hijack since my last transaction as a precautionary measure.

I think the number 1 rule of thumb must be to check and double check any information that were copied to the Clipboard, so thank you for that reminder. 

Can someone develop something to wipe the Clipboard .... before you use it in Electrum? (Or add a preview and confirm function?)