Check the destination after pasting, not only before copying.
LET’S PICTURE IT
A swapped label on a parcel can redirect delivery even when you originally wrote the correct address.
SEE IT FOR YOURSELF
From a public address to a verified signatureStep 1 / 4
An address is public receiving information. It is not the private key that authorizes actions.
An address is public receiving information. It is not the private key that authorizes actions.The local signing system uses secret authorization material. It produces a signature; the private key is not sent along with it.A verifier checks the signed request under the account’s rules. A valid signature does not by itself prove that the action is safe.Balances belong to network state. A wallet is an interface and signing system, not a box containing coins.
Animated local teaching model. No wallet, RPC or live blockchain data. Some labels and hashes are abbreviated for readability.
The copied value can be changed
Malicious software or an untrusted environment can replace clipboard contents. A user may copy the intended address and paste a different one. The receiving application shows what it actually received, which is the value to review.
Compare the complete result
Check the full address after pasting and confirm the network and asset context. A matching prefix and suffix do not prove the middle characters match. A checksum-valid replacement can still belong to an attacker.
QR codes need inspection too
Scanning avoids one copy operation but introduces another input source. The encoded destination and any payment fields must still be reviewed. A QR image is data, not a certificate of ownership or honesty.
Use a known destination source
Establish the recipient through a trustworthy channel, then compare the final wallet request. Our copy buttons copy the displayed address; the site cannot inspect or guarantee the security of a visitor’s device clipboard.
QUICK CHECK · NO PRESSURE
Which value should you verify immediately before authorizing a transfer?
The final request contains the destination that will be authorized.