How to Verify a Bitcoin Address Before Sending
Bitcoin transactions are irreversible. There are no chargebacks, no "oops" buttons, no customer support line that can get your funds back if you send to the wrong address. This makes address verification one of the most critical security practices in Bitcoin — and one of the most commonly skipped.
Here's exactly how to do it right, every single time.
Why Address Verification Matters
Three things can go wrong when sending Bitcoin:
- You typed the address wrong. Bitcoin addresses are long, case-sensitive strings. A single character error typically means funds go to an invalid address (and are unspendable) or, rarely, to someone else's valid address. Either way, they're gone.
- Clipboard malware swapped the address. This is the scariest one. A class of malware specifically monitors your clipboard for Bitcoin addresses and replaces them with the attacker's address when you paste. You think you're pasting the right address; you're actually sending to a hacker.
- A phishing site or scam showed you a fake address. A site impersonating an exchange or service might display their address instead of the legitimate one, hoping you'll send funds to them.
All three of these have cost people significant amounts of Bitcoin. And all three are preventable.
The Hardware Wallet Screen Is Your Source of Truth
If you use a hardware wallet like the Trezor Safe 5, this is your primary defense. Before signing any transaction, your hardware wallet displays the destination address on its own screen — a screen that your computer cannot tamper with.
Receiving Bitcoin: When generating a receive address, always verify the address on your hardware wallet screen, not just in the software. Trezor Suite will prompt you to confirm the address on the device. Do it. This confirms the address actually belongs to your wallet and wasn't spoofed by compromised software.
Sending Bitcoin: Before signing a transaction, your Trezor will show you the destination address on its screen. Read it. Compare it to what you expect character by character. If they don't match — if the address shown on your Trezor differs from what you see on your computer — stop immediately. Do not confirm. Something is wrong.
Step-by-Step: Verifying a Bitcoin Address Before Sending
Step 1: Obtain the destination address
Get the address from the recipient through a secure channel. If someone sent it via email or text, be cautious — those channels can be compromised. For repeated transactions, verify the address hasn't changed since you last used it.
Step 2: Check the first and last 4 characters
When you paste an address, at minimum check the first 4 and last 4 characters match what the recipient provided. Clipboard malware typically substitutes a completely different address, so this will catch it. But don't stop here for large amounts.
Step 3: Verify character-by-character for large amounts
For any meaningful amount, go character by character. It takes 30 seconds and can save everything. Ask the recipient to confirm the full address via a second channel (if they gave it by email, confirm by phone or messaging app).
Step 4: Send a small test transaction first
For new addresses you haven't used before, always send a small amount first — $5-20 worth. Confirm it arrives. Then send the remainder. Yes, this costs an extra transaction fee. That fee is insurance.
Step 5: Verify on your hardware wallet screen
When the transaction appears on your Trezor Safe 5 for signing, read the address on the device screen. Don't just tap confirm. Read it. If it matches what you verified in steps 2-4, proceed. If anything is different, reject the transaction and investigate.
Defending Against Clipboard Malware
Beyond address verification, you can reduce clipboard malware risk by:
- Keeping your computer malware-free (obvious, but worth saying)
- Using a dedicated, clean device for Bitcoin transactions — ideally one that doesn't browse random websites
- After pasting an address, immediately look at what was pasted before doing anything else
- Using the QR code scanning feature when available — malware typically targets clipboard, not camera
The QR Code Option
Many Bitcoin wallets and exchanges support QR codes for addresses. This is more secure than copy-paste because it bypasses the clipboard entirely. If you can scan a QR code instead of copy-pasting, prefer it.
But still verify the address on your hardware wallet screen after scanning. Malicious QR codes exist. The hardware wallet screen is the final word.
When Something Looks Wrong
If the address on your hardware wallet screen doesn't match what you expect, stop. Don't confirm. Close everything. Restart your computer. Run a malware scan. Try again on a different device if possible. Ask the recipient to confirm their address again through a different channel.
It may feel like paranoia. One incident of losing Bitcoin to a wrong address will reframe that entirely. The Trezor Safe 3 or Safe 5 exists precisely to make this kind of verification easy and reliable. Use it as designed.
The 30 extra seconds of verification is the best investment in Bitcoin security you'll ever make.
Our Recommended Hardware Wallets
- Trezor Safe 5 — Best for most Bitcoiners
- Trezor Safe 3 — Best budget option
- Ledger — Best for multi-coin holders