You are transferring Bitcoin from an exchange to your hardware wallet. You open the app, copy the receiving address, paste it into the withdrawal form, and confirm. Everything looks right. But what if the address belongs to someone else?
Malware can replace a copied crypto address or alter what appears on a phone screen. Your private keys may remain untouched while the funds go to an attacker. Protecting keys is only part of the job: you also need to verify where your crypto is going.
Why an Address in an App Is Not Enough
A hardware wallet keeps private keys separate from your phone or computer. Its companion app can still show balances, transaction history, and receiving addresses without holding those keys. That convenience creates a different trust boundary: the screen and clipboard on your everyday device can be compromised.
For example, clipboard malware can replace a Bitcoin address with one controlled by an attacker. A convincing replacement may even share the first and last characters. The exchange sends the funds exactly where you told it to. No private key has to be stolen.
A hardware wallet with its own screen offers an independent way to check the receiving address. But before relying on that comparison, it makes sense to verify the tools involved.
Three Checks Before Receiving Crypto
Using ERA Wallet as an example, the process covers three different questions: Is the app genuine? Is the device genuine? And does the receiving address match?
1. Verify the ERA Wallet app
A familiar-looking interface is not proof that an app is authentic. ERA Wallet app (version 1.12 and later) includes Settings → Verify app, which works with a separate browser verification service. Open verify.era-wallet.com, scan the site’s QR code or enter its challenge code in the app, and review the result in your browser.
The app submits hardware-backed attestation evidence tied to the challenge. The service evaluates that evidence rather than asking the app to simply declare itself genuine. This is an authenticity check, not a guarantee that the phone is free of every possible threat. Always verify that you are using the legitimate website.
2. Check the ERA Wallet device
A genuine app does not automatically prove that the physical device is genuine. ERA Wallet device supports an Authenticity Check based on a cryptographic challenge-response exchange.
In ERA Wallet app, open Settings → Authenticity Check. On ERA Wallet device, go to Settings → Authenticity. The app displays a challenge QR code; the device scans it and produces a signed response as another QR code. The app verifies the response. The check is included in initial setup and can be repeated later.
For the complete sequence, see the official authenticity-check guide. A successful result verifies the expected cryptographic response, not the absence of every conceivable security issue.
3. Compare the receiving address on the device
Now verify the destination itself:
On ERA Wallet device, open the intended wallet, select DEPOSIT, and choose the network (for example, Bitcoin). The device displays the receiving address as text and a QR code.
In ERA Wallet app, open Receive for the same wallet and network.
Compare the entire address, character by character, on both screens. Do not rely only on the beginning and end.
If the addresses differ, stop and investigate before sending funds. If they match, you can share the device-displayed QR code or use the address from the app. When copying, check the address again after pasting it into the exchange withdrawal form: clipboard malware can change it during the transfer.
A QR code is only a way to encode an address. It does not prove ownership. A malicious app can generate a perfectly valid QR code for an attacker’s address.
See the ERA Wallet receiving-address guide for the full device flow.
What If the Bitcoin Addresses Do Not Match?
A mismatch is not automatically an attack. Bitcoin wallets can derive multiple receiving addresses from one wallet; using a fresh one helps privacy. A different address number, Bitcoin format (such as Native SegWit, Taproot, or Legacy), account, or passphrase can also change the displayed result.
Make sure the app and device are using the same wallet and address settings. Until the discrepancy is explained, do not send funds.
Verify the Destination, Not Just the Keys
A hardware wallet helps isolate your private keys, but it cannot make every value shown on a compromised phone trustworthy. Checking the app, checking the device, and comparing the receiving address address different risks. None offers absolute protection; together they replace several assumptions with concrete checks.
Your keys can be safe while your funds are sent to the wrong place. Verify the destination before you send.
Explore hardware-based verification with ERA Wallet. Code ERABLOG20 for 20% off.
