Scam patterns
Clipboard-address substitution
Malware replaces a copied address before it is pasted.
Research articles and reference entries are published in English. Navigation is available in seven languages.
In this article
Overview
Malware replaces a copied address before it is pasted.
Why it matters
A similar prefix and suffix make a short visual check pass.
What to check
Compare the full address on the signing device and preserve clipboard history and malware evidence.