What to do when you copy an address from a swap site and your wallet flags it

05 September 2026

Stop. Do not override the warning until you understand what triggered it. Most wallet flags fall into one of a few categories, and the right response depends on which one you are seeing.

First, read the exact text of the flag. Many wallets display a short reason: "known scam address," "phishing site," "low reputation," or simply "unverified." If the warning says the address is associated with fraud or has been reported stolen, do not send funds. Copy the address into a block explorer and check its transaction history yourself. If you see a pattern of small test deposits followed by large withdrawals to unrelated addresses, treat it as a confirmed risk.

If the flag says "unverified" or "no prior transactions," that is different. Newly generated deposit addresses from legitimate swap services often have no on-chain history. A wallet that flags every fresh address will flag them. In that case, cross-check the address against the swap site's official deposit page. Open the site directly - never via a link from an email or a social media post - and confirm that the address matches exactly, character by character.

A common trick is clipboard hijacking. Malware or a malicious browser extension can replace a copied address with one controlled by an attacker. If your wallet flags the pasted address, do not assume the flag is the only problem. Compare what you copied with what your clipboard actually stored. Paste the address into a plain text editor first. Look for substitutions: a different character, a checksum mismatch, or an entirely different string.

If the address matches the site’s official page but the wallet still flags it, check the site’s SSL certificate and domain name. Fraudulent swap sites clone the real interface but use a misspelled domain. A wallet that flags the address may be detecting the site, not the address itself. Verify the domain in your browser bar. If it looks correct, check the site’s registration date on a WHOIS lookup. A site registered two weeks ago that claims to have been operating for years is a red flag regardless of what the wallet says.

When you have confirmed the address is legitimate and the site is genuine, you can safely proceed. But do not blindly whitelist the address in your wallet. Some wallets let you mark an address as trusted. Only do that after you have verified every detail above. Once whitelisted, future deposits to that address will not be flagged - which means you lose a layer of protection if that address is later compromised.

If you cannot verify the address or the site, do not send funds. The swap site may be a phishing page that routes real addresses to attackers. In that case, the safest action is to close the browser tab, clear your clipboard, and start fresh from a bookmarked URL you know is correct.

After you resolve the immediate question, read the hub page "Swapping crypto safely" for the broader set of checks that apply before every transaction. That page covers how to verify a swap site’s reputation and what to do if a swap completes but the coins never arrive - neither of which is the problem you are solving right now, but both are worth knowing before your next exchange.

Back to getting started