Recently, there have been frequent incidents of user deposit/withdrawal address tampering. This may occur due to users' computers being infected with Trojan viruses by malicious individuals, or usersRecently, there have been frequent incidents of user deposit/withdrawal address tampering. This may occur due to users' computers being infected with Trojan viruses by malicious individuals, or users
How to Safeguard Your Deposits and Withdrawals from Address Tampering
Recently, there have been frequent incidents of user deposit/withdrawal address tampering. This may occur due to users' computers being infected with Trojan viruses by malicious individuals, or users downloading and using browsers that have been maliciously modified, as well as installing malicious browser plugins. Another potential reason is users downloading MEXC software and third-party chat software from non-official channels. To assist users in preventing these risks, we have compiled some practical tips for checking and prevention. We strongly advise users to remain vigilant, enhance security precautions, and ensure the safety of their deposit/withdrawal operations.
1. Case 1: Is it safe to copy and paste? Beware of Trojan viruses altering your clipboard.
User A received a transfer address from User B via Telegram. However, when User A copied and pasted the address onto the withdrawal page, they discovered that it did not match the address User B had sent them.
1.1 Analysis:
The inconsistent copied and pasted address suggests that the operating system clipboard has been hijacked and tampered with, indicating a possible infection of the system with a Trojan virus.
1.2 How to Check:
In your operating system, copy the test address, then paste it into Notepad or other software. Compare the copied address with the target address. If they do not match, it indicates that your clipboard has been globally hijacked.
1.3 What to Do:
1.3.1 If you find that copying and pasting addresses on your device is consistently being hijacked, there is a high probability that your device has virus software installed. You need to promptly install antivirus software and scan for viruses. Additionally, you should update your system and install system security updates in a timely manner.
1.3.2 If the above steps do not resolve your issue, you may need to perform a system reinstall. Please note that reinstalling the system will result in the loss of all your data. Kindly proceed with caution. We recommend visiting an official offline service center for system reinstallation.
1.4 How to Prevent:
Regularly update your device's operating system (iOS / Android / Windows / macOS), promptly install system security patches, keep your browser version up to date, install antivirus software, and regularly scan for viruses.
2. Case 2: Is it safe to enter the address manually? Browser hijacking is hard to detect and prevent.
User A manually entered the transfer address on the withdrawal page, then clicked to submit. However, on the secondary confirmation page that appeared, they noticed that the address was different from the one they had just entered.
2.1 Analysis:
The address on the secondary confirmation page is not the one you entered because the browser page has been hijacked. Malicious browser software or browser plugins have been monitoring your input content and secretly replacing it.
2.2 How to Check:
When withdrawing from the MEXC platform on your browser, a secondary address confirmation is always performed. Please carefully verify if the confirmed address matches the intended address. If they do not match, it indicates that your browser interface has been hijacked. You can also test this by using a search engine. Enter the test withdrawal address into the search engine and click to search. Check if the address displayed on the search results page matches the test withdrawal address. If they do not match, your browser interface has been hijacked.
2.3 What to Do:
If you suspect that the hijacking issue exists only within the browser, there is a high probability that your browser has malicious plugins installed, or you have downloaded a non-official browser. If you downloaded the browser from an official channel, uninstall any suspicious plugins. If you are uncertain about the safety of any plugins, uninstall all of them. If you did not download the browser from an official channel, uninstall the browser and download it from an official source.
2.4 How to Prevent:
When using different browsers, exercise caution when installing third-party plugins, and avoid installing unreliable plugins from non-official sources.
3. Case 3: Your everyday chat app may be secretly altering your information
User A, using version XX of Telegram, received a message from User B. User B requested a deposit of USDT from User A and provided a deposit address. User A proceeded to make the deposit to the provided address, but User B did not receive the transfer after a long wait. Upon comparing the addresses, they discovered that the address sent by User B did not match the one received by User A.
3.1 Analysis:
The received address does not match the one sent address because a pirated version of Telegram was monitoring the information and altering it.
3.2 How to Check:
In the chat app, send an address to a friend and compare it with the address received on their device. If they do not match, it indicates that the conversation has been hijacked.
3.3 What to Do:
If you suspect that a third-party chat application has been hijacked, please uninstall the software and download the application from the official Telegram website.
3.4 How to Prevent:
Use third-party chat tools downloaded from official channelsand avoid downloading cracked versions, specific language versions, etc., from third-party platforms.
4. Case 4: Security is guaranteed only when you download from official channels.
User A downloaded the MEXC App via a cloud drive or other means, signed up for an account, and generated a deposit address, intending to make a USDT deposit. However, after making the deposit, they noticed that the funds had not arrived. Upon contacting official customer service to verify the situation, User A discovered that the address in their screenshot did not match the address generated by the platform for User A.
4.1 Analysis:
The address page on the official MEXC App clearly displays "Deposit Address Security Verification" and shows the contract address.
4.2 How to Check:
Check whether the installed MEXC App was downloaded from the official MEXC website (https://www.mexc.com/download), Google Play (https://play.google.com/store/apps/details?id=com.mexcpro.client), or Apple Store (https://apps.apple.com/app/mexc-buy-sell-bitcoin/id1605393003).
4.3 What to Do:
If it is determined that the installed MEXC software was downloaded from a non-official source, please uninstall the software and visit the official MEXC website (https://www.mexc.com/download) to download the latest version of the app.
4.4 How to Prevent:
Download the latest version of the app from the official MEXC website (https://www.mexc.com/download).
5. Conclusion
With the widespread adoption of cryptocurrencies, nefarious individuals are constantly devising new methods of stealing funds, resulting in frequent incidents of theft. Therefore, implementing meticulous security measures to protect account safety has become particularly urgent. This article discusses four case studies and their preventative methods, but it is important to note that preventive measures extend beyond these examples. Users can adopt various precautions based on their individual circumstances and requirements. As the cryptocurrency market continues to evolve, continuously enhancing security measures is crucial to staying ahead of malicious actors.
市场机遇
实时价格 ()
--
----
USD
() 实时价格图表
热门新闻
查看更多
Coldcard Mk3 警告紧随 3800 万美元 Bitcoin 被扫荡事件，但原因仍未确认
比特币硬件钱包制造商Coinkite已警告用户，Coldcard设备存在种子生成问题，影响从4.0.1版本起的所有Mk3固件版本。该警告是在安全研究人员调查一起涉及594.48 BTC（约合3,800万美元）的协同转移事件时发出的。然而，目前尚无公开的技术证据证实Coldcard的问题导致了这些转账。
相关文章
查看更多
MEXC 可用和受限国家/地区说明
MEXC 用户协议明确列出 13 个不接受用户的司法管辖区：美国、加拿大、英国、新加坡、香港、中国大陆、马来西亚、哈萨克斯坦、朝鲜、古巴、伊朗、苏丹，以及乌克兰境内受俄罗斯控制的地区。此外，受欧盟或美国全面制裁的国家，以及被金融行动特别工作组（FATF）列入“呼吁采取行动”名单的国家，同样不在服务范围内。 MEXC 也正逐步退出荷兰市场，最终终止服务日预定为 2026 年 11 月 16 日。 K
如何识别短信钓鱼
短信钓鱼是一种利用短信（SMS）作为媒介进行的欺诈行为，旨在窃取用户的敏感信息（如钱包私钥、登录凭据）或骗取加密货币资产。这种钓鱼行为通常通过伪装成可信赖的实体（如交易所、钱包服务商或政府机构）来诱骗受害者。1. 常见的短信钓鱼类型1.1 伪装成交易所的钓鱼链接骗子发送一条短信，声称来自知名交易所（如 MEXC 等），并附上一个链接。短信内容可能会警告用户账户有异常活动，需要立即登录。点击链接后，
貔貅币防范指南
加密货币交易新兴项目和币种层出不穷，由于潜在的高收益特点，对投资者来说同时隐藏着巨大风险。“貔貅币”这一说法，主要是投资者用来调侃那些只进不出、无法提现或流动性极差的加密货币的形象化称呼。在这个快速变化的市场中，了解“貔貅币”的特征和风险，成为每个投资者的必修课。1. 什么是貔貅币貔貅币（Honeypot Token）通常被用来形容那些具有“只进不出”特性的加密货币或项目。它通常有以下几类情况：无
