How to check a crypto wallet address before you send
A six-step routine for checking any crypto address before a transfer: trusted source, full comparison, the right network, on-chain history, sanctions screening and a test transaction.
By Web3 Copilot team4 min read
To check a crypto address before you send, get it from a source you trust, compare every character, confirm the network, look at the address history, screen it against sanctions lists, and send a small test amount first when the transfer is large. Each step takes seconds, and together they cover the mistakes that cost people the most.
Blockchain transfers are final. There is no bank to call and no chargeback. Once a transaction is confirmed, the only way to get funds back is if the recipient chooses to return them. That is why the check has to happen before you press Send.
1. Get the address from a source you trust
Copy the address from the place the recipient controls: their exchange deposit page, an invoice you can verify, or a message in a channel you already know is theirs. Avoid addresses from:
- your wallet's transaction history (this is exactly what address poisoning targets),
- direct messages from accounts you have not verified,
- search results and ads for "official" deposit addresses.
Some malware watches the clipboard and swaps any crypto address you copy for one the attacker controls. The pasted address looks plausible, so the swap goes unnoticed. The next step is your defence against it.
2. Compare the whole address, not just the ends
Most people check the first and last four characters. Scammers know this and generate lookalike addresses that match exactly those characters. Compare the full address, or at least a block in the middle as well as both ends.
3. Make sure the network matches
The same token can live on several networks, and addresses on different networks can look identical. An Ethereum address is also a valid address on BNB Chain, Polygon, Arbitrum, Base and other EVM networks. Sending on the wrong one can leave funds where the recipient cannot reach them, or where recovery depends on an exchange's goodwill.
Address formats give you a quick sanity check:
| Network | What the address looks like |
|---|---|
| Ethereum and EVM networks | 0x followed by 40 hexadecimal characters |
| Bitcoin | Starts with 1, 3 or bc1 |
| TRON | Starts with T, 34 characters |
| Solana | 32 to 44 base58 characters, no prefix |
| TON | Usually starts with EQ or UQ |
If the recipient asked for USDT, ask which network they expect. "USDT" on Ethereum and "USDT" on TRON are different tokens on different chains. We have separate guides for USDT on TRON and Solana addresses.
4. Look at the address history
Open the address on a block explorer or in a wallet analyzer and ask a few questions:
- How old is it? A brand-new address is not suspicious by itself, but it is odd if someone describes it as their long-standing business wallet.
- Is it a wallet or a smart contract? Sending tokens to a contract that was not built to receive them can lock them forever.
- Who does it interact with? Transfers to mixers, known scam addresses or flagged services are a reason to stop and ask questions.
- Does the activity match the story? An "exchange deposit address" with three transactions in its life deserves a second look.
5. Screen it against sanctions lists
The U.S. Treasury's Office of Foreign Assets Control (OFAC) publishes crypto addresses that belong to sanctioned people and organisations. Sending funds to one can create legal problems on top of the loss. A sanctions check is quick and should be part of every larger transfer. We explain what the results mean in OFAC sanctions screening for crypto addresses.
6. Send a test transaction when the amount is large
For a large transfer, send a small amount first and ask the recipient to confirm they received it. It costs one extra network fee and catches wrong networks, wrong addresses and wrong memo or tag fields before the big transfer goes out.
How Web3 Copilot does steps 3 to 5 in one go
Web3 Copilot is a free Chrome extension that runs the checks above for any address you paste or open on a block explorer. The network is detected for you, and the report opens with a Risk Score from 0 to 100, where higher means riskier:
- Minimal observed risk0–15
- Low risk16–30
- Medium risk31–50
- High risk51–75
- Critical risk76–100
Under the score you see the main reasons, a confidence level, and an AML and sanctions card that shows the result of each source separately: the OFAC list and a private risk database that covers Ethereum, BNB Smart Chain, Polygon, Arbitrum, Base, Optimism, Bitcoin, TRON and Solana. When there is too little data for a fair score, the report says "Limited assessment" instead of showing a number. Missing evidence is never presented as safe. Our guide on reading an AML check explains each result.
A low score is not a guarantee. It means the sources we could check found nothing worrying. Steps 1, 2 and 6 still depend on you.
Quick checklist
- The address came from the recipient's own, verified channel.
- You compared the full address, not just the ends.
- The network matches what the recipient expects.
- The history fits what you were told about the address.
- The sanctions check found no match.
- For a large amount, a test transfer arrived.