BTC sent to an unknown address. shows "unspent"

HCP

legendary

Activity: 2086

Merit: 4363

Quote from: maxxoutt on November 22, 2019, 04:07:29 PM

Thanks, so originally when I placed the order it prompted a "payment gateway" with a BTC address.

...The processing screen disconnected...

Then you (or the merchant) will need to contact the "Payment Gateway" provider and ask them to investigate. It is quite likely that something has gone wrong on their end and the payment for the order has not be registered correctly, so the merchant has not received his funds.

At this point in time, the Payment Gateway Provider are the probably the only people who will be able to track down your coins... as the "1Fb" address most likely belongs to them.

Quote from: khaled0111 on November 22, 2019, 11:23:54 AM

Quote from: maxxoutt on November 22, 2019, 10:35:06 AM

Does the wallet have to belong to someone?

It can't be just a random wallet as each address has a checksum and if you change any character it will be invalid.
Since you use Electrum, it will not allow you to send to an invalid address. So yes, that address must belong to someone.

Note that this isn't strictly true. You can send to any valid address... it doesn't necessarily mean that someone, somewhere has the private keys to it... for instance, "Bitcoin Burner" addresses like "1BitcoinEaterAddressDontSendf59kuE"

jackg

copper member

Activity: 2856

Merit: 3071

https://bit.ly/387FXHi lightning theory

Who owns the payment gateway? Can you contact them if its a third party and send them the deposit address, if it was shown they should be able to trace it. If not he might be scamming you if that was the payment address on the gateway page.

But its probably an error with the gateway engine.

maxxoutt

newbie

Activity: 10

Merit: 0

Quote from: khaled0111 on November 22, 2019, 11:23:54 AM

Quote from: maxxoutt on November 22, 2019, 10:35:06 AM

Does the wallet have to belong to someone?

It can't be just a random wallet as each address has a checksum and if you change any character it will be invalid.
Since you use Electrum, it will not allow you to send to an invalid address. So yes, that address must belong to someone.

Quote

I'm 99.9% sure the vendor wouldn't scam me.

Don't be so sure. The only way to verify this is by going back to the message where he sent you the receiving address and compare it to 1FbhSvzFQAYm2FTUjJeRB366N8ap3TgwWa.
If it is not the same then you must have copied it from somewhere else. Since the coins haven't been moved yet then its owner doesn't know about it which reduces the chances of him being a scammer.

Thanks, so originally when I placed the order it prompted a "payment gateway" with a BTC address. I copied and pasted it and sent to that address. I did not go back to the screen and double check before I actually hit send. Then, I went back to the screen and hit "confirm payment", and it took me to another processing screen. The processing screen disconnected, and so I contacted him and he said he got the order but not the coin, and to re-submit the order. So, I re-submitted it, and it gave me another "payment gateway" with a btc address. I didn't send the funds to that address since I had already sent it to the previous one.

So, I have no proof of the first btc but he sent me screen caps from his end of both payment gateways with 2 BTC addresses that were assigned to me, and neither of them were the ones I sent to .

Hope that makes sense. welcome to any other ideas.

khaled0111

legendary

Activity: 2744

Merit: 3097

Top Crypto Casino

Quote from: maxxoutt on November 22, 2019, 10:35:06 AM

Does the wallet have to belong to someone?

It can't be just a random wallet as each address has a checksum and if you change any character it will be invalid.
Since you use Electrum, it will not allow you to send to an invalid address. So yes, that address must belong to someone.

Quote

I'm 99.9% sure the vendor wouldn't scam me.

Don't be so sure. The only way to verify this is by going back to the message where he sent you the receiving address and compare it to 1FbhSvzFQAYm2FTUjJeRB366N8ap3TgwWa.
If it is not the same then you must have copied it from somewhere else. Since the coins haven't been moved yet then its owner doesn't know about it which reduces the chances of him being a scammer.

DireWolfM14

copper member

Activity: 2338

Merit: 4543

Join the world-leading crypto sportsbook NOW!

Quote from: maxxoutt on November 22, 2019, 10:35:06 AM

Yea really frustrating, as it was like $1000 sent. I checked my entire hard drive and no trace of it other than my searches yesterday.

That is frustrating. I hope you can figure it out, but I'll ask again, how did the vendor send you the address?

Quote from: maxxoutt on November 22, 2019, 10:35:06 AM

The fact that the details on the txid still says "not spent" does that mean no one has moved them from the wallet?

Correct.

maxxoutt

newbie

Activity: 10

Merit: 0

Yea really frustrating, as it was like $1000 sent. I checked my entire hard drive and no trace of it other than my searches yesterday. The fact that the details on the txid still says "not spent" does that mean no one has moved them from the wallet? So does it just sit in the random wallet forever? Does the wallet have to belong to someone?

I'm 99.9% sure the vendor wouldn't scam me. I know him well, and we have ongoing business together. Is there a possibility that that address goes to a wallet of his that he isn't aware of or something? If it were malware or a scam wouldn't it be marked as "spent" by now 2 days later?

Abdussamad

legendary

Activity: 3710

Merit: 1586

Quote from: maxxoutt on November 21, 2019, 07:38:43 PM

Quote from: Abdussamad on November 21, 2019, 07:02:26 PM

So 1FbhSvzFQAYm2FTUjJeRB366N8ap3TgwWa is not the intended recipient's address? If it's not then the coins are gone. I suggest you think back on what you were doing when you sent this payment. Maybe consult your browser's history. Did you copy addresses from other sites like exchanges? Could be this address belongs to some other site you were surfing at the time.

No this was the only thing I had done. Why do you think it is that the "previous output address" for this transaction is actually my receiving address?

Because that's where the coins were sent previously. Then you spent them in this transaction. If you don't get it then just ignore that.

What matters is where the coins were sent and apart from 0.003138 btc being sent back to your wallet as change the rest were sent to that 1Fb address.

nc50lc

legendary

Activity: 2618

Merit: 6452

Self-proclaimed Genius

Quote from: TryNinja on November 21, 2019, 06:33:00 PM

In most cases, yes. But what if the malware actually identifies when you make a payment and just "destroys" itself to avoid detection? I have never seen this before, but it's not an impossible scenario.

Based from the previous unsolved "changed recipient address" issues here, it's possible.
Eg: Re: Something not right. "P.S."

Quote from: maxxoutt on November 21, 2019, 07:38:43 PM

No this was the only thing I had done. Why do you think it is that the "previous output address" for this transaction is actually my receiving address?

I suggest you to do what Abdussamad had suggested first, then if the address is the same, answer DireWolf's question.
They've asked to find the possible scenarios, namely: [1] It's clipboard hijacking or [2] a Scam.

DireWolfM14

copper member

Activity: 2338

Merit: 4543

Join the world-leading crypto sportsbook NOW!

You said you copied and pasted the address into Electrum, how did you obtain the address? Was it presented to you on the vendor's website, or was it sent to you through email or some other messaging method?

Are you sure the vendor is legit, and they aren't lying to you about not receiving the payment?

maxxoutt

newbie

Activity: 10

Merit: 0

Quote from: Abdussamad on November 21, 2019, 07:02:26 PM

So 1FbhSvzFQAYm2FTUjJeRB366N8ap3TgwWa is not the intended recipient's address? If it's not then the coins are gone. I suggest you think back on what you were doing when you sent this payment. Maybe consult your browser's history. Did you copy addresses from other sites like exchanges? Could be this address belongs to some other site you were surfing at the time.

No this was the only thing I had done. Why do you think it is that the "previous output address" for this transaction is actually my receiving address?

Abdussamad

legendary

Activity: 3710

Merit: 1586

So 1FbhSvzFQAYm2FTUjJeRB366N8ap3TgwWa is not the intended recipient's address? If it's not then the coins are gone. I suggest you think back on what you were doing when you sent this payment. Maybe consult your browser's history. Did you copy addresses from other sites like exchanges? Could be this address belongs to some other site you were surfing at the time.

maxxoutt

newbie

Activity: 10

Merit: 0

Quote from: TryNinja on November 21, 2019, 06:33:00 PM

Quote from: maxxoutt on November 21, 2019, 06:28:21 PM

I tried copy/pasting other emails into my wallet and they did not change. If there were malware wouldn't I have seen it change?

In most cases, yes. But what if the malware actually identifies when you make a payment and just "destroys" itself to avoid detection? I have never seen this before, but it's not an impossible scenario.

Also, most Electrum fake wallets tend to send your whole balance to a random address after you open it, but not only the coins were only sent when you actually did the transaction, but part of your coins are still there. So I'm not sure if that's the case.

Quote from: maxxoutt on November 21, 2019, 06:28:21 PM

If I did send it to myself, what could I do? Also, is there a way for me to find the address I sent it to within my addresses? I checked already my addresses and could not find it in there. thanks

What you can do to know if the address you sent the coins to is owned by you is open the console tab ("View -> Show Console" to enable it) and run:

ismine("ADDRESS HERE")

If it returns true, you own this address. If not, then you don't. Try this with both output addresses shown in the transaction.

And where did you download Electrum from?

Ok I ran the console.
The address where the coins are showing to be now: False
The other output address (my change address): True
The address that says "previous output address) on the txid details: True

Well here, I don't have much other option so here is the TXID if that helps you help me. thanks all
6e935f5dc1f271924c6e51a7ec7f4a6dea65dd74c91d8fd7c63b5182648f46dc

maxxoutt

newbie

Activity: 10

Merit: 0

Quote from: TryNinja on November 21, 2019, 06:33:00 PM

Quote from: maxxoutt on November 21, 2019, 06:28:21 PM

I tried copy/pasting other emails into my wallet and they did not change. If there were malware wouldn't I have seen it change?

In most cases, yes. But what if the malware actually identifies when you make a payment and just "destroys" itself to avoid detection? I have never seen this before, but it's not an impossible scenario.

Also, most Electrum fake wallets tend to send your whole balance to a random address after you open it, but not only the coins were only sent when you actually did the transaction, but part of your coins are still there. So I'm not sure if that's the case.

Quote from: maxxoutt on November 21, 2019, 06:28:21 PM

If I did send it to myself, what could I do? Also, is there a way for me to find the address I sent it to within my addresses? I checked already my addresses and could not find it in there. thanks

What you can do to know if the address you sent the coins to is owned by you is open the console tab ("View -> Show Console" to enable it) and run:

ismine("ADDRESS HERE")

If it returns true, you own this address. If not, then you don't. Try this with both output addresses shown in the transaction.

And where did you download Electrum from?

Ok I'll try that. I downloaded from electrum.org I believe. I've successfully sent and received before recently.

Wait ok I searched the TXID details and it says "previous output address" and that address is listed in my "input" for that transaction, and that address ALSO is my receiving address. So what does that mean?

TryNinja

legendary

Activity: 2758

Merit: 6830

Quote from: maxxoutt on November 21, 2019, 06:28:21 PM

I tried copy/pasting other emails into my wallet and they did not change. If there were malware wouldn't I have seen it change?

In most cases, yes. But what if the malware actually identifies when you make a payment and just "destroys" itself to avoid detection? I have never seen this before, but it's not an impossible scenario.

Also, most Electrum fake wallets tend to send your whole balance to a random address after you open it, but not only the coins were only sent when you actually did the transaction, but part of your coins are still there. So I'm not sure if that's the case.

Quote from: maxxoutt on November 21, 2019, 06:28:21 PM

If I did send it to myself, what could I do? Also, is there a way for me to find the address I sent it to within my addresses? I checked already my addresses and could not find it in there. thanks

What you can do to know if the address you sent the coins to is owned by you is open the console tab ("View -> Show Console" to enable it) and run:

ismine("ADDRESS HERE")

If it returns true, you own this address. If not, then you don't. Try this with both output addresses shown in the transaction.

And where did you download Electrum from?

maxxoutt

newbie

Activity: 10

Merit: 0

Quote from: TryNinja on November 21, 2019, 06:06:09 PM

Quote from: maxxoutt on November 21, 2019, 05:57:37 PM

took a screen shot trying to figure out how to attach lol

Upload it to imgur.com and post the URL of the image here.

Where did the user sent you his address? Are you just assuming that the address shown isn't the one he sent you (because he told you so), or did you really check this? (e.g by looking at the message/email/etc where he sent you the address).

I'm certain that I did not send it to his address. I just don't know what the address is that it did send to. But based on the screen shot does that tell you anything? I suspected that I may have sent it to myself, because that was the only explanation I could think of. I tried copy/pasting other emails into my wallet and they did not change. If there were malware wouldn't I have seen it change?

If I did send it to myself, what could I do? Also, is there a way for me to find the address I sent it to within my addresses? I checked already my addresses and could not find it in there. thanks

https://imgur.com/a/lVZ3YKY

DireWolfM14

copper member

Activity: 2338

Merit: 4543

Join the world-leading crypto sportsbook NOW!

Quote from: maxxoutt on November 21, 2019, 05:46:11 PM

version 3.3.4

There was a malicious version being spread around last year that was labeled "3.3.4" if I remember correctly. Where did you download your version of electrum?

Quote from: maxxoutt on November 21, 2019, 05:46:11 PM

When I open details, the input is green, then there are 2 outputs, one is yellow, the other is not any color. How would I find out if I sent it to myself? Wouldn't I see an incoming transaction. Thanks for your help on this. Giving me hope!

The one highlighted in yellow is your change address, those coins are still in your wallet. The one lacking color is an external address, and doesn't belong to your wallet. Since the wallet already contained the coins, you wouldn't see an incoming transaction for the change wallet, just the one transaction that sent the coins from the input transaction.

Quote from: maxxoutt on November 21, 2019, 05:17:43 PM

I can post the TXID but I don't know if that is cool to do.

The only reason not to is if you're concerned about your privacy, but since you already posted a screen shot we now know how much bitcoin you had in your wallet. Based on that screen shot it looks like a significant portion of you coins went to that unknown address.

maxxoutt

newbie

Activity: 10

Merit: 0

Quote from: jackg on November 21, 2019, 05:20:47 PM

Does it show a negative on the transaction and is it negative the amount you meant to sent?

It could be that you've accidentally sent the funds to yourself and then it'd show - 0.00001 to account for fees (or close to that).

Can you take a screenshot of the wallet?

https://imgur.com/a/lVZ3YKY

TryNinja

legendary

Activity: 2758

Merit: 6830

Quote from: maxxoutt on November 21, 2019, 05:57:37 PM

took a screen shot trying to figure out how to attach lol

Upload it to imgur.com and post the URL of the image here.

Where did the user sent you his address? Are you just assuming that the address shown isn't the one he sent you (because he told you so), or did you really check this? (e.g by looking at the message/email/etc where he sent you the address).

maxxoutt

newbie

Activity: 10

Merit: 0

Quote from: jackg on November 21, 2019, 05:20:47 PM

Does it show a negative on the transaction and is it negative the amount you meant to sent?

It could be that you've accidentally sent the funds to yourself and then it'd show - 0.00001 to account for fees (or close to that).

Can you take a screenshot of the wallet?

yes it says - before the number and it is red. how do I obtain them if I sent to myself?

took a screen shot trying to figure out how to attach lol

maxxoutt

newbie

Activity: 10

Merit: 0

Quote from: HCP on November 21, 2019, 05:32:52 PM

If you open the transaction in Electrum (double click in transaction history... or right click and select details)... what colour are the 2 outputs?

One should be yellow (your change address)... what colour is the other one? If it is Green, it's one of your addresses and you're somehow sent funds to yourself. If it has no highlighting, then it is an external address.

Quote from: maxxoutt on November 21, 2019, 05:17:43 PM

The funds say "unspent". So what do you think happened?

"unspent" simply means that outputs created by the transaction have not been spent by whomever received them.

Quote

And why did it create 2 outputs, one of them being mine? Any suggestions on what to do?

2 outputs is fairly normal when you have "change"... You can't "break" an input... you have to spend the whole thing. Much like having a $20 note in your pocket and trying to spend $1... you have to give the person the whole $20 and they'll give change. Same in bitcoin... you have 0.01 and need to spend 0.002? then the person gets 0.002 and you get 0.008 back to your "change address".

read this for more: https://en.bitcoin.it/wiki/Change

One last thing to check... what version of Electrum are you running? If it is 4.0.0, then it's a fake version. I vaguely recall seeing issues where these fake versions would change the address that funds were being sent to.

version 3.3.4
When I open details, the input is green, then there are 2 outputs, one is yellow, the other is not any color. How would I find out if I sent it to myself? Wouldn't I see an incoming transaction. Thanks for your help on this. Giving me hope!

Topic: BTC sent to an unknown address. shows "unspent" (Read 294 times)