Topic: Chip Mixer Problems (Read 314 times)

You should assume your computer is compromised. Backup your data, wipe it, and start over. Move all your coins to a new wallet (unless they're currently on a hardware wallet), and change all your passwords (to unique new ones).

For privacy and security, you may want to check Tails: a Linux-based OS that runs from CD or USB stick, and comes with Electrum and Tor browser by default.

You're speaking from the perspective of someone who understands things at a slightly higher level than the average user who still needs help to defend against malicious threats. I don't consider myself a beginner in this sense, but it never occurs to me to be online without top AV and antimalware protection + firewall.

I'm not saying that such a way of accessing the internet would save the OP from what happened to him, but a lot of people have malicious programs on their computers without even being aware of it because they don't use any protection.

Generally speaking, if you always have to rely on security tools such as AVs to use the web safely, then something is wrong with your setup in the first place. It is perfectly possible to browse the internet without malware attacking you at every corner.

Just follow the advice above and I hope the 3rd time you'll not end up in the same process.  Why not use other devices that are safe and don't have a keylogger or possible malware infection?

Considering additional security tools might help you to decrease the chances of keyloggers infecting your device, choose a legitimate AV that can add security level to your computer.

This wallet is a native SegWit wallet address, there is a bunch of options to have this wallet address.

Dude it's problem on your end, it could be your computer being infected or something else, and you are again asking should you try it again, sorry but that doesn't sound like a statement from intelligent person.
You didn't answer any of my question how you heard about Chipmixer website and did you search it using google browser, so you are not really helping anyone falling in same trap.
If you are using WiNd0ws OS on your computer it's possible that you have some keylogger or other type of malware, so format and install linux os from scratch if you want to be more secure.

Already a few users have expressed their suspicions about the possibility of having some kind of malware on your computer, I didn't see you denying that you have found something and I don't see you planning on at least scanning the damn machine with an anti-virus malware program. That would be the first step one should take, at least you can scratch this from the list and we can move to something else as probably at least half of the ones throwing opinions here will do the same as me. And no, don't do anything before you at least look into this!


And probably the best thing is to not download anything at all on the computer you use to transfer or send coins, especially if you have a larger amount stored there and tons of payments, but for most, it's not really an option to have a separate machine for that.


Or maybe add the whole list mentioned in LeGaulois's topic.

The first time, I admit, I screwed up.
However the 2nd time, I used the official site found on this forum. I compared it with scam lists on this forum, I directly copied the link from the official ChipMixer thread. I spent an hour researching it to make sure I had the right address before trying again and used a minimum deposit. And it still got me!

and no one has been able to explain why other than "the wallet address should have started with 'bc1..'" Well it did not.

Does that answer your question?

Im posting here because there may be other users that fall into the same trap I did.

I don't know how you found that website and how you heard about Chipmixer but you should never search mixing terms in google search because it gives many scam phishing website results.
It's much harder to get scammed with onion website but it can still happen if you are not careful and you don't verify address on official Chipmixer website.
Can anyone tell me what happened? I lost two deposits and it makes me sick to be throwing money away. I don't want to try a third time.
[/quote]

Why did you send coins the second time after you lost them the first time?

You got fooled before with hyz website so your trust level has gone down a lot after that.
I am not going to trust anyone expertise online, especially if that guy recently registered in forum, but there was few cases before when attackers managed to hijack website and you wouldn't notice much difference when using it.

I am very confident I had the correct site (at least when I started). Trust me, I got scammed once, I wasn't going go to an incorrect site again! I am confident when I reloaded and restored session that I got the same incorrect wallet address.

 But I can not duplicate it and I can not prove anything. So it is just very frustrating.

TOR can sometimes be quite slow, and sometimes access to individual sites is quite difficult, CM is no exception to that. The best thing you can do in that case is restart TOR and get a new Identity/New Tor Circuit.


It would be much more important if you checked what was before .onion, because scammers have access to these addresses like everyone else and can create a similar address as the original CM TOR link.


Your money, your risk - you really should be 100% sure you're on the right site. Also, take into account that you need to pay a slightly higher fee than otherwise if you want the BTC transaction to be confirmed within a reasonable time (there are currently about 10 000 unconfirmed transactions in the mempool). Of course, you can always save the session token and come back later for your mixed coins.

If that's the case, you probably visited a fake website and the scammers give the same deposit address to different users.


Yes. You can see some in the topic created by LeGaulois and there may be more.
Scams Bitcoin Mixers List and Services closed

The only other thing I noticed was the site was VERY slow. It kept timing out when trying to load the page, and I would have to constantly have to refresh the page to get it to load. I can also confirm it was a .onion address (I kept looking at that because I knew I got scammed with the .xyz address). Is there another fake mixer ".onion" address?

Now the site is fast and displaying the "bc1.." address. Do I dare try it again?

Of course, the official support can't help you because you were on a fake mixer the whole time, which you yourself admit when you claim that you sent BTC both times to an address that starts with 3. It is possible that you are still on a fake mixer, regardless of the fact that it now shows you an address that starts with bc1.

If it's not clipboard malware, maybe OP has something more dangerous on his computer that redirects him to phishing sites without even noticing. RAT (remote access Trojan) is a nasty thing when it gets into someone's computer.

I have never used that address before in my life. I never seen it before.  I am the one that made the .001 transaction. I did NOT make the .0508 transaction.

What is weird that re-opening the browser and going back to that site displayed that address again. It wasnt until the next day that the 'bc1.." address even started to show up.

Wish I would have done screenshots as suggested.

Where do you contact the support? On the forum, or from the website you visited? Sounds like you access another phishing website if the support is telling the truth. As far as I'm aware Chipmixer is still doing fine without scamming anyone. Try to ask on their ann thread.

I'd guess that you meant "Avoid downloading untrusted programs." or "Download only programs you trust / from trusted sources."

I remember once that I sent some BTC to a friend, but it turned out that I had not copied the last address and sent it to another address that I had previously copied, so did I check several times before sending?
In general, we cannot help you with the previous money, because the unit of the address you sent to him can return that coins, but it is better that you:


 - format your device, and re-install the operating system.
 - Avoid random clicking on links.
 - Download untrusted programs.
 - Check several times before sending.
 - Bookmark websites you use.

Add chipmixer.xyz to your hosts file (/etc/hosts on Linux and Mac) or C:\Windows\(system32?)\hosts on Windows:


You won't be able to accidentally go there anymore because it will be blocked by your computer.

I cannot understand what has happened. Clipboard malware usually creates addresses similar to what is copied. The ChipMixer clone site you've mentioned (and I don't want to write it again) seems to also use bc1 addresses.
So it's *very* strange, I don't know where that address comes from. According to oxt.me that 33* is a 2-of-2 multisig, which also looks rather unlikely for phishing. Plus it has far too few transactions.
I have no idea where that address comes from.

I know that this will not be much, but all I can help are some advises if you will (ever) try again.
* bookmark the ANN topic and always get the ChipMixer address from there: https://bitcointalksearch.org/topic/ann-chipmixercom-bitcoin-mixer-bitcoin-tumbler-mixing-reinvented-1935098
* double check very good the address you send to with the address of the mixer - before you send the tx
* for absolutely every step you make, make screenshots. If you use Windows I recommend Snapper, since if configured you will only have to press Print screen key and everything else is automatic (but it's by far not the only software doing this).
** make sure you make the screenshots showing the web addresses you use
** make sure you make the screenshots showing the bitcoin addresses (both the mixer's and one you actually send to)
** make sure you make the screenshots showing the current time

This way you can track what is happening there if it goes wrong (and you know who is to blame).
You should do this every time you use a platform you're not familiar/comfortable with, not only mixers.

According to blockchain, in addition to that 0.001 BTC, the address in question has received 0.05083033 BTC on October 5. Click here to see the transaction.
Are you the one who made that transaction? Do you remember paying someone or a service 0.05083337 BTC (around 1000 dollars worth of bitcoin) on October 5 or making a withdrawal from an exchange, casino. etc?
Maybe, you copied the address from somewhere else.