Sent Crypto to the Wrong Address: What Still Works and What Is Gone for Good
A sent transaction cannot be recalled. That is true, but it is only half the story. Whether your money is gone depends on who holds the key to the destination address. Six cases, cleanly separated: four of them are recoverable.

Table of Contents
Table of Contents
Which topics should we dive deeper into?
Select what genuinely interests you. Your picks feed directly into our editorial planning.
Crypto news that's actually worth your time.
Weekly. 60 seconds. Carefully curated by our editors: no hype, no promo flood, no spam.
The information provided in this article is for informational purposes only and does not constitute financial advice. Investing in cryptocurrencies involves a high level of risk.
"Once sent, gone forever" is the line everyone knows, and it is only half right. A confirmed transaction genuinely cannot be reversed. But whether your money stays reachable is not decided by the blockchain. It is decided by whoever holds the private key to the destination address.
In four of six typical cases, that key sits with someone you can reach: you yourself, or your exchange. Only in two cases is the outcome final. Before you do anything else, work out which case you are in.
Key takeaways
- The transaction itself is not the problem. What matters is who controls the key to the destination address.
- On EVM chains such as Ethereum, Arbitrum or Polygon, the same address belongs to the same key, so sending over the wrong network is usually not a loss.
- For deposits that reach an exchange over the wrong network, some providers run a recovery procedure. Binance quotes up to 30 business days and 20 USDT for unsupported EVM networks, with no guarantee of success.
- Chainalysis identified at least 82,031 suspected spoofed addresses from a single address poisoning campaign on Ethereum between February 28 and May 4, 2024, causing $69.7 million in damage (report dated October 23, 2024).
- The Bech32 checksum is guaranteed to catch every error involving at most four substituted characters, which is why plain typos rarely slip through.
- Any service that promises to retrieve sent coins against an upfront payment is a scam. There is no technical basis for it.
Wrong address, first step: sort your case
Open the block explorer for the chain in question and look up your transaction by its transaction ID. You need two pieces of information: is it confirmed, and which recipient address does it name? Then place your case in the table below:
| Case | Who holds the key? | Outlook |
|---|---|---|
| Sent to a stranger's address | the other person | lost, unless they return it voluntarily |
| Sent to a contract address | nobody, or the contract | generally lost |
| Wrong network, your own address (EVM to EVM) | you | reachable with normal wallet addresses |
| Wrong network, an exchange address | the exchange | often reachable, with effort |
| Deposit with a missing or incorrect memo or tag | the exchange | usually reachable |
| Transaction still unconfirmed | still you | correctable, but only for minutes |
Everything that follows hangs on that classification. Skip it, and you lose time on support tickets at places that can do nothing technically, or you write off a position that was still within reach.
Wrong address on the right network: the hard case
If you sent funds to a stranger's wallet address, the situation is unpleasantly clear. There is no freeze, no chargeback and no authority that could step in. Technically, the coins now belong to whoever holds the key.
That leaves exactly one route: contact the person, provided the address can be attributed to someone, for instance because it belongs to a known service. For meaningful amounts, filing a criminal complaint also makes sense, because investigators can obtain identities through exchanges that you cannot reach yourself. Manage your expectations, though. With small amounts this practically never leads anywhere.
The same applies to tokens that end up at a contract address by accident. Some contracts have a recovery function, most do not.
Wrong address through the wrong network: the recoverable case
Here comes the good news, and it is less widely known than it should be.
Ethereum and the chains compatible with it, namely Arbitrum, Optimism, Polygon, BNB Chain and Base, derive addresses from the same key format. With a normal wallet address, your address on Arbitrum is the same string as on Ethereum, and the same private key opens both. Anyone who sent tokens to their own address over the wrong one of these chains has lost nothing. The funds are simply sitting in an unexpected place.
The procedure: add the relevant network in your wallet, make the token visible manually via its contract address if necessary, and it appears. To move it on from there you need a little gas in that network's own currency.
The exception that gets expensive: smart contract wallets
With a smart contract wallet, such as Safe, Argent or an ERC-4337 account, none of this holds. The address there is not derived from a key, it is a contract address. It is the same on another chain and under your control only if the contract was deployed there with identical parameters.
The Optimism case from June 2022 shows how expensive that can get: 20 million OP went to a Safe address that existed on Ethereum but had not been deployed on Optimism. A third party deployed the contract at exactly that address himself and thereby gained access. He returned roughly 17 million tokens voluntarily and kept the rest.
When in doubt, check the block explorer of the destination chain first to see whether any code exists at your address there.
Unrelated chains are a different matter. Bitcoin, Solana and Ethereum use different address formats. A Bitcoin address is not a valid destination on Solana, and as a rule the transaction never goes through in the first place.
Wrong address at an exchange: what support can actually do
If the deposit reached an exchange but over the wrong network, the coins sit at an address whose key the exchange holds. That makes it an organisational problem rather than a technical one.
Many large providers run a dedicated procedure for this. Binance, for example, offers self-service recovery, where users trigger the retrieval themselves from their transaction history. The terms differ sharply by case: for tokens on unsupported EVM networks, Binance quotes up to 30 business days and a fee of 20 USDT; for missing or incorrect memos, 7 business days against the network fee (FAQ as of August 2026). The fee is only retained on successful recovery, but it has to arrive in advance, because processing starts only after that. The provider explicitly guarantees no result. Other exchanges review cases manually, and others again refuse outright for unsupported tokens.
What you need for this: the transaction ID, the destination address, the network used, the token and the timestamp. Supplying those five details in the first ticket typically saves two rounds of follow-up questions.
The second most common case of this kind is the missing identifier. With XRP, Stellar or Cosmos, the exchange assigns deposits using a memo or destination tag. If it is missing, the money sits correctly in the exchange's omnibus account, just without an assignment to you. That is a support case too, and usually a solvable one.
Avoiding the wrong address: the scams built around it
Not every wrong address is your own mistake. In address poisoning, an attacker sends you tiny or worthless amounts from an address whose first and last characters exactly match those of an address you use regularly. The next time you send something, you copy from your transaction history and hit theirs.
Chainalysis measured this scheme on Ethereum in a report dated October 23, 2024: in a single campaign between February 28 and May 4, 2024, at least 82,031 suspected spoofed addresses, 2,774 affected victim addresses and $69.7 million in damage. The largest single case involved around $68 million in Wrapped Bitcoin; the perpetrator returned the amount in Ether on May 9, netting roughly $1.49 million. The hit rate is worth noting: only 0.03 percent of the spoofed addresses received more than $100 from victims at all. The scheme rarely works, but when it does, it works big.
Four habits that shut this down:
- Use an address book instead of your history, and verify on the device. Set up frequent destinations properly once, then only ever pick them from there. Which wallets ship a usable address book is covered in our comparison of software wallets. A hardware wallet goes one step further: it shows the destination address on its own display, and no malware on your computer reaches that display.
- Check the whole address, not the start and the end. That shortcut is precisely the attack surface. Reading along four to six characters from the middle costs two seconds.
- Send a test transaction for larger amounts. A small amount first, wait for it to arrive, then the rest. The network fee for that is cheaper than any misdirected transfer.
- The checksum helps, but not everywhere. The encoding of modern Bitcoin addresses, Bech32 for
bc1q…and Bech32m for Taproot addressesbc1p…, is guaranteed to catch every error affecting at most four substituted characters; beyond that, the probability of missing one is below one in a billion. A slipped character therefore almost always produces an error message rather than a loss. Two gaps remain: in 2024 the Bech32 developers themselves disclosed that their scheme is not always robust against the insertion or deletion of fewer than five consecutive characters, a gap Bech32m closes. And no checksum helps against a valid but wrong address. That is exactly what address poisoning relies on.
A related scheme does not target the address at all, it targets you: fake requests from your exchange to move your balance "to safety". We took apart how to spot those using the example of the phishing messages that followed the MiCA deadline.
Wrong address: what still works while the transaction is unconfirmed
There is a narrow window. As long as a transaction sits in the mempool unconfirmed, the funds still belong to you, and it can be replaced by a competing transaction carrying a higher fee.
On Bitcoin this has been possible without preconditions since Bitcoin Core 29.0 of April 14, 2025: full replace-by-fee is the default behaviour there, and the original transaction no longer needs to signal for it. EVM chains never had that condition. A transaction with the same nonce and a markedly higher fee is enough, usually at least a 10 percent premium.
The only real condition is that no block has confirmed it yet. With an empty mempool that can be a matter of seconds; when the network is busy, you have longer. Do not rely on it regardless, and do not hire anyone who offers to handle it against an upfront payment.
Which brings us to the final point: every provider that promises to retrieve sent coins is a scam. No technology for it exists. Such offers find their victims deliberately in forums and comment threads under reports of losses, and the second loss is then larger than the first.
Frequently asked questions
Can I reverse a confirmed transaction? No. The only thing you can influence is whether someone with access to the destination address sends it back, voluntarily or on request.
I sent to my own address on the wrong network. Is it gone? With a normal wallet address on EVM-compatible chains, as a rule no: the same address there belongs to the same key. Add the network in your wallet, make the token visible, send it on. You will need a little gas in that network's currency. If you use a smart contract wallet, this only applies when the contract exists on the destination chain.
How long does recovery at an exchange take? Depending on the provider and the case, from a few days to several weeks. Binance quotes up to 30 business days and 20 USDT for tokens on unsupported EVM networks, and 7 business days for memo cases; other providers make no firm commitment.
Why does my wallet accept an obviously wrong address? Because it is formally correct. Checksums detect typos, not bad intent. An attacker's valid address looks exactly as right to the software as your own.
Is a criminal complaint worth it for small amounts? Rarely, but it costs nothing except time. It becomes more relevant when the destination address can be attributed to an exchange, because investigators can request identities there that private individuals cannot obtain.
Sources
- Chainalysis: Address Poisoning Scams (October 23, 2024, figures for the campaign of February 28 to May 4, 2024)
- Bitcoin Improvement Proposal: BIP-0173 – Base32 address format for native v0-16 witness outputs (error detection of the Bech32 checksum)
- Binance Support, FAQ "How to Retrieve a Deposit That Hasn't Arrived With Self-Service Recovery?" (binance.com/en/support/faq/how-to-retrieve-a-deposit-that-hasn-t-arrived-with-self-service-recovery-4d1347b4d6d44564ba44ea785703a4fd), accessed on August 12, 2026
- Bitcoin Core: Release Notes 29.0 (April 14, 2025, full replace-by-fee as default)
- Ledger Support: Address Poisoning Scam
Hardware wallets compared: hold your own crypto
Crypto exchanges compared: fees and featuresTransparency note: This article was produced with the assistance of artificial intelligence and reviewed by our editorial team before publication. All figures and claims were checked against the primary sources linked in the text.
Related articles
- Crypto Fear and Greed Index at 28: What Happened Every Time the Market Hit Extreme Fear
- Agent wallets: nine out of ten AI models raised their own spending limit
- Mercado Bitcoin halts withdrawals after more than $46 million drained in attack
- How to store crypto safely: protect yourself from hacks like the one at Binance
- BTCPay Server Hack: Bitcoin Hot Wallets Drained, Shut Your Server Down Now
Which topics should we dive deeper into?
Select what genuinely interests you. Your picks feed directly into our editorial planning.
Crypto news that's actually worth your time.
Weekly. 60 seconds. Carefully curated by our editors: no hype, no promo flood, no spam.
November 2, 2026 12:27 AM

Tampered hardware wallet bought in a store: your rights as a buyer under German law
On October 28, Singapore police found malicious hardware components in hardware wallets sold in stores, with losses of around 3.5 million Singapore dollars. What German sales law gives you against the retailer, and why it does not replace the lost coins.
October 27, 2026 12:48 PM

Bloom trading bot: 9,408 SOL drained, what to watch now
The Telegram trading bot Bloom reports an outflow of 9,408 SOL from 49 addresses and points to a flaw in a third-party module. The provider promises reimbursement in full; the decisive question about the key remains open.
October 26, 2026 12:00 PM

Bitcoin Wallet Bug: Why Speeding Up a Payment Could Drain Your Wallet
A Bitcoin wallet bug let rogue servers swap a real payment for a fake one and trick users into signing it. How the fee bump trap works and how to stay safe.
October 25, 2026 3:31 PM

Electrum wallet vulnerable before version 4.8.3: what you can do now
Electrum released version 4.8.3 on October 23, 2026 and closed a flaw that malicious servers had already exploited. It does not harvest your keys; it targets the moment you speed up a stuck transaction.
October 25, 2026 12:35 PM

Private key and public key: 256 bits decide who owns your coins
A private key is a secret number with 78 digits, and the public key can be calculated from it, while the way back cannot. Signature, seed and address all hang on it, and at an exchange or in your own wallet this single value decides who owns the coins.
October 23, 2026 10:21 PM

Ngrave phishing: $2.56 million left 70 wallets after a hijacked push provider
Attackers hijacked the push provider of Belgian hardware wallet maker Ngrave and sent fake security alerts to users of the LIQUID app on October 17. Anyone who entered their recovery words lost their balance: between $2.56 million and $2.65 million flowed out, while the devices themselves remained untouched according to the company.
October 22, 2026 4:17 PM

Railway hack hits crypto bots and wallets: what to check and replace now
US host Railway reports possible access to its customers' secrets. For crypto bots and wallets that is particularly dangerous: analysts already count outflows of around $371,000.
October 19, 2026 1:32 AM

Crypto audits after $1.18 billion in losses: “The problem is always scope”
Hacken counts losses of $1.18 billion across 107 incidents for the third quarter of 2026. 77 percent of that fell on components that were not examined at all in the last audit.
October 19, 2026 1:14 AM

Qubic halts its mainnet after 1,404 wallets are drained: the seed was the weak point
An attacker drained 1,404 Qubic wallets on the night of October 18, roughly $1.3 million. The protocol was not to blame: seed generation in the browser supplied too little randomness.
October 12, 2026 10:40 PM

Shiba Inu and the Fake Airdrop of October 12: “no such airdrop. this is a drainer”
An account on X advertised a supposed SHIB airdrop on October 12. An adviser to the project calls the page a wallet drainer. What is behind it and how to check and revoke your token approvals.
October 11, 2026 4:50 AM

90 Crypto Kidnappings and Robberies in 7 Months: Why France Is the Most Dangerous Country for Bitcoin Holders
France logged 90 crypto kidnappings, extortions and violent thefts this year, one every 2.5 days. Leaked tax data is to blame. Here is how to protect yourself.
October 10, 2026 3:39 PM

Will AI Break Bitcoin? Vitalik Says Prepare for "Bunker Mode", Hoskinson Calls It Numerology
Vitalik Buterin says AI could crack crypto's encryption within 2 years. Charles Hoskinson says that is nonsense. Who is right, and what should you do?
October 5, 2026 10:32 AM

Joint bitcoin wallet: who owns the coins for tax purposes?
Bitcoin on a joint marital wallet: for tax purposes it is not access to the wallet alone that decides, but who the coins are economically attributable to.
October 5, 2026 1:29 AM

Chainalysis attributes $387 million from the Bitget hack to North Korea: what matters now for investors in Germany
The analytics firm Chainalysis attributes the theft of around $387 million at Bitget to actors with ties to the DPRK and puts the annual total above one billion dollars. What that means for custody, choice of exchange and record-keeping in Germany.
October 2, 2026 7:16 AM

$1.26 Billion in Three Months: Crypto Hacks Hit Their 2026 High
The security firm CertiK counts around $1.26 billion in damage from 247 incidents for the third quarter of 2026. September was the worst month of the year with 99 cases, and this is the background and what it means for your custody.
September 26, 2026 4:11 AM

Shielded Bitcoin: what the privacy proposal means for your Bitcoin addresses
Three researchers published a draft for encrypted Bitcoin transfers without a soft fork on September 24, 2026. What Shielded Bitcoin hides, what stays public and which points you can check on your own wallet today.
September 24, 2026 10:11 PM

Bitcoin Price Prediction: What to Check on Levels, Holding Period and Leverage Before the October 28 Rate Decision
Bitcoin is trading at around $83,800, a third below its October 2025 high, while the sentiment index reads greed. Which dates, levels and deadlines over the coming weeks really decide your net gain, and which of them you steer yourself.
September 23, 2026 4:12 AM

How to Set Up a Crypto Wallet: Securing Your Coins in Seven Steps
Your own crypto wallet is set up in twenty minutes, yet a single step decides everything that follows. This guide takes you through wallet type, recovery words and the test amount, and sets out what BaFin and the tax office expect.
September 20, 2026 4:15 PM

Crypto Phishing After a Data Breach: The Warning Signs in a Fake Exchange Email
After every major data breach, the number of phishing emails sent in the name of crypto exchanges and wallet manufacturers rises. This article shows you how to recognise such a message, which data a reputable provider never requests by email, and what to do in the first hour after a click.
September 14, 2026 1:27 PM

Bitcoin Lost to a Scam: What Counts as a Tax Loss in Austria
Lost bitcoin to a scam? Why Austria generally does not recognise the damage as a tax loss for privately held assets, and when compensation payments start to matter.
September 11, 2026 10:18 AM

Bitcoin Tax Audit: What Proof Austria Requires
Which bitcoin records can the Austrian tax office examine? Purchase dates, wallet transfers, acquisition costs and sale proceeds are what count.
September 1, 2026 7:27 AM

Clipboard Attack: How Malware Swaps the Wallet Address You Copied
A clipper replaces the receiving address between copying and pasting with the attacker’s, and your wallet’s checksum notices nothing. What Microsoft and the Federal Office for Cybersecurity have documented, and which check really makes the attack come to nothing.
August 25, 2026 10:31 PM

Crypto Wallet Phishing by Letter: Why the QR Code From Your Postbox Wants Your Recovery Phrase
Letters carrying a QR code urge a supposedly urgent wallet update on grounds of quantum resistance and lead to a page that asks for the recovery phrase. The Federal Office for Cybersecurity reported the ploy on August 18, 2026.
August 23, 2026 1:16 PM

Address Poisoning: Why Seven of Forty Characters Were Enough to Divert $2 Million
A fake wallet address matched the real one in just seven of forty characters and still intercepted 2 million USDC. Our own count of the affected wallet shows that a third of all counterparties in its history belong to such look-alikes.
August 20, 2026 4:24 PM

Bitcoin Across Multiple Wallets: How Austria Works Out the Acquisition Cost
Bitcoin spread across several wallets? How Austria works out the acquisition cost and the rolling average price for tax purposes.
August 18, 2026 7:23 PM

Inheriting Crypto: How Your Heirs Actually Get Access, and Why the Seed Does Not Belong in a Will
The German Federal Court of Justice made clear in 2018 that digital accounts are inherited like everything else. With self-custodied coins succession law still achieves nothing: no key, no access. And anyone who writes the seed into a will has a court send it to every party involved.
August 18, 2026 7:14 PM

Two-Factor Authentication on a Crypto Exchange: Why SMS Is the Weakest Option
SMS codes are the most common form of two-factor authentication on crypto exchanges, and the weakest. The problem is not only SIM swapping, which the FBI has recorded falling for three years. It is real-time phishing, and against that neither SMS nor an authenticator app helps.
More from CryptoTicker
