How to Deal with a Replaced Binance Deposit Address After Copying?
If you copy a Binance deposit address but find that the pasted address does not match what is shown on the page—do not submit the transaction. This is most likely clipboard hijacking by malware. The only correct course of action is to cancel the current operation, check and clean the malware from your device immediately, then obtain the address again from official Binance channels.
1. Stop the Current Operation Immediately – Do Not Submit the Transfer
What to do: Halt the deposit or withdrawal you are about to make. Do not click "Confirm", "Submit", or "Send".
How to do it: Close the current transfer page or wallet application. If you have already copied the tampered address, do not paste it anywhere.
When is it considered done: Confirm that your funds are still in your wallet or Binance account and have not been transferred out. If you already submitted a transfer but it has not been confirmed, try to cancel the transaction (e.g., cancel a pending signature in your wallet).
If you already confirmed the transfer and the funds have been deducted from your wallet, skip directly to step 4.
2. Identify the Type of Problem: Why the Address Was Replaced
The "address replaced after copying" issue usually falls into two scenarios. Determine which one applies to you:
Scenario A: Clipboard Hijacking by Malware (Clipper-type)
You copied an address from Binance, but when you paste it, it becomes a completely different address. This is typical behavior of Clipper malware, which intercepts clipboard data and replaces it with an attacker's address when you paste. Such attacks have significantly increased in recent years, mainly spreading through unofficial apps and browser extensions.
How to identify: Copy the address and paste it into a notepad. Compare it with the address shown on the Binance page. If they do not match, you are in Scenario A.
Scenario B: Binance Has Discontinued an Old Deposit Address
Binance regularly upgrades its wallet infrastructure and may discontinue old deposit addresses on certain networks, requiring users to obtain a new address. If you deposit funds to an expired old address, the funds will not be credited automatically, but the funds themselves are safe.
How to identify: Check whether you have received an email notification from Binance about a "deposit address change", or log in to Binance and see if the deposit address for that coin has changed compared with the address you previously saved.
3. Scenario A: Clean Malware from Your Device
What to do: Perform a thorough scan for malware on the device you used to copy the address.
How to do it:
Browser extensions: Check all installed browser extensions and remove any that are from unofficial sources or that you do not recognize. Clipper malware often spreads through malicious extensions.
Mobile applications: Check recently installed apps on your Android or iOS device, especially those downloaded from outside official app stores, and uninstall any suspicious apps.
Antivirus scan: Run a full disk scan using trusted security software.
When is it considered done: All suspicious extensions and apps have been deleted, and a full antivirus scan has been completed.
Even if you did not fall victim this time, as long as Clipper malware remains on your device, your next operation can still be hijacked. Do not make any further cryptocurrency transfers until the device is clean.
4. Scenario A: If the Transfer Has Already Been Sent – Contact Binance Support Immediately
If you have already sent funds to a tampered address that does not belong to you:
What to do: Contact Binance official customer support as soon as possible and report the address manipulation.
How to do it:
Log in to the Binance website or app, go to the Help Center, select "Deposit/Withdrawal Not Arrived", or contact live chat support.
Provide the following information:
Transaction hash (TxID)
The tampered receiving address
The correct Binance deposit address
Explain that this is a clipboard hijacking incident
When is it considered done: A support ticket has been submitted and a ticket number has been obtained.
Risk warning:
If the funds have already been transferred to the attacker's address, Binance may not be able to recover them. Binance's security team will blacklist the suspicious address, but once an on-chain transfer is confirmed, it cannot be reversed.
Beware of secondary scams. There have been cases where scammers pose as customer support or "recovery services" in comment sections of related announcements, tricking you into connecting to fake websites or signing malicious contracts. Binance will never contact you through comment sections, and customer support will never ask you to connect external wallets to "cancel authorizations".
5. Scenario B: A Deposit Was Made to an Expired Address – Manual Crediting
If you simply deposited funds to an old address and the balance has not appeared in your Binance account:
What to do: Use Binance's "One-Click Transfer" feature to manually move the funds into your spot wallet.
How to do it:
Log in to your Binance account, go to [Wallet] → [Deposit History] or [Wallet Transaction History].
Find the transaction record for the deposit to the old address, and click [One-Click Transfer].
If you cannot find the option, submit a request through the "Deposit Not Credited Inquiry" page, and fill in the TxID and coin information as guided.
Prerequisite: You have obtained the new deposit address. To get it: go to [Deposit] → [Deposit Crypto], select the relevant coin and network, and click [Get Address].
When is it considered done: The funds appear in your spot wallet balance, or you have submitted a non-arrival request and obtained a ticket number.
Common failure reason: Some users fail to obtain the new address in time after receiving an address change notice. After 30 days, the old address may be fully deactivated, and automatic crediting is no longer possible; a manual appeal must be filed.
6. Preventive Measure: Enable Withdrawal Address Whitelist
What to do: Enable the "Withdrawal Address Whitelist" feature on Binance to restrict outgoing transfers only to pre-approved addresses.
How to do it:
Log in to Binance and go to [Security Settings].
Find the "Withdrawal Address Management" or "Address Whitelist" option and turn it on.
Add your frequently used withdrawal addresses and complete the security verification.
When is it considered done: The whitelist function shows as "Enabled", and the list contains your trusted addresses. This feature prevents malware from diverting funds to an attacker's address because any address not on the whitelist cannot complete a withdrawal.
How to confirm you have handled the situation correctly?
If funds have not been transferred out: Confirm the device is clean. Re-copy the address from the official Binance site, and test a small deposit – if it arrives, the problem is resolved.
If funds have been transferred out and a support ticket has been submitted: Keep the ticket number for your records. Binance may take weeks or even months to process such cases. You will receive an initial result within 2 business days, and subsequent fund processing is estimated to take more than 30 business days. Regularly follow up on the ticket page; do not submit duplicate tickets with the same content.
After handling the current issue, check the browser extensions and application lists on all your devices, and uninstall any software from unofficial sources – this is key to cutting off the channels through which Clipper malware spreads.
