Can address scanning save me?

[MarryWithBTC]

Hello dear bitcoiners!

if i suspect that my mobile device might be infected, such that if i copy and paste an address, it could be replaced by a scammer. Then i decided to use the QR code and scan method, will I still be vulnerable?

[nc50lc]

Clipbpard hijacking malware are mostly specific to your clipboard.
While in-app address/URI QR code scanners usually are built to decode the QR and paste it directly to the intended text field, so it shouldn't be affected.
Of course, keep it a habit to double check the characters of your recipient's address.

However, if your device is infected, whether it's just clipboard hijacking malware:
Stop using the wallet that's installed in it, keep it offline, and use another device to send your funds to another wallet.

Do not ever trust a device that's already infected since it must have another malware or two.

[MarryWithBTC]

Clipbpard hijacking malware are mostly specific to your clipboard.
While in-app address/URI QR code scanners usually are built to decode the QR and paste it directly to the intended text field, so it shouldn't be affected.

i thought as much. i was being curious and ast the same time scared.

Of course, keep it a habit to double check the characters of your recipient's address.

i double check if the amount is below $50.
i triple check if it is above $100
then, i check ten times if it is above $1000 lol

However, if your device is infected, whether it's just clipboard hijacking malware:
Stop using the wallet that's installed in it, keep it offline, and use another device to send your funds to another wallet.

Do not ever trust a device that's already infected since it must have another malware or two.

Thank you. Best for my peace of mind.

[BitadzZ]

That's a good question, and part of why using a QR code can help prevent clipboard hijacking malware. The address isn't being pulled off your clipboard. However, using a QR code will NOT ensure your safety if your phone was already infected. Sophisticated malware may still intercept your transaction or manipulate your wallet app.

Best practice is:

• Always  verify first and last characters of the address after scanning.
• Use a trusted wallet app and ensure that your operating system is updated.

If you definitely think that you are infected, do not use that particular device for your transaction. Scanning helps, but most importantly, security matters.

[Charles-Tim]

If you scan the QR code, it will not be vulnerable just as it has been explained above, but it is very important to also test your device, making sure it is not affected by the clipboard malware. Copy the address, paste it somewhere to know if it changes. If it changes, it is better your format the device. Make sure you check where you backup seed phrase before doing that.

I still pretty much use the copy/paste, especially if I am using a single device. To save the QR code to the device and use it on the same device is not necessary for me when I make sure that I check the address that I am sending to very well before sending any coins.

Also if your device can be vulnerable to clipboard malware, what makes it not possible that it will not be vulnerable to other malware that are not clipboard but which can make your wallet vulnerable? It is good to try as much as possible to avoid malware also.