Stablecoin transfers can't be reversed. Nobody can press undo, so the checks happen before you send. These six take seconds.
1. The network matches on both sides
The receiver's card and the sender's withdrawal screen must name the same network. TRON with TRON, ERC-20 with ERC-20. If the card doesn't name a network, ask.
2. The first and last four characters match
After scanning or pasting, compare the start and end of the address with the one the receiver gave you. TokenQR cards highlight these characters so the comparison is quick.
3. Send a small test first
For a large or first-time payment, send a small amount and wait for the receiver to confirm it arrived. The extra fee is cheap insurance.
4. Watch for clipboard swaps
Some malware watches your clipboard and replaces a copied crypto address with the attacker's. Always check the pasted address against the original, not just the copied text. Scanning a QR code from a trusted card avoids the clipboard entirely.
5. Don't copy addresses from your transaction history
In address poisoning, a scammer sends you a tiny or zero-value transfer from an address that looks like one you use, with matching first and last characters. Later you copy the wrong one from history. Copy addresses from the receive screen or a saved contact instead, and check the middle characters too.
6. Be suspicious of QR codes you didn't ask for
A sticker over a shop's QR code, a "scan to receive your refund" message or a code that opens a website asking you to connect your wallet are all red flags. A real payment QR simply fills in an address. You should never have to approve, sign or connect anything to receive money.
For receivers
- Generate your QR code on a trusted device. TokenQR builds it in your browser, and the background check keeps only the address for a short count.
- Print the network on the card. A bare QR code is how wrong-network mistakes start.
- Replace old cards when you change wallets or networks.
Make a card with the network printed on it. Open TokenQR