<p>I'm sorry to be the bearer of bad news: It looks like your funds are gone and the security of your computer is compromised. A quick google suggests that is one of the <a href="https://blog.coinbase.com/electrohunt-part-1-hunting-for-the-phishing-campaigns-on-the-electrum-network-b10529162e63" rel="noreferrer">electrum phishing destination addresses</a>.</p>

<p>You can find more information on the attacks against electrum here: <a href="http://electrum-malware.surge.sh/" rel="noreferrer">http://electrum-malware.surge.sh/</a></p>

CC BY-SA 4.0
2019-02-19T09:40:25.800Z
Your links have reminded me that Electrum did in fact ask me to update it in order to complete the transaction. Thanks for pointing this out.
S.Brown
CC BY-SA 4.0
2019-02-20T04:31:40.767Z
@S.B: Electrum most likely didn't. Rather some phisher did.
R.. GitHub STOP HELPING ICE
CC BY-SA 4.0
2019-02-20T08:44:26.583Z
@R.. Yes. Indeed.
S.Brown
CC BY-SA 4.0
2019-02-19T09:05:08.717Z
2019-02-19T09:05:08.717Z
G. Maxwell
<p>I sent bitcoin to an address starting 3Cn using Electrum but the blockchain viewers seem to show that it has gone to an address beginning bc1 as shown in the link below.</p>

<p><a href="https://www.blockchain.com/btc/tx/5b343128dd48c851d2db267270fb2665ae0fcb95d00fe3b5525a1f8c25e315c7?show_adv=true" rel="noreferrer">Transaction Viewer</a></p>

<p>How can this happen? Is there a way I can recover the funds?</p>

<security><electrum><fraud><bech32-address><revert-transaction>
Bitcoin automatically diverted to bech32 address
S.Brown
# Bitcoin automatically diverted to bech32 address

(Asked by: username_0 on 2019-02-19)

I sent bitcoin to an address starting 3Cn using Electrum but the blockchain viewers seem to show that it has gone to an address beginning bc1 as shown in the link below.

[Transaction Viewer](https://www.blockchain.com/btc/tx/5b343128dd48c851d2db267270fb2665ae0fcb95d00fe3b5525a1f8c25e315c7?show_adv=true)

How can this happen? Is there a way I can recover the funds?

**Tags:** security, electrum, fraud, bech32-address, revert-transaction


---

## 1 answers

### Answer by username_1 on 2019-02-19. Score: 20 | Accepted answer

I'm sorry to be the bearer of bad news: It looks like your funds are gone and the security of your computer is compromised. A quick google suggests that is one of the [electrum phishing destination addresses](https://blog.coinbase.com/electrohunt-part-1-hunting-for-the-phishing-campaigns-on-the-electrum-network-b10529162e63).

You can find more information on the attacks against electrum here: <http://electrum-malware.surge.sh/>

> **Comments:**
> **username_0**: Your links have reminded me that Electrum did in fact ask me to update it in order to complete the transaction. Thanks for pointing this out.  
> **username_2**: @S.B: Electrum most likely didn't. Rather some phisher did.  
> **username_0**: @R.. Yes. Indeed.  

---

