<blockquote>
<p><strong>So it would appear that someone has access. How is that possible?</strong></p>
</blockquote>
<p>Excellent question</p>
<h2>Segwit addresses</h2>
<p>Segwit increases the capacity of the Bitcoin (BTC) network and enables the lightning network. Segwit addresses start with <code>3</code> or <code>bc1</code>.</p>
<p>On 21 November 2017 Kai Sedgwick reported on  <a href="https://news.bitcoin.com/someone-just-helped-themselves-to-600k-of-bitcoin-cash-from-segwit-addresses/" rel="nofollow noreferrer">Bitcoin.com</a></p>
<blockquote>
<h3>Someone Just Helped Themselves to $600k of Bitcoin Cash from Segwit Addresses</h3>
<p>As anyone with a passing knowledge of bitcoin cash will tell you, BCH and segwit don’t mix. Send BCH to a segwit address and you’re gonna have a bad time. Unless you happen to be a miner with the hashpower and technical prowess to unscramble the mess, in which case you’re gonna have a very profitable time. 493 BCH worth $610k has just been retrieved in that manner by one enterprising individual.</p>
</blockquote>
<p>A segwit address is just a particular kind of Bitcoin address being introduced as part of some Bitcoin improvements.</p>
<h2>Non-segwit addresses</h2>
<p>For a third-party to spend bitcoin-cash (BCH) sent to a non-segwit bitcoin (BTC) address, they would need access to the private-key from which that address was derived.</p>
<p>This might happen through the use of viruses, Trojans, fishing or social engineering etc.</p>
<hr />
<blockquote>
<p><strong>Receiving address I have is 19EsSXxaTParaHqQ7V8o9A9xbZ47fApe7f</strong></p>
</blockquote>
<p>(from comment to <a href="https://bitcoin.stackexchange.com/q/79505/13866">Problems recovering BCH accidentally sent to BTC address</a>)</p>
<p>Blockchain explorer websites show no transactions for that address</p>
<p><a href="https://www.blockchain.com/btc/address/19EsSXxaTParaHqQ7V8o9A9xbZ47fApe7f" rel="nofollow noreferrer">Example for BTC blockchain</a>:</p>
<pre><code>Summary 
  Address   19EsSXxaTParaHqQ7V8o9A9xbZ47fApe7f 
  Hash 160  5a6084e7e05b44c3805b8372462e876447b28d43 
Transactions 
  No. Transactions  0    
  Total Received    0 BTC    
  Final Balance     0 BTC
</code></pre>
<p><a href="https://explorer.bitcoin.com/bch/address/19EsSXxaTParaHqQ7V8o9A9xbZ47fApe7f" rel="nofollow noreferrer">Example for BCH blockchain</a></p>
<pre><code>Address
     bitcoincash:qpdxpp88upd5fsuqtwphy33wsajy0v5dgvkmjdckhh 

Balance: 0.00000000 bch
Total Received: 0.00000000 bch
</code></pre>
<p><a href="https://bitcoincash.blockexplorer.com/address/19EsSXxaTParaHqQ7V8o9A9xbZ47fApe7f" rel="nofollow noreferrer">Example 2 for BCH blockchain</a></p>
<pre><code>Address 0 BCH
Address bitcoincash:qpdxpp88upd5fsuqtwphy33wsajy0v5dgvkmjdckhh
Summary confirmed
Total Received  0 BCH
Total Sent  0 BCH
Final Balance   0 BCH
No. Transactions    0
</code></pre>
<hr />
<h2>Security</h2>
<blockquote>
<p><strong>Shouldn't it be secure?</strong></p>
</blockquote>
<p>Only if you send Bitcoins to bitcoin addresses and bitcoin-cash to bitcoin-cash addresses.</p>
<p>Groups of people developing different cryptocurrencies don't always cooperate with other groups to prevent this kind of consequence. The split between Bitcoin and Bitcoin cash was a little acrimonious.</p>
<hr />
<h2>Recourse</h2>
<blockquote>
<p><strong>Do I have any sort of recourse?</strong></p>
</blockquote>
<p>No.</p>
<p>Cryptocurrencies are essentially designed as peer-to-peer currencies with no regulatory oversight and with no third parties enabled to intervene in disputes.</p>
<p>You dropped some coins on the floor and someone picked them up.</p>
<p>You could ask the person who found your BCH if they will give them back to you for a 30% bounty. It may be hard or impossible to work out who has your BCH and how to contact them. You will be relying on the kindness of a stranger.</p>
<p>You could report the matter to your local police.</p>
<hr />
<h2>Third Party Oversight</h2>
<blockquote>
<p><strong>This is me transferring my coins to my account but because they aren't dollar bills the bank teller steals them!</strong></p>
</blockquote>
<p>There are no bank-tellers in Bitcoin.</p>
<p>You accidentally sent your bitcoins to the wrong destination. Other people who are unscrupulous can often take advantage of any mistakes you make.</p>
<hr />
<h2>Prevention</h2>
<blockquote>
<p><strong>Something needs to be done about this</strong></p>
</blockquote>
<ol>
<li>You need to be more careful.</li>
<li>If you ask them, wallet developers <em>might</em> consider changes to their wallet software that might make this kind of error less likely.</li>
<li>I believe the Bitcoin-cash (BCH) developers plan a change in address formats to avoid them looking like Bitcoin's (BTC) Segwit addresses.</li>
</ol>
<hr />
<h2>Risk.</h2>
<blockquote>
<p><strong>There is a serious flaw in the cryptocurrency system if it simply allows thieves to pray on people who are new to it without any recourse</strong></p>
</blockquote>
<p>Bitcoin transactions are by design irreversible. Bitcoin is a very risky investment. Anyone getting involved needs to take the time to understand the risks <em>before</em> getting involved.</p>
<p>Thieves will always prey on those who make careless mistakes. The nature of cryptocurrencies is that they are conceptually unlike the currencies and financial systems that people were previously used to, this makes cryptocurrencies relatively dangerous for the unprepared. For example, the use of the term &quot;wallet&quot; is misleading because cryptocurrency wallets do not really contain any money. Thinking that Bitcoins exist in the blockchain or are entities that are stored somewhere electronically is an error. This makes it easy for the unprepared to make mistakes and lose money.</p>
<p>Caveat Emptor.</p>
<hr />
<h2>Other useful references</h2>
<ul>
<li><a href="https://cryptovest.com/news/bitcoin-cash-locked-in-segwit-addresses-a-recovery-workaround-discovered/" rel="nofollow noreferrer">Bitcoin Cash Locked in SegWit Addresses: A Recovery Workaround Discovered</a></li>
</ul>

CC BY-SA 4.0
2018-09-24T11:05:14.943Z
How can I tell if it was a segwith address and how can they call it an improvement? You are telling me that somebody just went ahead and stole $500 from me and there is nothing to be done about it?
t1zzee
CC BY-SA 4.0
2018-09-24T12:09:24.173Z
@t1zzee, segwit addresses begin with either a 3 or with bc1. Segwit increases  the capacity of the network and enables the lightning network. But yes, if you send your money to the wrong place, it goes to the wrong place. Welcome to the world of cryptocurrency
RedGrittyBrick
CC BY-SA 4.0
2018-09-26T00:46:40.900Z
The receiving address does not start with a 3 or a bc1. It does start with a 1.
t1zzee
CC BY-SA 4.0
2018-09-26T00:47:30.580Z
So if it is not a segwit address how could they get access?
t1zzee
CC BY-SA 4.0
2018-09-26T00:59:21.660Z
This is hardly the same as me dropping coins on the floor and someone else picking them up.  This is me transferring my coins to my account but because they aren't dollar bills the bank teller steals them!!
t1zzee
CC BY-SA 4.0
2018-09-26T01:08:22.100Z
It is just plain wrong. Something needs to be done about this because I see many posts from others that have made similar mistakes. There is a serious flaw in the cryptocurrency system if it simply allows thieves to pray on people who are new to it without any recourse.
t1zzee
CC BY-SA 4.0
2018-09-26T08:23:07.733Z
I have updated my answer @t1zzee.
RedGrittyBrick
CC BY-SA 4.0
2019-01-10T00:34:46.280Z
This answer is now incorrect again,  Bcash turned all of Bitcoin's anti-malleability IsStandard rules into consensus rules and inadvertently made all segwit style scriptpubkeys unspendable by consensus.
G. Maxwell
CC BY-SA 4.0
2018-09-24T09:51:52.350Z
2018-09-26T08:43:55.030Z
2020-06-16T11:10:03.350Z
RedGrittyBrick
<p>I transferred BCH to an Electrum wallet address and haven't ever received it because Electrum uses only BTC. As I have been trying to recover it, I looked up the transaction on explorer.bitcoin.com and it was input but has also been output 5 times and the  balance shows 0. So it would appear that someone has access. How is that possible? Shouldn't it be secure? Do I have any sort of recourse?</p>

CC BY-SA 4.0
2018-09-23T10:12:53.167Z
Hello, welcome to bitcoin.SE! It's hard to help without more info. Perhaps your computer or a wallet backup is compromised. Can you post the receiving address you sent the coins to?
chytrik
CC BY-SA 4.0
2018-09-23T11:40:21.430Z
What exactly is the address you sent the coins to?????
If it was a segwit then anyone have access to it.
Tjay
CC BY-SA 4.0
2018-09-23T18:58:22.230Z
Is your electrum wallet setup to use segwit?
lastcanal
CC BY-SA 4.0
2018-09-24T00:03:21.887Z
I don't know if it is a segwit. I have never heard that term and I did not set it up that way, it is just a standard electrum wallet. All I know is that on September 5th I generated an address from electrum then went to bitcoinpurser.com and sent the bch. Then I found out that electrum only accepts btc. So I went about trying to retrieve my bch by creating a electroncash wallet and linking the two. That was on the 19th Meanwile the ledger shows both an input and several outputs and the balance is 0.
t1zzee
CC BY-SA 4.0
2018-09-24T00:05:29.417Z
And I can only find it in the ledger from the crypto address on bitcoinpurser.com not from the electrum address.
t1zzee
CC BY-SA 4.0
2018-09-26T01:50:20.143Z
This address you posted 19EsSXxaTParaHqQ7V8o9A9xbZ47fApe7f shows no transaction, so you probably sent to somewhere else. What was the address the coins was sent from, let us help you track it down.
jaynice
CC BY-SA 4.0
2018-09-26T13:41:32.147Z
crypyo address:qqn28cuav4tr8mwtkqgzmgn0njtetyh83qn52lsvt6
t1zzee
<bitcoin-cash><segregated-witness><wallet-security><cross-chain-recovery>
How can a third party spend BCH accidentally sent to a BTC address?
t1zzee
# How can a third party spend BCH accidentally sent to a BTC address?

(Asked by: username_0 on 2018-09-23)

I transferred BCH to an Electrum wallet address and haven't ever received it because Electrum uses only BTC. As I have been trying to recover it, I looked up the transaction on explorer.bitcoin.com and it was input but has also been output 5 times and the balance shows 0. So it would appear that someone has access. How is that possible? Shouldn't it be secure? Do I have any sort of recourse?

**Tags:** bitcoin-cash, segregated-witness, wallet-security, cross-chain-recovery

> **Comments:**
> **username_1**: Hello, welcome to bitcoin.SE! It's hard to help without more info. Perhaps your computer or a wallet backup is compromised. Can you post the receiving address you sent the coins to?  
> **username_2**: What exactly is the address you sent the coins to????? If it was a segwit then anyone have access to it.  
> **username_3**: Is your electrum wallet setup to use segwit?  
> **username_0**: I don't know if it is a segwit. I have never heard that term and I did not set it up that way, it is just a standard electrum wallet. All I know is that on September 5th I generated an address from electrum then went to bitcoinpurser.com and sent the bch. Then I found out that electrum only accepts btc. So I went about trying to retrieve my bch by creating a electroncash wallet and linking the two. That was on the 19th Meanwile the ledger shows both an input and several outputs and the balance is 0.  
> **username_0**: And I can only find it in the ledger from the crypto address on bitcoinpurser.com not from the electrum address.  
> **username_4**: This address you posted 19EsSXxaTParaHqQ7V8o9A9xbZ47fApe7f shows no transaction, so you probably sent to somewhere else. What was the address the coins was sent from, let us help you track it down.  
> **username_0**: crypyo address:qqn28cuav4tr8mwtkqgzmgn0njtetyh83qn52lsvt6  

---

## 1 answers

### Answer by username_5 on 2018-09-24. Score: 1

So it would appear that someone has access. How is that possible?

Excellent question
Segwit addresses
Segwit increases the capacity of the Bitcoin (BTC) network and enables the lightning network. Segwit addresses start with 3 or bc1.
On 21 November 2017 Kai Sedgwick reported on  Bitcoin.com

Someone Just Helped Themselves to $600k of Bitcoin Cash from Segwit Addresses
As anyone with a passing knowledge of bitcoin cash will tell you, BCH and segwit don’t mix. Send BCH to a segwit address and you’re gonna have a bad time. Unless you happen to be a miner with the hashpower and technical prowess to unscramble the mess, in which case you’re gonna have a very profitable time. 493 BCH worth $610k has just been retrieved in that manner by one enterprising individual.

A segwit address is just a particular kind of Bitcoin address being introduced as part of some Bitcoin improvements.
Non-segwit addresses
For a third-party to spend bitcoin-cash (BCH) sent to a non-segwit bitcoin (BTC) address, they would need access to the private-key from which that address was derived.
This might happen through the use of viruses, Trojans, fishing or social engineering etc.


Receiving address I have is 19EsSXxaTParaHqQ7V8o9A9xbZ47fApe7f

(from comment to Problems recovering BCH accidentally sent to BTC address)
Blockchain explorer websites show no transactions for that address
Example for BTC blockchain:
Summary 
  Address   19EsSXxaTParaHqQ7V8o9A9xbZ47fApe7f 
  Hash 160  5a6084e7e05b44c3805b8372462e876447b28d43 
Transactions 
  No. Transactions  0    
  Total Received    0 BTC    
  Final Balance     0 BTC

Example for BCH blockchain
Address
     bitcoincash:qpdxpp88upd5fsuqtwphy33wsajy0v5dgvkmjdckhh 

Balance: 0.00000000 bch
Total Received: 0.00000000 bch

Example 2 for BCH blockchain
Address 0 BCH
Address bitcoincash:qpdxpp88upd5fsuqtwphy33wsajy0v5dgvkmjdckhh
Summary confirmed
Total Received  0 BCH
Total Sent  0 BCH
Final Balance   0 BCH
No. Transactions    0


Security

Shouldn't it be secure?

Only if you send Bitcoins to bitcoin addresses and bitcoin-cash to bitcoin-cash addresses.
Groups of people developing different cryptocurrencies don't always cooperate with other groups to prevent this kind of consequence. The split between Bitcoin and Bitcoin cash was a little acrimonious.

Recourse

Do I have any sort of recourse?

No.
Cryptocurrencies are essentially designed as peer-to-peer currencies with no regulatory oversight and with no third parties enabled to intervene in disputes.
You dropped some coins on the floor and someone picked them up.
You could ask the person who found your BCH if they will give them back to you for a 30% bounty. It may be hard or impossible to work out who has your BCH and how to contact them. You will be relying on the kindness of a stranger.
You could report the matter to your local police.

Third Party Oversight

This is me transferring my coins to my account but because they aren't dollar bills the bank teller steals them!

There are no bank-tellers in Bitcoin.
You accidentally sent your bitcoins to the wrong destination. Other people who are unscrupulous can often take advantage of any mistakes you make.

Prevention

Something needs to be done about this


You need to be more careful.
If you ask them, wallet developers might consider changes to their wallet software that might make this kind of error less likely.
I believe the Bitcoin-cash (BCH) developers plan a change in address formats to avoid them looking like Bitcoin's (BTC) Segwit addresses.


Risk.

There is a serious flaw in the cryptocurrency system if it simply allows thieves to pray on people who are new to it without any recourse

Bitcoin transactions are by design irreversible. Bitcoin is a very risky investment. Anyone getting involved needs to take the time to understand the risks before getting involved.
Thieves will always prey on those who make careless mistakes. The nature of cryptocurrencies is that they are conceptually unlike the currencies and financial systems that people were previously used to, this makes cryptocurrencies relatively dangerous for the unprepared. For example, the use of the term "wallet" is misleading because cryptocurrency wallets do not really contain any money. Thinking that Bitcoins exist in the blockchain or are entities that are stored somewhere electronically is an error. This makes it easy for the unprepared to make mistakes and lose money.
Caveat Emptor.

Other useful references

Bitcoin Cash Locked in SegWit Addresses: A Recovery Workaround Discovered

> **Comments:**
> **username_0**: How can I tell if it was a segwith address and how can they call it an improvement? You are telling me that somebody just went ahead and stole $500 from me and there is nothing to be done about it?  
> **username_5**: @username_0, segwit addresses begin with either a 3 or with bc1. Segwit increases  the capacity of the network and enables the lightning network. But yes, if you send your money to the wrong place, it goes to the wrong place. Welcome to the world of cryptocurrency  
> **username_0**: The receiving address does not start with a 3 or a bc1. It does start with a 1.  
> **username_0**: So if it is not a segwit address how could they get access?  
> **username_0**: This is hardly the same as me dropping coins on the floor and someone else picking them up.  This is me transferring my coins to my account but because they aren't dollar bills the bank teller steals them!!  
> **username_0**: It is just plain wrong. Something needs to be done about this because I see many posts from others that have made similar mistakes. There is a serious flaw in the cryptocurrency system if it simply allows thieves to pray on people who are new to it without any recourse.  
> **username_5**: I have updated my answer @username_0.  
> **username_6**: This answer is now incorrect again,  Bcash turned all of Bitcoin's anti-malleability IsStandard rules into consensus rules and inadvertently made all segwit style scriptpubkeys unspendable by consensus.  

---

