warm background

What is a crypto address? Formats, safety, and how to use one

AdminAdmin
Published on 7 min read

A crypto address is a string of letters and numbers that identifies where funds can be sent on a blockchain. Think of it as an account number for receiving crypto. Sharing it publicly is safe, since knowing an address does not give anyone the ability to spend from it.

Unlike bank details, addresses are also unforgiving. Send to the wrong one and there is no recall, no chargeback, and no support team who can reverse it. Understanding what a valid address looks like is the practical skill this page is about.

How an address is created

Three steps, in one direction only.

  1. A private key is generated as a very large random number. This is the secret that authorizes spending.
  2. A public key is derived from the private key using elliptic curve mathematics.
  3. The address is derived from the public key, usually by hashing it and adding a checksum.

Each step runs forward easily and backward not at all. Someone with your address cannot work out your public key in most formats, and someone with your public key cannot work out your private key. That asymmetry is what makes it safe to publish an address while the key behind it stays secret.

An address is not a wallet. A wallet holds keys and can generate many addresses, and account abstraction lets that wallet enforce its own rules, and most modern wallets produce a fresh address for every incoming payment to make transactions harder to link.

Bitcoin address formats

Four formats are in common use on Bitcoin, and the first character tells you which one you are looking at.

FormatStarts withIntroducedNotes
Legacy (P2PKH)12009The original. Universally supported, and the most expensive to send from
Nested SegWit (P2SH)32012Backward-compatible, roughly 25% cheaper than legacy
Native SegWit (P2WPKH)bc1q2017The modern default. Lowest fees for standard transfers, 42 characters
Taproot (P2TR)bc1pNovember 2021Newest format, 62 characters, uses Bech32m encoding

For most people in 2026, Native SegWit is the sensible default, with support across essentially every active wallet and exchange. Taproot is more efficient for some transaction types, though a minority of older services still cannot send to it.

Deliberately, the bc1 formats are case insensitive and contain no capital letters. Their encoding includes error detection that can identify up to four mistyped characters, so a typo usually produces an invalid address rather than a valid one belonging to a stranger.

Ethereum and EVM addresses

Ethereum addresses start with 0x followed by 40 hexadecimal characters, giving 42 characters in total. Example: 0x71C7656EC7ab88b098defB751B7401B5f6d8976F.

Across every EVM-compatible network the same format works, including BNB Chain, Polygon, Arbitrum, Base, and Avalanche's C-Chain. One address, many networks, which is convenient and is also the source of the most common way people lose funds.

Mixed capitalization in an Ethereum address is not decorative. Under a standard called EIP-55, the pattern of upper and lower case letters encodes a checksum, so wallets can catch a mistyped address. An address typed in all lowercase is still valid but loses that protection.

Sending to the wrong network

Of every mistake on this page, this is the one that costs people the most money, and it happens because the address looks correct.

Send USDT on Ethereum to an address expecting USDT on Tron, and the transaction succeeds on the network you sent it over. The funds exist, on a chain the recipient may not control keys for. Whether they can be recovered depends entirely on who controls that address on that network. When the destination is an exchange, recovery is sometimes possible through support and is never guaranteed.

The rules worth internalizing:

  • Always match the network, not just the address. Every deposit screen names a network. That field is not optional.
  • Bitcoin addresses never start with 0x. If you are sending BTC and the address begins 0x, you are sending to the wrong chain.
  • Wrapped tokens are not the underlying asset. WBTC on Ethereum is not Bitcoin, and sending it to a native Bitcoin address loses it.
  • Some assets need a memo or destination tag. XRP, XLM, and a few others use a shared deposit address with a memo identifying your account. Omitting it usually means the deposit is not credited automatically.

Human-readable addresses

Hex strings are hostile to human attention, which is the root cause of most address mistakes. Naming systems exist to solve this.

The Ethereum Name Service (ENS) maps a readable name like example.eth to an Ethereum address. Send to the name and the wallet resolves it to the underlying address. Solana has SNS with .sol names, and several other networks run equivalents.

Verification is the real benefit, more than convenience. A person can check example.eth reliably. Almost nobody reliably checks 42 hexadecimal characters, which is precisely the weakness that address poisoning exploits.

Support is the limitation. Not every wallet and exchange resolves these names, and where they are not supported you are back to the raw address.

Address safety

  • Never copy an address from your transaction history. Attackers plant lookalike addresses there through a technique called address poisoning, generating an address matching the first and last characters of one you use regularly.
  • Verify the middle characters. Wallets truncate addresses for display, so attackers match the visible portions. Check at least eight characters in the middle, or the full string.
  • Use an address book. Save verified addresses in your wallet's contacts and send from there.
  • Send a small test first, and confirm it arrived at an address you control before sending the full amount.
  • Watch the clipboard. Some malware silently swaps a copied address for the attacker's. Comparing what you pasted against what you copied catches it.
  • Use a whitelist where your exchange offers one, so withdrawals can only go to addresses you approved in advance.

Security you can verify on mb.io

Addresses are only as safe as the controls around them, which is why withdrawal safeguards matter as much as custody.

mb.io is a regulated crypto spot exchange backed by MultiBank Group, a financial institution founded in 2005 that serves more than 2 million clients across 100+ countries.

  • Institutional-grade MPC custody powered by Fireblocks, with segregated client funds
  • 10/10 security score from Hacken, an independent blockchain security auditor
  • Regulated by VARA in the UAE and AUSTRAC in Australia
  • Deposit and withdrawal flows that name the network explicitly before funds move
  • Buy, sell, and swap in three steps, from sign-up to purchase
  • 24/7 customer support, on web and on the iOS and Android apps

Open your account and start trading on mb.io.

Frequently asked questions

Is it safe to share my crypto address?

Yes. An address is designed to be published, and knowing it does not allow anyone to spend from it. Sharing it does reveal your balance and full transaction history to anyone who looks, since blockchains are public.

Can I use the same address for different cryptocurrencies?

Only within compatible networks. One Ethereum address works across EVM chains such as Polygon, Base, and BNB Chain. Bitcoin, Solana, and XRP each use entirely different formats and are not interchangeable. An atomic swap is one way to trade across two chains directly.

What happens if I send crypto to the wrong address?

If the address is valid but belongs to someone else, the funds are gone unless that person returns them. If the address is invalid, most wallets refuse to send in the first place, which is what the checksum exists to catch.

Why does my wallet keep generating new addresses?

For privacy. Reusing one address links all your activity together on a public ledger. Fresh addresses get issued per payment by modern wallets, and older addresses continue to work.

What is the difference between bc1q and bc1p?

Both are modern Bitcoin formats. bc1q is Native SegWit, introduced in 2017, and is 42 characters. bc1p is Taproot, activated in November 2021, is 62 characters, and uses a different encoding.

What is a memo or destination tag?

An extra identifier some networks require alongside the address, including XRP and Stellar. Because exchanges often use one shared deposit address for all customers, the memo is what assigns the deposit to your account.

Can an address be traced to me?

Not directly, since addresses are not names. In practice, exchange records, transaction patterns, and blockchain analytics regularly connect addresses to identities, which is why crypto is described as pseudonymous rather than anonymous.

RELATED POSTS

Frequently Asked Questions

Frequently Asked Questions

My Account
What is mb.io?mb.io is a secure, regulated crypto exchange designed to make cryptocurrency trading simple, fast, and stress-free. Whether you're buying your first Bitcoin or managing a diversified portfolio, mb.io gives you the tools you need without the complexity.Built on institutional-grade security and backed by MultiBank Group, mb.io offers spot trading with competitive fees, MPC-powered custody, and a clean interface that adapts to your experience level. Trade with confidence knowing your assets are protected by the same security standards trusted by major financial institutions.How long does account verification take?Most verifications are completed within a few minutes.Once you submit your documents, our system reviews them automatically. If everything looks good, you'll be verified and ready to trade almost immediately.In some cases, we may need to review your documents manually. This can add a bit of time, but it's usually still done the same day.Why is my account verification pending?If your verification is taking longer than expected, here are a few common reasons: Document quality issues: Blurry photos, missing corners, or glare can slow things down.Mismatched information: The details on your documents need to match what you entered during signup.High volume: During busy periods, manual reviews can take a bit longer. If your verification has been pending for more than an hour, contact our support team. They'll check what's happening and help you get verified quickly. They're available 24/7 via live chat or email.
Adding Funds
Withdrawing funds
Features
Regulations
Client Support
Account Security
Deposits & Withdrawals
View more