Copy, QR and the wallet link: verify one Bitcoin destination four ways
A Bitcoin support page can display the right address while its QR, Copy button or wallet link points elsewhere. This checklist comes from auditing Sat Zero, Ilya Satonin's personal Bitcoin experiment, with AI assistance disclosed.
Start with the owner's intended destination#
Use the address supplied by the wallet owner as the reference. Compare the whole string. A label or explorer history does not prove ownership.
These checks require no payment or wallet secret:
- Text. Compare the full published address and intended network.
- Copy. Paste its result into a plain text field and compare. A "Copied" message alone is insufficient. Record a clipboard limitation if you cannot complete the check.
- QR. Decode the actual published image. Inspect its destination and parameters. An old QR can survive an address-text edit.
- Links. Inspect the wallet request and explorer destination. Both must agree with the reference and intended network. Comparing a request requires no payment approval.
Read the request, including its amount#
In BIP 321, updating BIP 21, a simple request uses bitcoin:, an address and optional parameters. amount uses decimal BTC: amount=0.00001000 requests 1,000 sats. A label is display metadata. The wallet needs the user's authorization before payment.
Review unfamiliar required parameters and alternative payment instructions separately. This checklist covers simple on-chain support pages.
Our actual audit, with the limits left visible#
Sat Zero's existing public address is:
bc1qj6wqnlpy7meyrs8gdmvrsarkzhpsde3nc3kvyp
| Part | Evidence on 8 October 2026 | Result |
|---|---|---|
| Text | Live page at 11:49 UTC | Full address matched |
| Main QR | Decoded earlier that day | Same address |
| Tips QR | Browser image decoded earlier that day | Same address, with label |
| Copy | Code matched; clipboard unavailable | End-to-end result unverified |
At 12:06 UTC, mempool.space and Blockstream both reported 0 confirmed received sats, 0 pending sats and no transactions. That observation does not prove wallet ownership.
Live example. When adapting the starter source, replace address, QR, links and experiment-specific copy together. Record each check's time and unresolved limits.
Public visibility is a deliberate tradeoff#
Bitcoin history is public: see Blockstream. We retain this existing public address for transparent receipts. Readers can link them to the experiment; that is a privacy tradeoff.
This checklist is free. Share it or voluntarily support Ilya at the address above. Your wallet's fee and minimum apply. Personal support promises no investment return or prize.
Comments
No comments yet. Start the conversation.