Detection reference · Financial data · Updated 2026-11-03

Crypto wallet addresses

A wallet address is public by design, yet it links a person to every transaction they ever made. Redaxa flags Ethereum and Bitcoin address shapes; it does not check them on-chain.

At a glance

Reported as	Crypto wallet address
Category	Financial data
Severity	high: direct financial exposure or a strong identifier, such as a card or national number
Replaced with	`[WALLET ADDRESS]`
Where it runs	The same engine runs in the Chrome extension (free checks, on your device), in the web check and the Windows app (on Redaxa's server; the text is not stored) and in public repository checks.
Engine rule	scanner.ts, line 230

What it looks like

Ethereum: 0x and 40 hexadecimal characters. Bitcoin: bech32 bc1 addresses, and legacy addresses of 26 to 35 base58 characters starting with 1 or 3.

Example 1

You paste

Send the refund to 0x5aAeb6053F3E94C9b9A09f33669435E7Ef1BeAed

Redaxa returns

Send the refund to [WALLET ADDRESS]

Reported as	Crypto wallet address
Severity	high: direct financial exposure or a strong identifier, such as a card or national number
Replaced with	`[WALLET ADDRESS]`

Example 2

You paste

BTC: bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4

Redaxa returns

BTC: [WALLET ADDRESS]

Reported as	Crypto wallet address
Severity	high: direct financial exposure or a strong identifier, such as a card or national number
Replaced with	`[WALLET ADDRESS]`

All values on this page are synthetic or published specimens; none is a working credential or a real person's data.

In a repository check

The same example, committed to a public repository and run through the free repository check:

payments/donate.md: Crypto wallet address, listed as a reference, not counted as an exposure (severity info). Public wallet/contract address or hash-shaped identifier, not a private signing key. Its presence alone does not establish financial exposure.
Same value in tests/fixtures/donate.md: Public wallet/contract address or hash-shaped identifier, not a private signing key. Its presence alone does not establish financial exposure.

Values are always shown masked in repository reports. No key is ever tested against its provider.

Known false positives

Text that is harmless but still flagged today. Listed so you can recognise it, not hidden.

session id 3aBcDeFgHjKmNpQrStUvWxYz23456: flagged as Crypto wallet address. Any 26 to 35 character base58 string starting with 1 or 3 matches the legacy Bitcoin shape, and Redaxa does not verify the checksum.

What to do

There is nothing to rotate: remove the address from what you share if it identifies you, and use a fresh address for future payments.

Check before you paste

The free Chrome extension runs this check inside ChatGPT, Claude, Gemini and Perplexity before a message is sent, on your device and with no daily limit. On the web you get 5 free prompt checks a day with no account.

Add the Chrome extension Try a free web check

Sources

Redaxa engine: scanner.ts line 230. Every output on this page was produced by that code when the page was built.
BIP-173: Base32 address format for native v0-16 witness outputs
EIP-55: Mixed-case checksum address encoding