Just recently got phishing by malware injected into my browser. I try to add new address into Kraken for withdrawal into my hardware wallet. I didn’t realize that the malware lead me to believe The address that I entered is correct. I could’ve doubled check/ triple checked. I should use different devices/ system to verify them. The worse part is I approved the address. I got email from kraken new address is being added. BUT the email didn’t show the actual address being added. Only my ip address. Of course i just accept without hesitation. I contacted kraken to add user feedback if the address you whitelisted is correct or not. Hopefully kraken can implement simple improvement like this.

PSA: take your time, use 2 system. even if you think you could never get phishing again. It happened once back in 2017.