The answer
A Bitcoin spend typically consumes an entire selected UTXO and returns the remainder to a change address controlled by your wallet, minus the fee.
What to do next
Check the transaction outputs and confirm the apparent extra destination is a wallet-owned change address before assuming money was stolen.
Blockstream Explorer
This resource helps with the question, but is not presented as a commissionable partner.
Visit Blockstream Explorer ↗Useful research or product resource; no affiliate status assumed.RELATED PRODUCT OR SERVICE
BitBox Bitcoin hardware wallet
Relevant Bitcoin self-custody hardware. It does not replace a Lightning channel wallet or guarantee lower transaction fees.
Explore BitBox Bitcoin hardware wallet ↗Official website; affiliate programme available to apply for. No tracked link or partner approval yet.Related crypto questions
Frequently asked questions
Does the change address require a new backup?
Modern deterministic wallets usually derive change addresses from the existing recovery phrase.
