Every time I make an ERC-20 token transaction, it shows 2 transactions in the transaction history, one is called transfer and the other sent. Both have the same amount and different fees. Could one of them be an internal transaction? That’s all right?
Thank you for your response
from your description, it looks like you are a target of address poisoning attack.
Please, find more information in this thread: Has my trezor been hacked ?
You can find more information on address poisoning attack in this article: https://trezor.io/support/a/address-poisoning-attacks
Remember that attackers do not have your private keys. If you will not send funds to the fake address yourself, they cannot steal your funds.