pull down to refresh

I want to add that I was thinking more about sending it to a new address they have the private keys for though (no address reuse) but I think it should also work if you reuse an address of them.
But how would I know which address belong to the target unless they've broadcasted it? Which I assume would mean it's a public address for receiving
reply