Receiving

One address at a time, large, chunked in fours, with its derivation path.

Read the address off this screen, not off the machine you paste it into. The air gap protects the key, not the address on its way to the payer. Software that swaps a copied address is the ordinary way this money is lost, and every screen involved looks correct.

The button says Another, never "next unused": with no network the device cannot know which addresses were paid. Check this address is really mine re-derives it from the device's keys. That proves the address on this screen is yours, and nothing about any other screen.