diff --git a/bip-0138.md b/bip-0138.md
index 0046e2fd..703d5a1b 100644
--- a/bip-0138.md
+++ b/bip-0138.md
@@ -350,7 +350,7 @@ for mutable payloads such as BIP-329 or BIP-0139.[^padding-privacy]
 
 Padding is OPTIONAL and is an encoder concern only: decoders ignore the `PADDING` bytes and
 MUST NOT validate any bucket. Because the padding sits inside `CIPHERTEXT`, the
-`ENCRYPTED_PAYLOAD` `LENGTH` reveals only the padded size, not the real `CONTENT` size.
+`ENCRYPTED_PAYLOAD` `LENGTH` reveals only the padded size, not the real `PAYLOAD` size.
 
 Encoders that pad SHOULD zero-fill `PAYLOAD` up to the smallest bucket `S_n` that fits it,
 with `S_0 = 10240` (10 KiB) and `S_n = floor(S_0 * (5 / 4)^n)`. Payloads of 10 KiB or less