A dusting attack is when someone sends a tiny amount of crypto, called dust, to many wallets at once. The sender wants to track those wallets or lure their owners to a scam site. Dust alone can’t hurt you. Interacting with it can.
I run more than 100 wallets a year for airdrop farming. Random tokens land in them all the time. Most are harmless spam, and some are bait. Here is how to tell them apart.
What Is Crypto Dust?
Dust is a balance so small that moving it costs more in fees than it’s worth. Every active wallet collects some. Leftovers from swaps, rounding on trades, and forgotten fractions all count.
That kind of dust is innocent. Every few months I run a round of wallet checks for exactly this. Small leftovers add up across many wallets, and sometimes a forgotten coin has pumped. Our guide on finding unclaimed airdrops shows where to look. For money stranded mid-transfer, use the stuck bridge funds check.
A dusting attack is different. Someone else sends the dust on purpose.
How a Dusting Attack Works
Dusting comes in two versions. One tracks you. The other baits you.
The Tracking Version
This one started on Bitcoin. Coins there sit in your wallet as separate pieces. When you pay someone, your wallet often combines several pieces into one payment.
Attackers send dust to thousands of addresses, then watch. If your wallet later spends the dust together with other coins, those addresses become linked. Repeat that enough, and an analyst can map which addresses belong to one person. Tie one of them to an exchange account, and the owner has a name.
Litecoin and Dogecoin work the same way. In 2019, a wave of dust hit a huge number of Litecoin addresses in one go.
Not every duster is a thief. Analytics companies and investigators use the same trick. Scammers use it to build target lists for phishing and extortion.
The Bait Version
Ethereum, Solana, and similar chains work differently, so attackers changed tactics. They airdrop a token that looks valuable. Its name or description carries a website. Your wallet may even show it as worth $2,000.
The trap is that website. It asks you to connect and approve a transaction to “claim” or sell. That approval hands over your real tokens. Our guide on how to claim airdrops safely walks through that exact trick.
A close cousin plants a lookalike address in your history instead of a token. We covered it in address poisoning explained.
How to Spot Dust in Your Wallet
Four signs give it away:
- A token you never bought or farmed
- A name with a web address, or words like “claim” and “reward”
- A high price with no real trading behind it
- A tiny amount of a real coin from an unknown sender
Want proof? Look up the transfer on a blockchain explorer. If the same sender hit thousands of wallets in minutes, you have your answer.
What to Do If You Get Dusted
Doing nothing is the right move. In practice, that means five things:
- Leave it alone. No selling, no swapping, no sending.
- Skip every link in the token name or description.
- Hide the token. Most wallets have a hide or spam button.
- Freeze it on Bitcoin. Wallets with coin control let you mark dust as “do not spend.”
- Burn it on Solana if you like. Only use your wallet’s built-in burn feature, never a site the token points to.
What If You Already Clicked?
Speed matters now. If you signed an approval, cancel it right away. Our guide on how to revoke token approvals shows each step.
Did you type your seed phrase into a site? Then that wallet is burned. Move everything to a fresh wallet with a new seed phrase, and do it now.
Can a Dusting Attack Steal Your Crypto?
Not on its own. Anyone can send tokens to your address without your permission. Receiving them gives the sender zero access to your funds.
Losses happen at the second step. You sign, approve, or hand over a seed phrase. Until then, the dust is just noise.
Privacy is the quieter cost. On Bitcoin-style chains, spending dust can expose how your addresses connect. For most people that’s a small risk. For anyone holding size, it’s worth freezing the dust.
Keep This Content Free
Spotting scam dust costs you nothing, and neither does reading this site. If our guides save your wallet, consider opening an account through our OKX or Bybit links. That’s what pays for the next one.
Final Words
Dust in your wallet is normal. Dust from a stranger is a test. Pass it by ignoring the token, hiding it, and never following its link.
The attack only works when curiosity wins. So let the fake $2,000 sit there, and get on with your day.
FAQ
What is a dusting attack in simple terms?
Someone sends tiny amounts of crypto to many wallets. They hope to track those wallets or trick the owners into visiting a scam site.
Is a dusting attack dangerous?
Receiving dust is harmless. The danger starts when you spend it, try to sell it, or follow a link attached to it.
Should I sell a random token that appeared in my wallet?
No. Scam tokens often can’t be sold at all, and the sites that promise to buy them drain wallets.
How do I remove dust from my wallet?
Hide it with your wallet’s spam or hide button. On Solana you can burn it with the wallet’s built-in tool. On Bitcoin, mark it as “do not spend.”
What is the difference between dust and a dusting attack?
Dust is any tiny leftover balance, usually from your own trades. A dusting attack is dust that someone else sends you on purpose.
Is every unknown token a dusting attack?
No. Some are real airdrops. Check the project’s official channels before you touch anything, and never trust the link inside the token.
Credit: Source link
