What Is a Dusting Attack and Why Is Ignoring It the Fix?

01 November 2026

A dusting attack is when someone sends a tiny, near-worthless amount of cryptocurrency to your wallet - often less than a cent - in an attempt to break your privacy or trick you into taking a harmful action. The correct response is to do nothing: ignore the dust, never interact with it, and treat it as digital trash.

How dusting attacks work

Crypto "dust" refers to microscopic amounts of a coin or token that are too small to spend profitably because the transaction fee would exceed the value. In a dusting attack, the attacker sends this dust to thousands or millions of wallet addresses, hoping to achieve one of two goals:

• Privacy deanonymization. By tracking where the dust moves, the attacker can link otherwise separate addresses to the same person or entity. This is most relevant on blockchains where transactions are public, like Bitcoin or Ethereum. The attacker watches to see if the dust gets consolidated into a larger wallet, revealing that all those addresses belong to you.

• Scam baiting. Many dust tokens come with a "note" or a link embedded in the transaction data. The note might say "claim your free tokens at this website" or "congratulations, you won a prize." Clicking the link leads to a phishing site designed to steal your seed phrase or private keys.

Dusting attacks are cheap to run. On a blockchain with low fees, an attacker can send a dust transaction to a million addresses for a few hundred dollars. They do not need your permission, and you cannot block them from sending to your public address.

Why ignoring it is the fix

The safest and most effective response to a dusting attack is to treat the dust as if it does not exist. Here is why:

• Interacting confirms the address is active. If you try to move the dust, swap it, or send it to another wallet, you broadcast a transaction that the attacker can link to you. Ignoring it leaves them with no useful data.

• Claiming free tokens is a trap. Any link or instruction inside a dust transaction is almost certainly a phishing attempt. Never visit the URL, never enter your seed phrase, and never connect your wallet to a site advertised this way.

• The dust is worthless and often costs more to move than it is worth. Even if it were legitimate, the transaction fee to send a sub-penny amount would exceed its value. There is no financial reason to touch it.

What to Do If You See Dust in Your Wallet

You may notice a small, unfamiliar token or coin appear in your wallet balance. For example, a Bitcoin wallet might show 0.00000001 BTC, or an Ethereum wallet might show a token with a strange name and zero market value. Follow these steps:

1. Do not click, approve, or sign anything. Do not open links in the transaction memo. Do not approve any smart contract interactions related to the dust.

2. Hide the dust from your wallet view. Most wallets allow you to hide or ignore specific tokens. On MetaMask, you can remove the token from your list. On hardware wallets like Ledger or Trezor, you can simply disregard it - it will not affect your other funds.

3. Do not send the dust to a burn address or to the attacker. Sending it anywhere creates a transaction that reveals your address as active. Let it sit permanently.

4. If the dust is a token that appears to have value, verify its authenticity on a block explorer. Scammers sometimes create tokens that display a fake dollar value in your wallet to make them look tempting. Check the token contract on Etherscan or a similar explorer. If the contract is days old and has no real trading volume, it is dust.

Dusting vs. Airdrops: Know the Difference

Legitimate airdrops often send small amounts of a new token to many wallets as a marketing or distribution method. The key difference: a legitimate airdrop will be announced by a known project, the token will have a verified contract, and you will never be asked to click a link inside a transaction memo to claim it. Dust from an attack usually arrives without warning, from an unknown address, often with a suspicious message.

If you are unsure, check the project's official website or social media. If there is no announcement, treat the incoming dust as an attack.

Can dusting attacks be prevented?

You cannot prevent someone from sending dust to your public address - that is the nature of permissionless blockchains. However, you can minimize the risk:

• Use a new address for each transaction. Many wallets generate a fresh receiving address automatically. This prevents an attacker from easily linking multiple transactions to the same identity.

• Avoid consolidating small amounts from many addresses into one wallet. This is a common mistake that defeats privacy. If you receive dust on multiple addresses, leave it on each separate address.

• Do not reuse addresses for deposits and withdrawals. Keep your exchange deposit addresses separate from your personal wallet addresses.

The Bottom Line

A dusting attack is not a hack. Your funds are not stolen, and your wallet is not compromised. The attacker is fishing for information or trying to lure you into a scam. The only way to lose is to take the bait. Ignore the dust, hide it from view, and move on.

Back to getting started