What Is a Crypto Dusting Attack?
A tiny, unrequested crypto transfer isn't a gift — dusting attacks use it to track wallet activity or bait a phishing click. Here's how it works.
Receiving a tiny, seemingly insignificant amount of crypto you never requested might not seem worth any attention at all — but a dusting attack uses exactly that small, easy-to-ignore transfer as the first step in a broader deanonymization or phishing strategy.
What "Dust" Actually Refers To
Dust is a very small amount of cryptocurrency — often worth a fraction of a cent — sent to a large number of wallet addresses, small enough that it's typically not worth the transaction fee to move or use on its own, which is why it often sits unnoticed in a wallet's transaction history.
Why Someone Would Deliberately Send Worthless Amounts
The dust itself isn't the point — sending it is a way to tag or mark a wallet address for tracking purposes, or to attempt linking that address to other addresses controlled by the same person through subsequent analysis of how the dust moves, if it moves at all.
How Dusting Can Be Used for Deanonymization
If a wallet later combines the dust with other funds in a single transaction — spending them together — this can reveal a link between the dusted address and other addresses involved in that same transaction, potentially helping an attacker map out a target's broader wallet activity and holdings across multiple addresses.
Why Dusting Sometimes Comes With a Phishing Component Attached
Some dusting campaigns pair the tiny transfer with a token name or embedded message referencing a website or claim — similar to an unsolicited NFT with an embedded phishing link, designed to prompt the recipient to investigate and follow a link that leads to a malicious site.
Why Simply Receiving Dust Doesn't Put Your Funds at Risk Directly
Like an unsolicited NFT, dust arriving in your wallet requires no action from you and doesn't itself grant any access to your funds — the risk is specifically in how you respond to it, whether that's following an embedded link or unintentionally revealing wallet links through how you subsequently spend the dust.
Why Ignoring Dust Is Generally the Safest Response
Not moving, combining, or interacting with dust transfers at all avoids both the deanonymization risk (since combining it with other funds is what creates the traceable link) and any embedded phishing attempt tied to it — the safest response requires no action rather than active investigation.
What to Do If You Notice Dust in Your Wallet
Leaving it untouched rather than attempting to spend, combine, or investigate further, and treating any embedded message, token name, or link associated with it with the same skepticism as any other unsolicited crypto arriving unexpectedly.
Check your wallet for unfamiliar, tiny transfers before combining or spending them — dust is often used for tracking or phishing, not as a genuine, harmless gift.