What Is a Crypto Dusting Attack? How to Spot and Avoid It (2026)

A crypto dusting attack is when someone sends a tiny amount of cryptocurrency — "dust" — to lots of wallets, including possibly yours, hoping to track and de-anonymise the owners or lure them into a scam. If you've ever noticed a small amount of a coin or token you didn't buy sitting in your wallet, this may be why. The dust itself is usually harmless to hold; the danger comes if you interact with it — moving it, or worse, following it to a website to "claim" or "sell" it. The one rule that keeps you safe is simple: leave unexpected tokens alone and never interact with them.

It's an unsettling thing to discover, but understanding it takes the fear out. Let's break it down.

What is dusting and why do attackers do it?

Dusting sends trivial amounts of crypto to many addresses to try to link them together and unmask who owns them — often as a prelude to a scam. Because most blockchains are public, attackers can watch what happens to the dust they sent. If you later combine that dust with your other funds in a transaction, they may be able to connect your addresses and build a picture of your holdings and activity, chipping away at your privacy.

The motives vary: some attackers are profiling wallets to target the wealthy-looking ones with tailored phishing; some are trying to de-anonymise users for other reasons; and increasingly, "dust" arrives as bait — a token that lures you to a scam site to trade or claim it. It's related to the fake-airdrop tactic. The dust arriving isn't itself a hack of your wallet — your coins are safe — it's an information-gathering and luring technique.

Is a dusting attack dangerous?

The dust alone can't drain your wallet, but interacting with it can expose you — to tracking, or to a scam site that does the real damage. Simply receiving dust doesn't give anyone access to your funds; no one can spend your crypto without your private keys, and dust doesn't hand those over. So finding a mystery token isn't a reason to panic that you've been robbed.

The risk is behavioural. If you interact with the dust — consolidating it into a transaction, or clicking through to a website to "claim," "swap," or "sell" a mysterious token — you can either help attackers link your addresses or walk into a scam that asks you to connect your wallet or enter your seed phrase. That's where wallets actually get emptied. The token is bait; your curiosity is the trigger they're relying on.

How do I protect myself from dusting?

Leave unexpected tokens untouched, never connect your wallet to unknown sites, and use privacy-conscious wallet habits. The practical defences:

• Don't interact with dust — leave mystery tokens sitting there; don't move, swap, or "claim" them.
• Never follow a token to a website to sell or unlock it, and never connect your wallet or enter your seed phrase to do so.
• Use wallets with coin-control features if privacy matters, so you can avoid spending dust alongside your real funds.
• Consider a fresh address for sensitive transactions if you're privacy-focused.
• Stay sceptical — treat any unexpected crypto as suspicious by default.

That's really it. Dusting sounds alarming, but the safe response is boringly simple: ignore it. Your coins can't be taken just because dust landed in your wallet — only your own actions can put them at risk. Our crypto scams guide covers the wider tricks that dust often leads into.

Frequently asked questions

What is a crypto dusting attack? It's when someone sends tiny amounts of crypto ("dust") to many wallets to try to link addresses and de-anonymise owners, or to lure them into a scam. If unexpected small tokens appear in your wallet you didn't buy, it may be dusting. The dust itself is usually harmless to hold.

Can a dusting attack steal my crypto? Not on its own. Receiving dust doesn't give anyone access to your funds — no one can spend your crypto without your private keys, which dust doesn't reveal. The danger is if you interact with the dust or follow it to a scam site that tricks you into connecting your wallet or sharing your seed phrase.

What should I do if I find unknown tokens in my wallet? Leave them alone. Don't move, swap, or "claim" them, and never follow them to a website to sell or unlock them. Interacting is what creates risk — either helping attackers link your addresses or leading you into a scam. Ignoring unexpected tokens is the safe response.

Why did I receive random crypto I didn't buy? It could be a dusting attack (tracking or luring), a fake airdrop (bait for a scam), or spam. In all cases the safe assumption is that it's unwanted and potentially malicious. Don't interact with it, and never connect your wallet or enter your seed phrase to deal with it.

How do I prevent dusting attacks? You can't stop people sending dust, but you can neutralise it: never interact with unexpected tokens, don't follow them to websites, use coin-control features to avoid spending dust with real funds, and stay sceptical of any crypto you didn't expect. Ignoring it keeps you safe.

The practical next step

If mystery crypto shows up in your wallet, do nothing with it — that's genuinely the correct, safe response. Don't move it, don't click any link to "claim" or "sell" it, and never connect your wallet or enter your seed phrase anywhere because of it. Your funds are safe as long as you don't take the bait. This isn't financial advice. For the scams dust often leads to, read our crypto scams guide.