Last updated: October 19, 2026
A dusting attack is when someone sends tiny amounts of crypto ("dust") to many addresses so that, when the owners later spend that dust together with their other coins, the attacker can link those addresses and work out who owns them — or lure them into scams. It works on transparent blockchains like Bitcoin, Litecoin and other UTXO coins, and in a different form on Tron and Ethereum. The defense: don't spend dust, use coin control, and keep savings in a private coin like Monero, where dusting doesn't reveal anything — e.g. via BTC → XMR.
- Tiny amounts, big privacy leak
- Don't spend the dust
- Coin control stops the link
- 0 effect on Monero privacy
How a dusting attack works
- Dust is sent to thousands of addresses — amounts so small most people ignore them.
- You later make a payment, and your wallet automatically uses the dust along with other coins as inputs.
- Combining inputs reveals common ownership: analysts now know all those addresses are yours.
- The attacker links the cluster to an identity — e.g. via a KYC exchange — and may target you with phishing or extortion.
Dusting vs similar attacks at a glance
| Attack | Goal | Chains | Defense |
|---|---|---|---|
| Dusting | Link your addresses / de-anonymize | Bitcoin, Litecoin, other UTXO coins | Don't spend dust; coin control |
| Address poisoning | Make you copy a lookalike address | Tron, Ethereum, EVM chains | Never copy addresses from history |
| Scam token airdrops | Lure you to a phishing site | EVM chains, Solana | Ignore unknown tokens and their links |
| Wallet drainers | Steal via malicious approvals | EVM chains, Solana | Don't sign unknown requests |
How to protect yourself from dusting (step by step)
- Use a wallet with coin control so you choose exactly which coins (UTXOs) to spend.
- Freeze or label dust as "do not spend" if your wallet allows it.
- Don't consolidate coins from different sources into one transaction.
- Use a fresh address for every payment to limit what dust can connect.
- Ignore unknown tokens and links attached to dust or airdrops.
- Keep long-term savings in Monero, where outputs aren't publicly linkable — see Monero vs Bitcoin.
Why Monero is immune to classic dusting
On Monero, nobody can see which outputs belong to which address, and every spend is hidden among decoys with ring signatures. Even if someone sends you dust, spending it doesn't reveal your other outputs to outside observers. More detail in is Monero traceable. Combined with subaddresses, it removes the address-linking problem dusting exploits. For other leaks to avoid, see crypto privacy mistakes.
Frequently asked questions
What is a crypto dusting attack?
Sending tiny amounts of crypto to many addresses so that when the owners spend it together with other coins, their addresses can be linked and possibly identified.
Is dust in my wallet dangerous?
Receiving it is harmless. The risk comes from spending it together with your other coins, or from clicking links attached to unknown tokens.
Should I send the dust back?
No. Leave it unspent, or mark it "do not spend" with coin control.
Can dusting steal my crypto?
Dusting itself can't move your funds. It's a tracking technique, sometimes followed by phishing, which is where the real danger lies.
Does dusting work on Monero?
Not in the classic way. Monero hides which outputs belong to you and mixes each spend with decoys, so outsiders can't use dust to link your addresses.
Make your savings dust-proof: BTC → XMR, LTC → XMR or the most private exchanges. No account, no ID, no logs.