You open your Bitcoin wallet one day and notice a strange incoming transaction — a tiny amount you never expected. Maybe 546 satoshis. Maybe 1000. You didn't ask for it. You don't know who sent it.
This is a dust attack. And it's specifically designed to track you.
How a Dust Attack Works
The mechanics are straightforward but clever:
- Step 1: An analytics firm sends a tiny amount of BTC (dust) to your address
- Step 2: They wait for you to spend Bitcoin from your wallet
- Step 3: If you spend the dust together with your other coins in a transaction, they can now link all those addresses together
- Step 4: They build a complete picture of your wallet — all addresses, all balances, all transaction history
The key insight is that Bitcoin wallets automatically combine multiple inputs when making a transaction. If you receive dust at address A, and then send a payment that combines address A with address B, the analytics firm now knows both addresses belong to you.
Who Sends Dust Attacks?
Dust attacks are primarily used by:
- Blockchain analytics firms like Chainalysis and Elliptic — to expand their address clustering databases
- Governments and law enforcement — to track specific individuals or investigate illicit activity
- Exchanges — to verify wallet ownership for compliance purposes
- Scammers — occasionally to identify high-value wallets before phishing attacks
How to Protect Yourself
The good news is that dust attacks are only effective if you spend the dust. Here's what to do:
- Never spend dust — if you see a tiny unexpected incoming transaction, leave it. Don't include it in future spending.
- Use coin control — wallets like Electrum and Sparrow allow you to manually select which UTXOs to spend, so you can exclude dust inputs
- Mark dust as "do not spend" — most privacy-focused wallets have this option
- Check your wallet regularly — use Wizardo's free Dust Detector to scan for dust attacks
- Use fresh addresses — generate a new address for every transaction to make clustering harder
How to Check if You've Been Dusted
Signs that you may have received a dust attack:
- An unexpected incoming transaction of less than 1000 satoshis
- Multiple tiny incoming transactions from unknown addresses
- Small amounts arriving at addresses you've never shared publicly
Use Wizardo's free Dust Detector tool to scan any Bitcoin address for dust attacks instantly — no registration required.