Bitcoin transactions are inherently transparent — every transaction is recorded on a public ledger for anyone to examine. While users can add privacy layers by using Tor, VPNs, or avoiding address reuse, a de-anonymization technique called a dust attack is gaining traction. By sending microscopic amounts of bitcoin (known as “dust”) to a large set of addresses, attackers hope to link multiple addresses together and compromise user privacy.
What Is a Dust Attack?
In the Bitcoin ecosystem, “dust” refers to a very small fraction of bitcoin, typically measured in satoshis (one satoshi = 0.00000001 BTC). Attackers write scripts that broadcast thousands of dust transactions to random or targeted addresses. When the recipient later spends their UTXOs (unspent transaction outputs), they might unknowingly include the dust along with legitimate funds. This allows the attacker to trace the entire transaction chain and cluster addresses belonging to the same user.
Dust attacks are especially dangerous for users who reuse addresses or who do not regularly inspect their transaction history. Even privacy-conscious users can fall victim if they fail to notice a single satoshi transaction buried among legitimate payments.
How to Detect a Dust Attack
Detection begins with routine wallet audits. Look for incoming transactions of tiny amounts (e.g., 0.00001 BTC or less) that you did not request. Advanced wallets like Electrum, Electron Cash, and Bitcoin Core display a list of all UTXOs per address, making it easy to spot suspicious dust. Some wallets allow you to add notes or “flags” to specific transactions, helping you identify potential attacks.
Important: Not all tiny transactions are attacks. They could be accidental sends or protocol airdrops. However, if you value privacy, treat any unsolicited micro-transaction as a potential threat.
Mitigation Strategies
1. Never spend the dust. The most effective defense is to avoid spending the tainted UTXOs. Wallets that support manual UTXO selection (e.g., Electrum, Wasabi Wallet, Bitcoin Core) let you choose which inputs to include in a transaction. By excluding dust, you prevent the attacker from linking your other addresses.
2. Use a new address for every transaction. Address reuse is the enemy of privacy. By generating a fresh receiving address each time, you reduce the chance that an attacker can correlate your transactions even if dust is present.
3. Combine with CoinJoin and Tor. CoinJoin services mix multiple users’ coins together, breaking the transaction graph. Wasabi Wallet and Samourai Wallet offer built-in CoinJoin mixing. Running your wallet over Tor obscures your IP address, adding another privacy layer.
4. Freeze or label the dust. Some wallets (like Wasabi) allow you to “freeze” a UTXO so it can never be spent accidentally. Others let you add a description to flag suspicious inputs.
5. Import to a full-featured wallet. If your mobile wallet does not support manual UTXO selection, you can import your seed phrase into a desktop wallet like Electrum, perform a one-time UTXO cleanup by spending only clean inputs, and then move funds to a new wallet with a fresh set of addresses.
Can You Stop Dust Attacks Completely?
Short answer: No. Bitcoin blockchains are permissionless networks — anyone can send any amount to any address. The only way to 100% avoid dust is to never interact with the network (impractical). However, by combining the strategies above, you can make it extremely difficult for attackers to de-anonymize you.
Dust attacks are a growing concern as blockchain surveillance firms become more sophisticated. Staying informed and using privacy-focused tools are your best defenses. Remember: the few satoshis sent to your wallet might not be malicious, but if you care about financial privacy, always treat them as a red flag.
This guide is based on research and expert recommendations from the cryptocurrency security community. Always keep your wallet software updated and back up your seed phrase securely.