Imagine waking up to find a fraction of a cent in cryptocurrency deposited into your personal wallet. It may look harmless or like a glitch, but an unsolicited transfer can have consequences ranging from privacy risks to account freezes.
In August 2026, major exchange Kraken froze several customer accounts after they received tiny, unsolicited transfers linked to HTX, an exchange sanctioned by the EU and UK. Kraken identified the activity as a deliberate dust attack designed to trigger automated compliance systems and disrupt exchange operations.
Sponsored
While the details of that incident remain under investigation, the event highlights a growing threat for everyday crypto users: on public blockchains, anyone can send funds to your wallet—and you can suffer the collateral damage.
Here is what you need to know about dust attacks and address poisoning, and how to protect your crypto assets.
Dust Attack vs. Address Poisoning: What’s the Difference?
A dust attack and an address poisoning attack both involve unwanted transactions, but they have different goals.
A dust attack primarily targets wallet privacy and transaction tracking. An address poisoning attack targets user behavior and funds by tricking users into sending crypto to an attacker’s address.
What Is the Goal of a Dust Attack?
A dust attack aims to compromise privacy or trigger platform compliance flags. Attackers send microscopic amounts of crypto, known as “dust,” to identify wallet owners, track transaction networks, or potentially trigger restrictions on regulated exchanges.
Dust attacks are generally used for tracking and compromising financial privacy rather than directly stealing funds.
What Is the Goal of Address Poisoning?
An address poisoning attack, also known as wallet poisoning, directly exploits user behavior. The attacker creates a crypto address that closely resembles one the victim frequently uses.
The goal is to trick the victim into copying the wrong address and sending their crypto to the attacker.
Address poisoning exploits a common habit: copying wallet addresses from transaction history instead of manually verifying the full address.
How Does a Dust Attack Work?
In a dust attack, attackers send tiny amounts of cryptocurrency—often fractions of a cent—to thousands of wallet addresses at once.
If the victim later spends or combines the dust with other funds, the addresses can become linked on the blockchain. The attacker can then analyze these transactions, cluster the addresses, and work toward identifying other addresses controlled by the same user.
If one linked address is connected to a KYC-compliant exchange or other identifiable service, the attacker may be able to associate the wallet cluster with a real-world identity.
A dust attack can also create compliance risks. If the incoming dust originates from a sanctioned or flagged wallet, an exchange’s automated compliance systems may detect the connection and potentially freeze the recipient’s account for review, even if the recipient did not request or know about the transfer.
How Does Address Poisoning Work?
An address poisoning attack takes a more targeted approach. Instead of trying to track the victim, the attacker tries to make the victim send funds to the wrong address.
The attack typically works in three steps:
- Identify a frequently used address: The attacker looks for addresses the victim regularly sends funds to.
- Create a look-alike address: The attacker generates an address with similar beginning and ending characters.
- Plant the fake address: The attacker sends a small transaction from the look-alike address, placing it in the victim’s transaction history.
The victim may later see the fake address in their transaction history, assume it belongs to their usual recipient, and copy it without checking the full address.
If they do, their crypto is sent directly to the attacker. These transactions are generally irreversible.
Why Dust Attacks and Address Poisoning Matter for Everyday Investors
You don’t need to be a high-volume trader to be targeted. These attacks create four main risks:
- Account freezes or restrictions: A dust attack involving flagged or sanctioned funds can trigger an exchange’s automated compliance systems, potentially resulting in a temporary account freeze or review.
- Loss of privacy: If you spend or consolidate dust with your regular funds, attackers may be able to link multiple wallet addresses and build a clearer picture of your transaction history.
- Risk of further attacks: Attackers can potentially link addresses, track transactions, and identify wallet owners. Once wallet addresses are linked, attackers may use this information to target high-value users with phishing, extortion, or further address-poisoning scams.
- Loss of funds: Address poisoning can cause users to send crypto directly to an attacker by mistake.
5 Ways to Protect Yourself From Dust Attacks and Address Poisoning
1. Do not spend unsolicited dust: The attack becomes effective when the small amount is spent or combined with other funds, allowing the attacker to link addresses and trace wallet activity. If the dust remains untouched and isolated, it generally provides little useful information to the attacker.
2. Mark suspicious deposits as “Do Not Spend”: Use a wallet with coin control to manually exclude suspicious small deposits and prevent them from being combined with your legitimate funds.
3. Verify the full wallet address before sending: Never rely only on the first and last few characters of an address. Address poisoning specifically exploits this habit.
4. Avoid reusing wallet addresses: Use a wallet that generates a new receiving address for each transaction when possible. This can make it harder to link your transactions and build a profile of your wallet activity.
5. Contact your exchange immediately if your account is frozen: Keep records of unsolicited transactions and contact exchange support. This can help demonstrate that you did not request or initiate the transfer.
Key Takeaway
A dust attack primarily threatens your privacy, while address poisoning creates a direct risk of losing your crypto. You cannot stop someone from sending funds to your public wallet address, but you can reduce the risks by leaving suspicious dust untouched, using wallet privacy features, and always verifying the full address before sending crypto.
Understanding how dust attacks and address poisoning work is one of the simplest ways to protect your wallet from unwanted tracking, account restrictions, and costly mistakes.
Dig into DailyCoin’s popular crypto news today:
Bankchain Alliance: 39 US State Banking Groups to Form Joint Blockchain
Ripple CEO: $16 Trillion In Motion Shows Visa-Scale Reach