I Just Got Hit by a Dusting Attack – Here's What You Need to Know

By BFab | Good vibe | 2 Jul 2025


Last night I received the following message from Crypto.com: "You have a pending 0.000328 USDC deposit to your USDC wallet. We will notify you when the deposit is confirmed."

Then came another message: "Please be informed that your request to deposit 0.000328 USDC into your USDC Wallet has been received. Under the 'Travel Rule' regulation, you or the originating platform must provide additional information about the deposit for it to be released. You can access your deposit now by submitting the required information in the Crypto.com App now:"

That's a typical dusting attack. Let me explain what happened and why it matters.

I was scrolling through my phone before bed when these notifications popped up. I didn't submit the requested information because I immediately suspected this was a dusting attack. Instead, I clicked on "Manage" and then "Remove" to reject the deposit entirely. My first thought was confusion – I hadn't initiated any deposit, and the amount was ridiculously small. Who sends someone $0.000328 worth of crypto? That's when it clicked. I'd read about these attacks before but never experienced one firsthand.

A dusting attack is when someone sends tiny amounts of cryptocurrency to multiple wallet addresses. The goal isn't to give you free money – it's to track you. These attackers send dust to hundreds or thousands of addresses, hoping recipients will eventually move or spend this dust along with their legitimate funds. Once you do that, blockchain analysis tools can start connecting your different wallet addresses together.

Think about it this way. Every time you make a crypto transaction, it's recorded forever on the blockchain. If someone can link multiple addresses to you personally, they can see your entire financial picture. How much crypto you hold, where you spend it, when you trade, everything. It's like someone following you around with a notebook, recording every financial move you make.

The really clever part is that the amounts are so small most people ignore them or just accept them without thinking. I almost did the same thing. That 0.000328 USDC sitting in my pending deposits felt like digital clutter I wanted to clean up. But accepting it would have been exactly what the attacker wanted.

This whole experience has made me much more paranoid about my crypto privacy. I still use Crypto.com and other KYC platforms like Binance for certain things, but I'm way more cautious now. For anything that requires real privacy, I prefer non-KYC alternatives. I've been using Rainbow Wallet lately and really like their approach to self-custody and privacy. If you're interested in checking it out, here's my referral link: https://www.rainbow.me/points?ref=FURQMN

What bothers me most is how easy this attack is to execute. Sending a few tenths of cents to thousands of addresses costs less than ten dollars total. It's a numbers game – even if only a small percentage of recipients fall for it, the attacker learns something valuable about those people's crypto habits.

I'm leaving that dust exactly where it is. I've also started using fresh addresses for new transactions and being much more careful about which wallets I use for what purposes. It's annoying to have to think about this stuff, but the alternative is having no financial privacy at all.

The scariest part is that this is probably just the beginning. As more people use crypto and blockchain analysis tools get better, these kinds of privacy attacks will only become more sophisticated. We're living in a world where every financial transaction is permanent and potentially traceable, and most people don't even realize it.

If you're reading this and you've received unexpected small crypto deposits, don't accept them. Don't consolidate them with your other funds. Don't try to send them back. Just remove them and use different addresses for your real transactions. And maybe consider whether you really need all your crypto activity tied to your real identity through KYC exchanges.

This whole thing has been a wake-up call for me about crypto privacy. I thought I was being careful, but there's always more to learn. The technology that makes crypto possible also makes it incredibly easy to spy on people's financial lives. We need to be smarter about protecting ourselves.

How do you rate this article?

28


BFab
BFab

Just a normal guy


Good vibe
Good vibe

I love sharing

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.