What is a dust attack after you buy a memecoin, and how do you ignore it?

20 October 2026

A dust attack is when someone sends a tiny, worthless amount of a token to your wallet without your permission. After you buy a memecoin, you might see a new token appear in your wallet that you did not purchase. The goal of the attack is not to steal your funds directly. It is usually to get you to interact with the token - by trying to sell it, swap it, or check its details on a website - so the attacker can identify your wallet address, track your activity, or trick you into approving a malicious transaction. The correct response is to do nothing and ignore it entirely.

How a dust attack works

A dust attack relies on the fact that most Solana wallets show every token that has a balance greater than zero in your account. Anyone can send any SPL token to any wallet address. There is no approval needed from the receiver. The attacker pays a tiny network fee to send the token to thousands of wallets at once.

The token itself is usually a newly created memecoin or a copy of an existing one. It will have a name that looks familiar, such as a misspelled version of a well-known token, or a name designed to look like an airdrop or reward. The amount sent is trivial - often less than a cent in value. The attacker does not expect you to profit from it.

Why attackers do it

The main reasons are:

• Wallet tracking. Once you move the dust token, the attacker can link that transaction to your wallet address and begin monitoring your future trades. This information can be sold or used to target you with scams.

• Phishing. The token's metadata may include a website link. If you visit the site and connect your wallet or sign a transaction, you could give the attacker permission to drain your funds.

• Social engineering. Some dust tokens are designed to look like a legitimate airdrop from a project you just bought. The attacker hopes you will try to claim more tokens and in the process approve a malicious contract.

• Reputation manipulation. Attackers sometimes send dust to wallets that belong to known traders or influencers, then claim those wallets participated in a presale or insider trade, as a way to damage reputation or create false evidence.

How to identify a dust token

You do not need to check every token that appears. But if you want to confirm it is dust, look for these signs:

• You did not buy it, swap for it, or receive it from someone you know.
• The token balance is a strange amount, such as 0.000001 or 0.000042.
• The token has no liquidity pool on a major DEX like Raydium or Orca.
• The token has no trading volume or price on a tracker like Birdeye or DexScreener.
• The token name is a slight variation of a real token, such as "Bonk" instead of "Bonk" or "WIF" with extra characters.

How to ignore it safely

Do not interact with the token in any way. Follow these steps:

1. Do not click the token. In Phantom or Solflare, simply seeing the token in your list is not dangerous. But do not click to view its details, do not click any links in the token metadata, and do not try to hide it by clicking "Hide token" if the wallet asks you to sign a transaction to do so. Some wallets let you hide tokens without a transaction; others require a signature. Only use the hide function if your wallet confirms no transaction is needed.

2. Do not try to sell it. If you attempt to swap the dust token for SOL or another token, you will likely fail because there is no liquidity. If you somehow succeed, you have just confirmed to the attacker that your wallet is active and worth targeting.

3. Do not visit any website linked in the token's metadata. The link is almost certainly a phishing site designed to steal your seed phrase or trick you into signing a drainer transaction.

4. Do not share your wallet address publicly with the dust token visible. If you post a screenshot of your wallet that includes the dust token, you may attract more attacks.

What about hiding the token

Most Solana wallets offer a way to hide tokens you do not want to see. In Phantom, you can right-click the token and select "Hide token." This removes it from your main view. In Solflare, you can tap the three dots next to the token and select "Hide token." These actions typically do not require signing a transaction. If your wallet asks you to approve a transaction or pay a fee to hide a token, do not proceed. That wallet may have a vulnerability, or the hide function itself may be a scam.

Hiding the token is optional. It does not remove the token from your wallet or protect you from anything. It only cleans up your interface.

Can a dust attack steal your funds

No, not by itself. A dust token sitting in your wallet cannot move your SOL, your other tokens, or your NFTs. It cannot approve transactions or read your seed phrase. The danger comes only if you interact with it - by signing a transaction, connecting your wallet to a malicious site, or sharing your private key.

What if you already interacted with a dust token

If you clicked a link, connected your wallet to a site, or signed a transaction related to a dust token, take these steps immediately:

• Revoke any token approvals you may have signed. Use a tool like Solscan's token approval checker or RugCheck.xyz's approval scanner to see which contracts can spend your tokens. Revoke any you do not recognize.
• Transfer your funds to a new wallet if you are unsure whether a malicious contract has permission to drain you. Create a fresh wallet, move your SOL and valuable tokens there, and abandon the old wallet.
• Change your seed phrase is not possible. You must create a new wallet.

The bottom line

A dust attack is a nuisance, not a threat, as long as you do nothing. The safest response is to ignore the token completely. Do not click it, do not sell it, do not visit any links, and do not sign anything related to it. Over time, you can hide it from view if your wallet allows that without a transaction. The attacker is counting on your curiosity. Deny them that.

Back to memecoins