# @XBToshi: Phantom disabled transactions after receiving dust from a scammer

Source: https://x.com/XBToshi/status/2118608075355779423
Kiwi News: https://news.kiwistand.com/stories/XBToshi-Phantom-disabled-transactions-after-receiving-dust-from-a-scammer?index=0x6aedc25b03d9557a7901d2f257d9691373b89b3710d100e3a13f6bbd01b6a1ee0c4cce96
Submitted by misha on 2026-11-06 UTC, 1 upvote, 0 comments

## Summary

The author, posting as @XBToshi, says that a user's Phantom wallet can be disabled after receiving unsolicited dust from a scammer. According to the post, a scammer sent 0.0001 dust to the wallet, and Phantom's compliance filter then displayed a message saying the address had interacted with a flagged malicious entity and that transactions were disabled. The post argues that the centralized frontend, not the blockchain, blocked the user's ability to move their own assets, and that this undermines the idea of self-custody.

## Article

Not your keys, not your coins?

Apparently, it's now:

Your keys, our RPC. Your coins, our permission.

A scammer sends 0.0001 dust to your wallet without your consent.

You didn't approve anything. You didn't interact with the scammer. You simply received an unsolicited transaction on a public blockchain.

Then Phantom's compliance filter kicks in:

"Your address has interacted with a flagged malicious entity. Transactions disabled."

Wait. WHAT?

So a random scammer can poison my wallet address with dust, trigger your automated risk detection, and suddenly I can't use your wallet interface to move my own assets?

Welcome to self-custody, where you own the keys but apparently need corporate permission to use them.

The blockchain didn't freeze my account.

The centralized frontend did.

The irony is almost too good.

We built crypto to escape banks freezing our money, only to end up with fintech apps wearing a decentralization costume.

If a wallet can unilaterally disable your ability to transact because some random third party sent you dust, maybe it's time to rethink what "self-custody" actually means.

Not your keys, not your coins?

More like:

Your keys. Their rules. Their permission.

Peak Web3 UX. 🤡