The promise is simple. You rent computing power, a provider operates the hardware, and you receive a daily share of the revenue. No noise, no electricity contract, no equipment in your basement. Meters run on the website, a dashboard displays your daily credit, and you can get started with small amounts.

Cloud mining as a business model is not inherently disreputable. There are providers who actually operate data centers. However, the vast majority of offers advertised through ads, messenger groups, or video platforms work differently: payouts are made from the deposits of new customers until the flow dries up.

Crypto Investigation regularly audits such providers on behalf of affected individuals. This article describes a practical checklist for the period before an investment and shows which traces remain after a payment.

The most important information at a glance

  • Key question: Does the computing power actually exist? Reputable providers provide verifiable documentation of location, hardware, and hashrate.
  • Warning sign: Fixed daily returns are not suitable for mining. Returns fluctuate with the price of the currency, the difficulty level, and electricity costs.
  • Warning sign structure: Multi-level referral programs suggest that the income comes from new deposits.
  • Typical scenario: Small withdrawals work, larger ones are blocked by fees, taxes, or level increases.
  • Payment method: Deposits are usually made in cryptocurrency, often in a stablecoin, to changing addresses.
  • After payment: The transactions remain traceable. Documentation and swift action are crucial.

How disreputable cloud mining typically works

Entry into the scam rarely occurs via a search query. It usually begins with an advertisement, a video with purported payment receipts, or a recommendation from a chat group. The website appears professional, displays data centers, lists a company name, and often a founding year that lies far in the past.

After registration, you'll receive a dashboard displaying contract durations, rented services, and daily credits. Small payouts work initially, and this is precisely what builds trust. A referral program is also promoted: those who refer others receive a share. This allows the network to grow without advertising costs, and referred acquaintances strengthen the emotional connection to the system.

The saga begins with larger sums. A payout is rejected because a minimum amount hasn't been reached, verification is pending, a tax is due, or a contract upgrade is required. From this point on, every fulfilled requirement is followed by another. In many cases, the website disappears completely shortly thereafter.

Check cloud mining providers: the grid before investing

Proof of computing power

A provider that actually operates mining services can specify locations, describe hardware in detail, and substantiate their hashrate. It's also verifiable whether the provider is part of a mining pool and whether blocks can be attributed to a given address. If all that's provided are pictures of server rooms without any verifiable information, the core of the business model is missing.

Plausibility of the yields

Mining returns depend on the price of the cryptocurrency, the difficulty of the network, and energy costs. They therefore fluctuate considerably and can fall below costs for extended periods. Promising a fixed daily return is suspicious. Similarly, mentions of guaranteed returns or capital guarantees are a clear red flag.

Business and Regulation

Check the company name, registration number, and address, and compare them with public registers. Often you'll find mailbox addresses, recently established companies, or company names that resemble those of well-known businesses. Also, check whether the relevant regulatory authority has issued a warning.

Age and technology of the website

The domain registration date is a straightforward indicator. If a website claims to have been operating for many years, while the domain is only a few months old, the case is closed. Equally revealing are identical texts on multiple websites under different names, images from stock photo libraries, and customer testimonials with fabricated profiles.

Payment and withdrawal terms

Reputable providers clearly explain how payouts are processed. Warning signs include deposits exclusively in cryptocurrency to changing addresses, high minimum withdrawal amounts, withdrawals only after reaching a certain level, and fees that only appear during the withdrawal process.

Why recommendation programs are a warning sign in themselves

Multi-stage referral programs are standard practice for dubious offers. They shift the responsibility for customer acquisition to the customers themselves and stabilize the system because recruited participants usually come from one's personal network. This also reduces the likelihood of doubts being voiced: someone who has recruited their own brother is unlikely to publicly investigate.

This has an unpleasant consequence for later investigations. Those who actively recruited and received commissions for doing so can find themselves in a position that extends beyond that of a victim. This needs to be assessed on a case-by-case basis and, if it affects you, should be clarified with legal counsel. The process is similar to other structures that we discuss in our article on crypto-Ponzi schemes.

What you should do after making a deposit

Stop making further payments, even if a high balance is displayed and a release has been indicated. Payments for fees, taxes, or upgrades will only increase the damage.

Afterward, secure the evidence before the site disappears. This includes screenshots of the dashboard showing the contract and balance, the website with the exact spelling of the address, all emails and chat histories, the recipient addresses, and all transaction IDs with date, time, and amount. Also, note which exchange you used to purchase the funds and whether you were referred or referred yourself.

File a police report with this information and inform the exchange where you deposited your funds. With stablecoins, a timely, documented report can lead to your holdings being frozen. Expect to be contacted subsequently by alleged recovery agencies.

Have payments to a cloud mining provider checked.

Have you invested in a cloud mining service and can no longer access your funds? We track your payments, check if the recipient addresses are known from other cases, and determine if there is a plausible connection.

Use the form for the free initial assessment on our website. Please have the transaction IDs, recipient addresses, and screenshots of your account ready.

FAQ: How to recognize cloud mining fraud

Is cloud mining fundamentally a scam?

No. There are providers that actually operate data centers. However, the vast majority of offers advertised via ads and chat groups operate without actual computing power and pay out of deposits from new customers.

How can I recognize true computing power?

Verifiable information includes: location, hardware used, hashrate used, and participation in a mining pool. Pictures of server rooms and general descriptions are not sufficient proof.

Why is a fixed daily return a warning sign?

Because mining returns depend on the price, difficulty level, and energy costs, and therefore fluctuate, a fixed daily return cannot be generated; it is covered by deposits.

Why did my first withdrawals work?

Because small payouts are the most effective way to demonstrate trust. They cost little and encourage subsequent deposits of larger amounts and the recruitment of more people.

Should I pay the requested fee to withdraw the funds?

No. Such demands are part of the scam. After each payment, the next one follows, and no payout is ever made.

Can I get my money back?

A confirmed transaction cannot be reversed. Opportunities exist where the trail leads back to a provider with customer data or where a stablecoin issuer can freeze holdings.

What does it mean if I have recruited others?

This needs to be assessed on a case-by-case basis. Those who have received commissions may find themselves in a position that extends beyond that of the injured party. Clarify this with legal counsel before making any statements.

How do I check the provider before investing?

Verify the company name and registry, check regulatory warning lists, review the domain registration date, and request verifiable information about computing power. If any of these are missing, walk away.

The website is offline, is everything lost?

Not necessarily. Your payments remain traceable on the blockchain, and secured screenshots replace the page as proof. That's why early documentation is so important.

What documents are needed for a forensic analysis?

All transaction identifiers with date, time and amount, the recipient addresses, the details of your exchange, screenshots of the dashboard and communication with the provider.

Further articles on this topic: Crypto-Ponzi schemes and pyramid schemes, How to recognize crypto fraud, Identifying fake brokers, Freeze USDT and USDC as well as How to properly file a criminal complaint.

Note: This article is for general information purposes only and does not replace legal advice in individual cases. Crypto Investigation is a forensic service provider and not a law firm.