Cloud mining scams in 2026: the red flags, the shutdowns, and how to actually mine safely

Cloud mining scams have taken more money from ordinary savers over the last decade than almost any other crypto product. Some of them are indicted at nine and ten figures. Most operate for a few months, take the deposits, and vanish. This is the 2026 playbook — the biggest cases, the red flags that appear in every single one, the AI-generated ad wave that is currently in your Instagram feed, and the routes out if you have already lost money.

Written for UK and EU residents who are being marketed to. If you would rather see how legitimate mining actually works, the cloud mining explainer is the primer and the Bull Miners hosting plans show a legitimate model up close.

Why cloud mining, specifically, attracts scams

Three structural features make cloud mining unusually easy to fake:

• The customer never sees the hardware. Every other Bitcoin business — hosted mining, exchanges, custody — has some visible physical or on-chain footprint. A cloud dashboard is just a webpage; the number of TH/s displayed doesn't have to correspond to anything real.
• Contract economics naturally look Ponzi-shaped. Upfront lump sum, fixed daily payout, referral commissions — this is the standard structure of a Ponzi scheme, before any fraud is added.
• Buyers can't independently verify hashrate exists. There is no on-chain equivalent to "prove you have this much hashrate". Even legitimate operators have to be taken partly on trust.

The result is a market where scam economics are strictly easier than honest economics.

The case book — the biggest scams that got charged

HashFlare — $577M gross

Estonian operator. Founders Sergei Potapenko and Ivan Turõgin were arrested in Tallinn in November 2022, extradited to the US, and pled guilty in February 2025. The DoJ established that HashFlare operated under 1% of the hashrate it advertised on its dashboards. Customers were paid from other customers' deposits — the textbook Ponzi. Forfeitures exceed $400M. The DoJ has appealed the initial "time served" sentence.

BitClub Network — $722M

MLM-structured cloud mining, five defendants indicted December 2019. The fleet was partly real in the early years and increasingly fictional as the scheme scaled. Guilty pleas from most defendants; the lead case is still being litigated. Victims will recover a small fraction of losses.

MiningMax — approximately $250M

Korean-Australian operation, California-registered, marketed ETH cloud rigs. Custom software faked the mining output shown to 18,000 users across 54 countries. Chairman Daniel Park on Interpol wanted list. Incheon prosecutors indicted 21.

USI-Tech — over $150M

Advertised "1% daily returns" from Bitcoin mining. Texas SSB cease-and-desist December 2017, SEC document request 2018. Founder Horst Jicha was federally charged in January 2024 for what the DoJ calls a $150M fraud.

BitConnect — $2.4B, adjacent

Not strictly cloud mining — a lending/staking Ponzi — but always cited alongside because the marketing was identical and much of the victim overlap was direct. Founder Satish Kumbhani indicted February 2022, still at large.

PlusToken — $3–6B, adjacent

Wallet plus "mining income" Ponzi. Collapsed 2019, Chinese authorities arrested 100+ operators, seized approximately $4B. Losses spread across Asia.

The pattern is consistent. Every one of these advertised aggressively to beginners with the same messaging: guaranteed returns, referral commissions, "get in early". The names change; the shape does not.

The eight red flags — every scam has at least three

1. Guaranteed daily returns as a percentage. "1.5% daily", "6% weekly", "10% monthly". Real mining revenue is a function of hashprice and difficulty. No honest operator can promise a percentage. USI-Tech's "1% daily" is the classic case.
2. Referral commissions on multiple levels. Real businesses give a referral commission on a first-tier signup. MLM structures pay you for the signups of the people you signed up. That is not marketing, it is the Ponzi mechanism.
3. No visible physical mining site. Legitimate operators can produce a facility address and a utility contact. Scams cannot.
4. Contract terms mention "lifetime returns". Every honest cloud contract has an auto-shutdown clause at some hashprice level. "Lifetime" is a marketing word for "until we run out of new signups".
5. Withdrawals paused during a "system upgrade". The final pre-exit stage. Once withdrawals are paused, the money is gone.
6. Payments only in the platform's own token. A layer of misdirection that lets the operator control the "value" of the payouts. If it cannot be withdrawn as BTC or USDT to a wallet you control, it is not real.
7. Domain age under 12 months. A "trusted since 2015" marketing page whose WHOIS record starts three months ago is the tell.
8. Founders unnamed, or LinkedIn profiles created recently. Real operators have real people with real histories.

You do not need all eight. Two is enough to walk away.

The 2024–2026 deepfake ad wave

The most dangerous scam vector in 2026 is not the old-fashioned website. It is the AI-generated video ad running on TikTok, Instagram, YouTube and Facebook. The pattern:

• A deepfake of Elon Musk, Bill Gates, MrBeast or a national news anchor endorses a "new" cloud mining app.
• The ad promises free Bitcoin, a giveaway, or a limited-time cloud mining deal.
• The landing page asks for a small "verification" or "activation" fee in crypto — usually $200–$500 — to unlock the giveaway or the returns.
• The fee vanishes. No returns exist. No giveaway exists.

Sensity's 2024 report identified Musk as the most-impersonated figure in AI-generated crypto scam ads. YouTube's "BitVex" campaign used a deepfake Musk claiming 30% returns. Norton and CityAM have documented TikTok "£8,000 BTC giveaway" scams using deepfake Musk and MrBeast, requiring the £300–£500 deposit to release the fake winnings.

If you see a celebrity endorsing a cloud mining app, assume it is fake. Real celebrities do not endorse cloud mining, ever.

What losing money actually looks like in the UK and EU

The unpleasant reality of consumer protection for crypto losses in 2026:

• The Financial Ombudsman won't help. Crypto is outside its jurisdiction unless the fraud involved a regulated firm (rare).
• Action Fraud logs the case but doesn't investigate individually. Recovery through Action Fraud is essentially zero.
• UK banks generally treat completed push transfers as authorised. Unless you can prove the bank failed a specific duty (rare for a crypto payment), the money is gone from the bank's perspective.
• The Contingent Reimbursement Model (CRM Code) covers some authorised push payment fraud, but cloud mining scams often don't qualify because the customer chose to invest.

The FCA issued over 1,500 alerts against unauthorised crypto operators in 2025. UK fraud cases hit a record 444,000 in 2025, up 6% year on year, largely driven by AI-enabled scams. Recovery rates on crypto scam losses are consistently under 10%.

The safer categories in 2026

Three routes that avoid the entire cloud mining risk surface:

• Buy a real ASIC and host it at a named facility. You hold title to a serial-numbered machine at a specified colocation. Bull Miners, Compass Mining, Terra Mining all sell this product. See the hosting company review.
• Buy spot BTC on a regulated exchange and self-custody. Zero counterparty risk once the coins are in your wallet.
• Buy a spot BTC ETF for pure price exposure. Zero mining risk. The trade you probably wanted anyway.

How to verify a provider before you pay

1. Look up the operating company on Companies House (UK) or the equivalent national register (EU). A shell company registered last month is not a business.
2. Confirm the physical facility. A named address and a verifiable utility contact. Legitimate operators can produce both without hesitation.
3. Check TrustPilot with a focus on the response history. A real business responds to complaints — sometimes badly, but visibly. A scam only replies to positive shills.
4. Use payment methods with recourse. Card gives chargeback rights. SEPA has a recall window. SWIFT is slow but traceable. Crypto is irreversible — never send crypto to an unverified operator.
5. Check domain age. WHOIS records under 12 months plus "trusted since 2015" marketing is the classic tell.
6. Look up the founders on LinkedIn. Pre-existing profiles with independent history are a positive signal. Blank profiles created last month are a negative one.

If you have already been scammed

The routes, in order of remaining plausibility:

• Action Fraud UK (actionfraud.police.uk) — log the case immediately. Even without individual investigation, aggregated reports feed enforcement priorities.
• IC3 (ic3.gov) for cases involving US-based operators.
• Chainabuse.com — on-chain address reporting aggregator used by Chainalysis and TRM Labs. Reports feed compliance systems at exchanges, which can freeze funds if the scammer moves them.
• Your card issuer — chargeback if within window. Card issuers do sometimes reverse cloud mining charges under Section 75 or Visa/Mastercard chargeback rules.
• Your bank fraud team — recall a push transfer if you're inside the SEPA recall window (usually 5 business days).
• Do not use "crypto recovery" services. Almost all of them are secondary scams. The FBI has issued specific public service announcements on this. Recovery rates on crypto scam losses are under 10% through official channels and essentially zero through paid recovery firms.

The Bull Miners contrast

What a legitimate mining product looks like, as a checklist against the red flags above:

• Named UK-registered company (Companies House).
• Physical facility addresses in Bhutan, Georgia, Iceland and Sweden — utility contacts on request.
• You buy a serial-numbered ASIC — an Antminer S21, KS5 Pro or Antminer L9. The machine is yours. It has resale value.
• Electricity billed transparently at $0.014–$0.064/kWh depending on region.
• 100% of coins mined go to your wallet. No maintenance fee, no percentage return promise.
• Card, SEPA, SWIFT and crypto payment methods — pick the one with the recourse you want.
• Named founders with public history.

This is the shape of a legitimate mining product. If your prospective cloud provider does not tick most of these boxes, walk away.

FAQ

Is cloud mining a scam?

Cloud mining is not automatically a scam — a small number of publicly-listed operators like BitDeer and BitFuFu are honest businesses. Most cloud mining marketing, however, is either operated by scam companies or promoted illegally into regulated markets. The base rate is heavily against the customer.

What is the biggest cloud mining scam of all time?

BitClub Network at $722M and HashFlare at $577M by the numbers charged. Adjacent Ponzi schemes like BitConnect ($2.4B) and PlusToken ($3–6B) used similar marketing but weren't strictly cloud mining.

How can I tell if a cloud mining site is a scam?

Guaranteed daily percentage returns, MLM referral chains, no visible mining site, "lifetime" contract wording, withdrawals paused during a "system upgrade", payments only in the platform's own token, domain younger than 12 months, and unnamed founders. Any two of those and the answer is no.

Are the celebrity endorsements on TikTok real?

No. Deepfake ads of Elon Musk, Bill Gates and MrBeast promoting cloud mining are one of the largest scam vectors on social media in 2026. Real celebrities do not endorse cloud mining apps.

Can I get my money back if I've been scammed?

Rarely, and only in the first few days. Card chargebacks are the best remaining route if you paid by card. Push transfer recalls have to happen within days. Crypto payments are irreversible. Recovery rates through Action Fraud and IC3 are consistently under 10%.

Are cloud mining scams illegal in the UK?

Yes, both as fraud under Fraud Act 2006 and as unauthorised financial promotion under FSMA section 21. The FCA has issued over 450 alerts against unauthorised crypto operators since October 2023, and specific cloud mining names are on the FCA Warning List.

Should I use a crypto recovery service?

No. Almost all crypto recovery services are secondary scams targeting people who have already lost money. The FBI has issued specific public warnings on this pattern. Legitimate recovery goes through Action Fraud, IC3 and exchange compliance teams.

What is the safest way to earn Bitcoin without a scam risk?

Buy a real ASIC and host it at a named colocation facility, or buy spot BTC on a regulated exchange. Both give you an asset you own with zero counterparty risk once received. No promised returns, no lock-in contract, no hidden fees.

Read next: cloud mining explained, the honest cloud mining sites ranking, or the 2026 hosting company review. Figures as of August 2026.