Bitcoin mining on your phone and cloud-mining apps: what is real and what is a scam

You can't meaningfully mine bitcoin on a phone. Bitcoin is mined by specialized machines in data centers, and both the Apple App Store and Google Play ban apps that mine crypto on the device itself. So an app-store app that says it is "mining" is either managing hardware somewhere else, running a points game, or running a scam, and cloud-mining sites that promise steady returns are a common fraud pattern US regulators have warned about.

Can you mine bitcoin on your phone?

Mining means making enormous numbers of guesses, called hashes, to win the right to add the next block to the Bitcoin blockchain. You compete against every other miner on the network, and your odds depend on your share of the total guessing power, known as the hash rate.

In Bitcoin's first years that competition was gentle. The Congressional Research Service notes that bitcoin could at first be mined on an ordinary laptop or desktop processor. Graphics cards and then programmable chips took over, and in 2013 ASICs arrived: chips built for one job, such as Bitcoin mining. They are now often run in data centers that can get cheap electricity.

The scale gap is hard to picture. According to the same CRS report (opens in a new tab), the network's average daily hash rate in March 2026 was somewhere between 840 and 1,600 quintillion hashes every second. One ASIC model it cites could do 255 terahashes (trillion hashes) per second in 2025 while drawing 5,304 watts. For contrast, CRS says a PlayStation 3 console managed about 21 megahashes (million hashes) per second. A phone is a general-purpose device, not a mining chip, so its share of the network would round to zero while the battery drain and heat are real.

What do Apple and Google allow?

Both major app stores have written rules on this, as of November 2026:

• Apple: section 3.1.5(ii) of the App Review Guidelines (opens in a new tab) says "Apps may not mine for cryptocurrencies unless the processing is performed off device (such as cloud-based mining)." Section 3.1.5(v) adds that crypto apps "may not offer currency for completing tasks, such as downloading other apps, encouraging other users to download, posting to social networks, etc."
• Google Play: its blockchain content policy (opens in a new tab) states: "We don't allow apps that mine cryptocurrency on devices. We permit apps that remotely manage the mining of cryptocurrency."

In practice, this means any store-listed app claiming your phone is doing the mining is either breaking the rules or describing something else. The rules allow apps that manage or sell mining done on machines somewhere else, not mining on the phone itself. Approval by a store is not a safety check on the business behind the app.

What are "tap to mine" and free mining apps really doing?

Most of these apps fall into a few groups:

• Points or token games. You tap a button each day and a balance grows. That balance is a number in the app's own database or a new token the project issued, not bitcoin you mined. Whether it ever becomes worth anything depends entirely on the project.
• Ad and upgrade funnels. In a 2021 study, Trend Micro (opens in a new tab) found eight Google Play apps posing as cloud-mining services that had no mining capability at all. Their on-screen "mining" was a local counter with random functions. Some sold "faster mining" upgrades priced from $14.99 to $189.99, and some required users to invite friends before a withdrawal screen appeared, after which withdrawals stayed stuck as pending. Google removed the apps after Trend Micro reported them.
• Front ends for cloud-mining investment schemes. The app is a shopfront for buying "hash power" contracts, which leads to the bigger risk below.

Is cloud mining legit?

Cloud mining means paying a company to run mining machines for you and send you a share of what they earn. The idea is not illegal in itself, but you can't see or inspect the hardware, so a business can sell more "hash power" than it actually owns and pay early customers with later customers' money. That is a Ponzi scheme.

A joint investor alert (opens in a new tab) from CFTC and SEC staff describes fraudsters who say they invest customer money in "mining" farms and promise "high guaranteed returns (for example, 20-50%) with little or no risk." The agencies say some of these operations then demand extra payments, such as supposed taxes, before you can withdraw your "profits," which is an advance-fee scam layered on top.

Real cases: HashFlare and Mining Automatic

HashFlare (criminal case, defendants sentenced). According to the US Attorney's Office in Seattle (opens in a new tab), two Estonian nationals ran HashFlare, a purported mining service that sold contracts for a share of mining profits. Court documents cited by the office say sales topped $577 million between 2015 and 2019, that customers saw fake online dashboards reporting mining that wasn't happening, and that HashFlare lacked the computing capacity to mine most of what it claimed. Both men were sentenced on August 12, 2025, to 16 months, which they had already served, plus a $25,000 fine each. Prosecutors, who had sought ten years, appealed, but Law360 reported (opens in a new tab) in June 2026 that they had dropped the appeal. Assets valued at over $450 million were forfeited for a victim compensation process, which, as of September 2026, the Justice Department's case page (opens in a new tab) said had not yet opened. The acting US Attorney described it as "a classic Ponzi scheme."

Mining Automatic (SEC civil case, allegations). On July 20, 2026, the SEC filed partially settled charges (opens in a new tab) against Zan Shaikh and his company Bright Vision Distribution LLC, doing business as Mining Automatic. The SEC alleges they raised about $22 million from more than 380 investors with promises of guaranteed monthly returns from crypto mining, but spent only about 13% of the money on mining-related costs. The defendants consented to judgments, subject to court approval; these are SEC allegations, not court findings of fact.

For other ways that "guaranteed" crypto income turns out to be recycled deposits, see our coverage of the NovaTech settlements and pig butchering scams.

Red flags of a mining app or cloud-mining scam

• Fixed or guaranteed daily returns. Real mining income moves with difficulty, fees and electricity costs; it is never guaranteed.
• Claims your phone is mining bitcoin. Both app stores forbid on-device mining.
• Referral bonuses, team levels or "invite friends to unlock withdrawals." Rewards for recruiting are a classic sign of a pyramid scheme (opens in a new tab), where, the SEC warns, the main emphasis is on signing up new participants.
• Withdrawal fees, "taxes" or minimums that keep rising. The CFTC and SEC flag fees to release profits as advance-fee fraud.
• No verifiable facility, company registration or audited numbers, only a dashboard you can't check.
• Pressure to buy a bigger package now, often from someone you met online.
• Unregistered sellers. The CFTC/SEC alert suggests checking a firm's background on Investor.gov and the CFTC's RED List.

Before you send anything, run the offer through our Scam Check tool for a quick review of the warning signs.

What to do if you already paid

1. Stop paying. Do not send any "unlock," "tax" or "upgrade" fee to get a withdrawal through.
2. Save evidence. The FBI's guidance for crypto scam victims (opens in a new tab) says the most useful details are transaction details: wallet addresses, the amount and type of crypto, dates and times, and transaction IDs. Also keep the app or site name, screenshots, messages and the exchange you paid from.
3. Report it to the FBI at ic3.gov (opens in a new tab). Report even if you don't have transaction details, the FBI says.
4. Tell your exchange or bank right away; exchanges can sometimes freeze funds through their own processes or in response to legal process, but there is no guarantee. Crypto transfers themselves usually can't be reversed (see can crypto transactions be reversed?).
5. Delete the app and change any passwords you reused there.

Updated November 9, 2026 by Dave McNaught. Educational content, not financial, legal or tax advice. Spot an error? Request a correction.

About the author

Dave McNaught

Dave McNaught has worked in IT since 1999 and founded All Business Technologies (ABT) in 2003, a Boston-area firm providing Managed IT, Cybersecurity, Managed AI, Web Design and App Development. He publishes The Crypto Guide.

Full bio