According to a recent report by cybersecurity firm Lookout, over 93,000 users have been deceived by fraudulent cryptocurrency mining applications available on the Google Play Store. These apps masquerade as cloud mining platforms, claiming users can mine Bitcoin, Ethereum, and other digital assets directly from their phones. However, they perform no real mining operations whatsoever.
The Scam Mechanism: Fake Dashboards and Paid Upgrades
Lookout identified a total of 175 fraudulent apps, 25 of which were originally hosted on Google Play, while the remaining could be sideloaded from third-party marketplaces. The core trick: these apps display convincing but entirely fictitious mining dashboards that show increasing balances—lulling users into believing they are earning crypto. When victims attempt to withdraw their alleged earnings, they encounter error messages prompting them to purchase “premium upgrades” or monthly subscriptions to improve performance. These payments—ranging from a few dollars to hundreds—flow directly to the scammers.
Unlike typical malware that steals sensitive data, these fake miners are more insidious. They do not request excessive permissions, making them harder for Google’s security filters to detect. Instead, they rely on social engineering and the promise of easy profits.
Two Variants: Cloudscam and Bitscam
Lookout classified the apps into two groups: Cloudscam and Bitscam. The key difference: Cloudscam only accepts payments via Google Play (credit cards or store credit), while Bitscam additionally supports direct cryptocurrency payments—including Bitcoin and Ethereum—allowing scammers to reach crypto-native users. Lookout estimates total victim losses exceed $350,000.
Although Google promptly removed the reported apps from Play Store, many remain downloadable from third-party sites. The booming crypto market has attracted a wave of inexperienced investors, making them easy prey.
How to Protect Yourself
Lookout advises new crypto enthusiasts to:
- Research developers before installing any mining app.
- Only use official app stores and avoid sideloading.
- Read user reviews carefully—look for patterns of complaints about withdrawals.
- Be skeptical of paid upgrades: genuine mining operations do not require in-app purchases to enable withdrawals.
“Scammers know inexperienced users are entering the cryptocurrency market in droves,” the report warns. “They will try to take advantage of this boom.” As the crypto sector grows, vigilance remains the best defense.