A report from California-based security firm Lookout found that more than 93,000 users were scammed into paying for fake Android cryptocurrency mining applications. Marketed as tools that could help users earn money through crypto mining, the apps in reality performed no mining activity at all. Instead, they monetized users through paid upgrades, subscriptions, and other add-on features that supposedly improved mining performance.
How the scam worked
According to the report, the apps were designed to imitate the front end of cloud mining platforms. Their purpose was to create the illusion that users were actively mining digital assets. Rather than stealing private data in the more conventional malware sense, these apps relied on a subtler model: they displayed fabricated activity and fake earnings figures to persuade users that the service was functioning.
That deception became especially effective at the point where users tried to cash out. The report says victims would encounter error messages when attempting to withdraw their supposed mining proceeds. By then, many had already paid for premium features or recurring subscriptions intended to boost output that did not exist in the first place.
175 apps identified, including 25 on Google Play
Lookout said it detected a total of 175 applications tied to the scheme. Of those, 25 apps were available through the Google Play Store, while the rest were distributed through third-party app marketplaces and sideloading channels. The firm noted that the apps’ lower-profile behavior may have helped some of them avoid detection for a longer period, since they were not primarily focused on obvious data theft.
This made the scam particularly dangerous for inexperienced users. Apps that appear polished, simulate activity, and avoid immediately triggering security concerns can more easily gain trust, especially among people newly entering the crypto market and looking for simple ways to earn passive income.
Cloudscam and Bitscam
Lookout divided the fraudulent apps into two main categories: Cloudscam and Bitscam. The key difference between them was the payment method. Bitscam apps accepted cryptocurrency payments, including bitcoin and ethereum, while Cloudscam apps relied on Google’s payment infrastructure.
The report estimates that users lost at least $350,000 to these applications. The real number could be higher, especially if additional victims installed the apps from third-party markets or made payments that were not captured in the firm’s estimate.
Google removed the apps, but the risk remains
Google has removed the reported applications from the Play Store, according to the report. However, their removal from the official store does not fully eliminate the threat. Many of the apps remain accessible through unofficial marketplaces, where app vetting is often weaker and users may be more exposed to fraud.
Lookout warned that the broader crypto boom has created fertile ground for this type of scam. As digital assets attract new users, fraudsters are increasingly targeting people with limited technical knowledge or unrealistic expectations about mining returns. In that environment, fake mining apps can present themselves as a low-effort entry point into the market while delivering nothing of value.
Precautions for new users
The security firm advised users to conduct due diligence before downloading or paying for any crypto mining application. That includes checking who the developers are, using only official distribution channels, and reading user reviews carefully for warning signs or unusual complaints. These steps are especially important in areas like cloud mining, where business models can be difficult for beginners to verify independently.
The report also highlights a broader lesson for the crypto industry: products that promise easy returns with minimal transparency deserve close scrutiny. In many cases, claims of automated earnings, accelerated mining performance, or effortless passive income can be used to pressure users into paying before they fully understand how a service works.
While the apps named in the report have already been removed from Google Play, Lookout cautioned that similar products may still be circulating, both in unofficial stores and potentially even on mainstream platforms. For users, that means skepticism remains one of the most effective defenses when evaluating crypto-related mobile apps.