Is cryptojacking illegal?
Yes—cryptojacking is generally illegal because it means using someone’s device to mine cryptocurrency without their permission. The exact offense depends on where you live and what happened, but secretly using another person’s computing power can break laws against unauthorized computer access or interference.
Why permission matters
Mining means making a computer perform calculations that help secure a cryptocurrency network, such as Monero, in return for a chance to earn coins. It uses computing power and electricity.
Cryptojacking happens when someone takes those resources without your informed permission. It can involve malicious software installed on your computer, a compromised server, or code that secretly runs inside your web browser.
The legal issue is not simply that cryptocurrency is being mined. It is that someone is using a device or account they are not allowed to use that way. Even if they do not steal files or damage the computer, unauthorized mining can still be unlawful.
Which laws can apply?
There is no single worldwide cryptojacking law. Depending on your country or region, authorities may treat it under laws covering:
- Unauthorized computer access: Getting into a device or account, or using access beyond what is permitted.
- Computer interference: Slowing down a system or disrupting its normal operation.
- Fraud: Using deception to obtain computing resources or avoid paying for them.
- Misuse of electricity or services: Making someone else cover the costs of mining.
You do not need to assume that every case fits all these categories. Prosecutors must prove the elements of the relevant offense, and those requirements vary.
There can also be consequences outside criminal law. A victim might seek compensation for costs or losses. An employer or cloud provider might terminate an account, dismiss an employee, or pursue a contract claim.
Does browser mining count?
Browser mining is not automatically cryptojacking. If you knowingly choose to let a website use your device for mining, that is different from a website starting it secretly.
For permission to be meaningful, you should understand:
- That mining will run on your device.
- That it can increase power use, heat, and fan noise.
- How much computing power it will use.
- How to stop it.
A buried sentence in a privacy policy is not something you should assume provides valid legal consent. Neither is the fact that you visited a website.
Consent also has limits. You may agree to mining on your personal laptop but lack authority to approve it on a work or school computer. A site owner likewise cannot authorize secret mining on visitors’ devices just because they control the website.
If you suspect unauthorized mining
High processor use or a loud fan alone does not prove cryptojacking. Updates, games, and video calls can cause the same symptoms.
If you suspect a website, close the page and check whether activity drops. If the problem continues, update your security software and run a scan. On a work device, contact your IT team.
Keep screenshots, security alerts, and any unexpected bills if you may need to report the incident. Avoid paying anyone who promises a guaranteed “cryptojacking cleanup” without explaining what they found.
The bottom line
Cryptojacking is generally illegal because it uses computing resources without permission—not because mining itself is always illegal. If you need a legal answer about a specific incident, check your local rules or speak with a qualified lawyer.
