What is the punishment for cryptojacking?
Cryptojacking—using someone else’s device or computing resources to mine cryptocurrency without permission—can lead to fines, prison time, and orders to repay losses. There is no single punishment: it depends on the country, the laws involved, and how much harm was caused.
Why cryptojacking can be a crime
Mining means using computing power to help run a cryptocurrency network and potentially earn rewards. Mining on your own equipment is different from secretly making someone else’s computer do that work.
Cryptojacking is often prosecuted under existing laws rather than a law specifically called “cryptojacking.” Depending on what happened, charges may involve:
- Unauthorized computer access: entering or using a computer system without permission.
- Computer interference or damage: disrupting services, slowing systems, or impairing their operation.
- Fraud: using deception, stolen accounts, or false information to obtain computing resources.
- Malware offenses: creating, distributing, or installing harmful software, where local law makes that conduct an offense.
You do not necessarily have to steal files to face charges. Unauthorized use of processing power can itself matter legally.
How serious can the punishment be?
Penalties can range from a fine or probation—supervision in the community subject to court conditions—to years in prison. Serious cases involving many victims, substantial losses, or other crimes can carry much heavier sentences.
For example, in the United States, federal prosecutors may use the Computer Fraud and Abuse Act. Some offenses can be misdemeanors, while certain first-time felony offenses carry maximum prison terms of five or ten years. The exact provision and circumstances matter; there is no universal federal “cryptojacking sentence.”
In the United Kingdom, the Computer Misuse Act can apply. Basic unauthorized access can carry up to two years’ imprisonment on indictment, while unauthorized acts intended to impair a computer’s operation, or committed recklessly as to impairment, can carry up to ten years.
These are examples of statutory maximums, not predictions of what a court would impose. Other countries have different offenses and sentencing rules.
What makes a case more serious?
A court’s assessment may depend on factors such as:
- How many devices or accounts were affected.
- How long the mining continued.
- Electricity costs, cloud-computing bills, and recovery expenses.
- Disruption to a business, hospital, or public service.
- Use of stolen credentials, malware, or deliberate concealment.
- Previous convictions and the person’s role in the scheme.
The amount of cryptocurrency earned is not the only measure of harm. A miner might earn relatively little while leaving a victim with a large cloud bill or expensive downtime.
Financial and workplace consequences
Prison is not the only possible consequence. A court may order restitution, meaning repayment of victims’ qualifying losses, or confiscation of criminal proceeds. Victims may also bring civil claims seeking compensation.
If you secretly mine on an employer’s equipment, you could face dismissal, disciplinary action, or a claim for costs—even if criminal charges are never filed. Having permission to use a work computer does not automatically give you permission to mine on it.
For browser mining, simply visiting a website should not be treated as informed permission to use a visitor’s device for mining.
The bottom line
Cryptojacking can mean criminal charges, prison, fines, and repayment obligations. Only mine on resources you own or have clear authorization to use. If you are involved in a specific incident, check your local law and speak with a qualified lawyer; the applicable charge determines the possible punishment.
