How to Verify a Bitcoin Mining Pool Is Legit

Every Bitcoin miner eventually has to decide who gets their hashrate, and that decision usually comes down to trusting a website: a logo, a fee percentage, a Discord server with a few thousand members. Bitcoin mining pools operate on a public, auditable chain, so most of what actually matters can be checked independently instead.

The failures that have happened, some costing miners hundreds of millions of dollars, trace back to the same handful of things a few minutes of checking would have caught.

Find out if the pool ever holds your coins

This is the question that matters most, and it's also the easiest to check: when the pool finds a block, does the reward go straight from the coinbase transaction to an address only you control, or does it land in a balance the pool manages for you first?

The clearest cautionary tale here isn't even a fraud case. NiceHash, a hashpower marketplace, got hit by a professional attack in December 2017 that drained around 4,700 BTC, worth roughly $70 million at the time, straight out of the platform's wallet before users could withdraw what they'd already earned. The operator wasn't accused of dishonesty. Miners' earnings sat in a wallet they didn't control, and that wallet turned out to be a single point of failure.

Pools that pay directly from the coinbase transaction to your own address avoid this entirely: there's no pool-held balance to freeze, hack, or drain. NexusPool works this way. There's no pool wallet in the loop at all; the block reward goes straight to the address you connected with. Check any pool for a minimum withdrawal amount or language about "your balance" on the dashboard. If either exists, your coins spend time in someone else's custody before they're yours.

Confirm the pool is mining what it claims to mine

A pool can put any number on its homepage, but it can't fake the blockchain. Every block a pool finds leaves a permanent, public coinbase transaction, and you can look that transaction up yourself on any block explorer.

GAW Miners sold about $20 million worth of "Hashlets," shares in cloud hashpower it didn't actually own, to more than 10,000 buyers before the SEC filed securities fraud charges in December 2015. Founder Josh Garza pleaded guilty and was ordered to pay over $9 million in penalties. The company simply hadn't bought enough real computing power to back what it sold, and paid early investors with money from later ones.

The check that would have caught it: pull up any block a pool says it found and confirm the coinbase tag matches. A pool claiming found blocks you can't locate on-chain isn't a rounding error. It's the same gap that sank one of the largest mining frauds on record.

Check whether your own submitted work was counted honestly

Confirming the pool found real blocks tells you the pool is real. It doesn't tell you whether the shares you submitted got counted fairly against everyone else's. That's a separate trust gap, and most pools have no way to close it beyond a dashboard number you can't audit.

BIP340, the Schnorr signature standard used across modern Bitcoin tooling, makes a cryptographic answer possible: a pool can sign a receipt for the shares it credited you, and you can verify that signature yourself, offline, against a public key the operator published in advance. NexusPool calls this Glass Ledger. Every connected rig gets a signed receipt, checked in your browser, with nothing sent back to a server. If a pool can't offer anything like this, you're taking its word for your own numbers.

Check whether independent trackers list the pool

Sites like miningpoolstats.stream, blockchain.com/charts/pools, and Hashrate Index don't take a pool operator's word for anything. They parse coinbase tags out of real mined blocks and build their listings from that, so a pool can't just submit a form to appear there. Inclusion is something outside parties observed happening on-chain.

NexusPool showed up on miningpoolstats.stream's Bitcoin solo pools list recently, and that's worth checking for any pool you're considering. The listing alone doesn't prove much about quality, but it's evidence a third party watched real blocks get attributed to that pool's coinbase tag over time.

Read the code, or confirm someone else has

If the server and client software are public on GitHub under a real license, MIT or GPL, you or anyone else can trace exactly what happens to a submitted share and exactly where a found block's reward gets sent. NexusPool's core and stratum implementation are published that way at github.com/sweethashio/NexusPool. A claim like "payouts go straight to your address" stops being something you take on trust and becomes something you can read in the payout code.

Closed-source pools aren't automatically dishonest. You're just trusting the operator's description of their own system instead of the system itself.

Look past the domain and check who's running it

A pool's tenure matters, and so does whether there's a real history behind the operator or just an anonymous front with a slick landing page. Support that goes quiet after the sale is a warning sign; a team that answers questions in a Discord or forum is not.

MiningMax raised roughly $250 million from about 18,000 investors before authorities arrested 14 people, including the chairman, for embezzling large portions of the funds instead of running the mining operation it promised. HashOcean paid small, believable profits for months to build trust, then went dark in June 2016 with an estimated $50 million or more in customer balances, having never run real mining infrastructure at all. Both looked established until they suddenly weren't.

Tenure and an identifiable operator aren't proof of anything by themselves. Their absence is a real signal.

Judge the fee by realized payouts, not the number on the homepage

A headline fee percentage doesn't tell you what a pool actually costs you. PPS, PPLNS, and proportional payout schemes handle variance differently enough that a low advertised fee can still net less over time than a higher one elsewhere. You can run the math on a real payout before committing your hashrate instead of trusting the fee line on the homepage.

Notice what the pool asks for to connect

A Bitcoin address and a stratum connection are all a legitimate non-custodial pool needs from you. Email verification tied to your payout, KYC on a solo pool, anything that resembles a deposit: none of it has a legitimate reason to exist if the pool never touches your coins in the first place.

Be suspicious of guaranteed returns

Solo mining is a real lottery. Your odds of finding a block are exactly your share of the network's hashrate, nothing better, and no pool can change that math. A pool implying otherwise, through boosted odds or guaranteed returns, is describing something that doesn't match how proof-of-work actually works.

What this checklist doesn't cover

Passing every check here confirms a pool is honest about what it does, not that it will find you a block. Solo mining odds stay exactly what the math says regardless of how trustworthy the operator is. A signed receipt proves your shares were counted fairly; it doesn't improve your chances of winning the lottery. And open, auditable code proves what a pool is supposed to do, not that every box it runs is configured correctly today. Verification narrows down who you can trust. It doesn't remove risk from mining itself.

FAQ

Is Bitcoin solo mining a scam?
No, solo mining itself is just how Bitcoin's proof-of-work has always worked: your odds of finding a block equal your share of network hashrate. The scams in this space are pools and cloud-mining operators that lied about their infrastructure or held customer funds, not the underlying math.

What's the difference between a custodial and a non-custodial mining pool?
A custodial pool holds your mined coins in its own wallet until you withdraw them, which means your balance depends on that wallet staying solvent and honest. A non-custodial pool pays the block reward directly from the coinbase transaction to your own address, so there's no pool-held balance to lose.

Can a mining pool fake its hashrate or block count?
Not on-chain. Every block a pool finds produces a public coinbase transaction anyone can look up. A pool can lie on its homepage, but it can't fake what's recorded on the blockchain itself.

How do I know if a pool counted my submitted shares fairly?
Ask whether it offers any cryptographic proof, such as a signed receipt you can verify offline, rather than just a dashboard number. Without that, you're trusting the pool's own accounting of your own work.

Do I have to trust a mining pool's website, or can I check it myself?
Most of what matters is checkable independently: on-chain block history, third-party stats trackers, and open-source code if the pool publishes it. A website's claims are the one thing you can't verify directly, which is why the other checks matter more.