The data shows that in a crypto mining operation that raised $22 million, only 13% of the capital ever touched a rig. The rest—87 cents on every dollar—disappeared into personal accounts, marketing funnels, and what the SEC now calls a Ponzi structure. Alpha isn’t extracted from the noise floor when the noise floor is the entire operation. This isn’t a hack. It’s a balance sheet leak engineered by design.
Context: The Mining Automatic Case The SEC filed suit against Zan Shaikh and his company Mining Automatic, alleging that from 2020 to 2023 they operated a fraudulent crypto mining investment scheme. Investors were promised “guaranteed monthly returns” on funds purportedly used to purchase and operate mining hardware. Reality: only $2.86 million of the $22 million raised was spent on mining. The remaining $19.14 million was diverted—to pay early investors (classic Ponzi mechanics), to fund Shaikh’s lifestyle, and to cover marketing costs. By the time the SEC stepped in, the scheme had a net capital deficit exceeding $20 million. The complaint charges violations of Section 17(a) of the Securities Act of 1933 and Section 10(b) of the Exchange Act of 1934. Both parties have agreed to a preliminary permanent injunction pending court approval.
Core: The Order Flow Analysis—Where the Capital Actually Went Let me break this down like I would a liquidity audit. Any quant trader knows that the first rule of capital preservation is knowing where your counterparty risk lives. In this case, the counterparty was a black box labeled “mining operations.”
Step one: trace the inflows. $22 million from 380+ investors, sourced primarily through online marketing and referral incentives. The average ticket was roughly $58,000—significant retail money, but not institutions. That alone flags a retail extraction pattern.
Step two: follow the outflows. The SEC’s complaint details that the “mining” line item consumed only 13% of total capital. The remaining 87% went to three buckets:
- Liquidity buffer (Ponmi payout): A portion paid earlier investors their “guaranteed returns.” No mining revenue could sustain those payouts—hashprice was too volatile, and the operation never reached scale. This is the classic “new money pays old money” structure.
- Marketing and sales: Heavy referral commissions to bring in fresh capital. In crypto, that’s a conversion funnel with negative ROI.
- Personal enrichment: Shaikh used funds for personal expenses including luxury goods and travel. The complaint doesn’t specify percentages, but the net deficit of $20 million implies that most of the 87% is unrecoverable.
From a quant perspective, this is a low-latency extraction model. The fraudster doesn’t need technical sophistication—just a narrative that sells. “Guaranteed returns from mining” is a narrative with high emotional alpha to retail investors. The extraction rate (87%) is shockingly efficient. For context, most DeFi rug pulls extract 30-50% before collapse. This one pushed past 80% because the mining narrative created a longer tail of trust.
I’ve seen similar patterns in my own work auditing fake hashpower contracts during the 2022 bear market. A common red flag: the platform offers a fixed APR with no basis in real hashprice. If the Bitcoin network’s average revenue per terahash is $0.10 per TH/s per day, and a project promises $0.20, the delta is pure phantom yield. Mining Automatic’s promises were never anchored to real economics.
Contrarian: Retail Sees a Safe Asset—Smart Money Sees a Liability Shell The consensus among retail investors is that crypto mining is “boring but safe.” Physical rigs, electricity costs, residual income. That perception is precisely what predators exploit. The contrarian truth: any investment pool that offers “guaranteed returns” without a verifiable, on-chain hashpower backing is a liability shell. The SEC’s Howey Test analysis here is textbook: money invested, common enterprise, expectation of profits solely from the efforts of others. That’s a security. And if it’s a security without registration, it’s illegal.
The blind spot most investors miss is the infrastructure layer. Legitimate mining operations publish audited financials, real-time hashrate dashboards, and often publicly listed equipment serial numbers. Mining Automatic had none of that. Yet the “crypto mining” brand alone was enough to extract $22 million. Efficiency isn’t about speed; it’s about eliminating noise. The noise here was the mining narrative itself—it masked the absence of any actual rigs.
Another contrarian angle: this case actually strengthens the case for regulatory clarity. SEC enforcement actions create precedents that savvy operators can use to build compliant structures. The meme that “regulation kills innovation” is lazy. Regulation kills bad actors. For infrastructure-first investors like myself, a clear legal framework is a liquidity multiplier. Survival is the highest form of alpha generation.
Takeaway: Actionable Signals for Traders and Investors What does this mean for your portfolio? Direct impact is minimal—this isn’t a systemic collapse. But here are the order-flow-level takeaways:
- Verify hashpower provenance: Any mining pool or cloud mining platform you consider should provide real-time on-chain verification of its hashrate. If it’s opaque, treat it as a 100% loss scenario.
- Track the 87% rule: If a project raises $10 million and can’t show where at least 70% of that capital is deployed into hardware or operations, the extraction rate is too high. Walk away.
- Watch for regulatory recursion: The SEC will use this case to tighten requirements on all mining-related securities. Expect more subpoenas and Wells Notices to platforms that promise “guaranteed returns.”
The question I keep returning to: how many more Mining Automatic-level schemes are still operating under the surface? The blockchain records everything, but the human ledger of greed doesn’t show up on-chain. That’s where the real work—and the real alpha—lives.
