CNB Mining, a cryptocurrency operation, has surfaced with four website domains registered in June 2025. The platform presents itself as a simple "click a button" app for crypto mining but exhibits all the hallmarks of a Ponzi scheme. No verifiable ownership or executive details are publicly available for the operation.

The four websites associated with CNB Mining are cnbmining.online, cnbmining.top, cnbmining2.com, and cnbmining.net. Three of these domains, including the app portals cnbmining.top and cnbmining.net, were registered in mid-June 2025. The cnbmining2.com app domain was registered earlier in the month. The marketing site, cnbmining.online, also saw registration in June. Official marketing materials for CNB Mining contain Chinese text, strongly suggesting that individuals connected to China are behind the operation.

CNB Mining offers no tangible products or services for sale. Participants can only recruit others to join CNB Mining as affiliates. The scheme's compensation structure is based entirely on affiliate investments, paid in tether (USDT). Investors are promised daily returns that escalate with higher investment tiers. For instance, a VIP1 investment of 2 to 1000 USDT is advertised to yield 4% daily, while the top tier, VIP8, requires an investment of over 1,000,001 USDT for a promised 13% daily return. Referrals are also compensated, with commissions paid down three levels of recruitment.

Participation in CNB Mining is technically free to join, but a minimum 2 USDT investment is required to access the income-generating opportunities. The core of the scheme involves affiliates logging into an app daily and clicking a button, purportedly to initiate crypto mining operations. This mechanic is nonsensical; if a mining operation is already established, there is no logical need for investor funds. The actual function of this "click a button" action is to disguise the recycling of new investments to pay earlier participants, a classic Ponzi structure.

This "click a button" app Ponzi model has been observed repeatedly in the cryptocurrency space. Schemes like TronSoy, Mining Memes, and Tron CFD employed identical deceptive tactics, presenting themselves as legitimate cloud mining operations. ScamTelegraph has documented hundreds of similar "click a button" app Ponzis since 2021, most of which collapse within weeks or months. The typical collapse involves the operators disabling the websites and apps without warning, leaving the vast majority of investors unable to recover their funds. Often, just before a collapse, investors attempting to withdraw funds find their accounts locked.