An unusual electricity spike is a lead, not proof, of unauthorized cryptocurrency mining. Mining can occur in anything from a single workstation to a large data center, and a high load may have an ordinary explanation. Treat the spike as credible only when it aligns with other signs—meter or wiring tampering, unexplained heat, overloaded equipment, repeated power-quality problems, or unsafe connections—and let the electricity provider or authorities verify the service.
Do not enter a suspected site, open a meter or panel, touch cables, disconnect equipment, or confront occupants. Electrical theft can create fire, electrocution, outage, and equipment-damage hazards. Record what you can see legally from a safe location and report specific observations to the utility, property manager, or local authorities; call emergency services for an immediate fire, injury, or dangerous electrical condition.
As an Amazon Associate I earn from qualifying purchases.
What an unusual power spike can—and cannot—tell you
There is no universal kilowatt-hour-per-day or demand threshold that identifies unauthorized crypto mining. The same load can be excessive in a small home, normal in a workshop, or modest for a commercial data center. The U.S. Energy Information Administration (EIA) says mining operations vary from individual workstations to large facilities, while site power draw and operating information are often unavailable or unclear.
A bill, interval chart, smart-meter alert, or neighbor’s observation can show that consumption changed. It cannot, by itself, identify the equipment, prove that the activity is cryptocurrency mining, or establish that electricity was stolen. A responsible assessment compares the anomaly with reasonable alternative explanations and the total circumstances.
#1 Best Overall
- 【Enhanced Thermal Clarity】Start with 128x128 thermal imaging and enhance to 240x240 resolution with TISR technology for greater details. The wide 40°x 30° field of view and a 25Hz refresh rate deliver accurate, smooth thermal images—ideal for detailed inspections in homes and on electrical systems and machinery
- 【Wide Application with Smart Alerts and Photograph】From underfloor heating to leak detection and electrical inspections, the TC004 Mini adapts to every challenge. When temperatures exceed preset levels, an on screen warning alerts you instantly while automatically capturing a photo to streamline your diagnostics. In addition, TC004 Mini also supports manual photo taking to help you record and solve problems, and the built-in 512MB eMMC storage can store up to 8,000 photos
- 【Effortless Temp Measurement with Alerts】Easily measure temperatures between -4°F to 842°F (-20°C to 450°C), with an accuracy error within ±3.6°F/2%, the thermal camera automatically pinpointing the highest, lowest, and central spots. Plus, you can choose from 5 different color palettes - White Hot, Black Hot, Iron, Rainbow, and Red Hot - to meet your specific work needs. Instant warnings will alert you when the temperature exceeds your preset level, making your job more efficient
- 【Longer Runtime, Fewer Charges】Designed for efficiency, this thermal imaging camera gives you 15 hours of power and automatic shut-off options at 5, 10, and 20-minute intervals to extend battery life. Keep going without the hassle of frequent charging, no matter how long your inspections last. A charging cable is given with the machine, but no charging head.
- 【Portable, Durable & Hassle-Free】Take this thermal imaging camera anywhere with its mini, pocket-friendly design. The ergonomic design makes it easier for you to hold during use, and the lightweight design is more suitable for long-term use. Engineered for durability, it can survive drops up to 2 meters without skipping a beat. Supports IP54 waterproof rating to ensure worry-free daily use. Get peace of mind with TOPDON's lifetime technical support to keep it running smoothly
What makes a spike worth reporting
- A sudden or sustained increase that has no plausible connection to a new appliance, heating or cooling load, production schedule, renovation, or occupancy change.
- Repeated outages, voltage problems, transformer overheating, blown fuses, or other local grid effects occurring at the same time.
- Visible signs of meter interference, exposed conductors, direct-tap connections, bypassed service, or wiring that does not appear to follow the normal service route.
- Unusual heat, constant ventilation noise, or dense equipment activity observed from a place where you are permitted to be.
- Several independent indicators occurring together rather than one dramatic reading.
None of these observations is conclusive alone. Utility personnel need to inspect metering, service conductors, protective devices, and load conditions before deciding whether a violation or hazard exists.
A safe, evidence-based way to assess a suspected operation
1. Record observations without trespassing
Write down the location, date, time, duration, and exactly what you observed. Note repeated outages, unusual noise, visible heat effects, damaged equipment, or changes in a building’s electrical service. Use only information available from a public area, your own property, or another place where you have permission to be.
Do not enter a building or fenced area, look inside an electrical cabinet, remove a cover, open a meter, follow cables onto private property, or use a device to interfere with service. Do not photograph people in a way that creates a confrontation. A clear description is more useful than a risky attempt to collect proof.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →2. Separate facts from assumptions
Describe “a meter seal appears broken” or “a transformer has been smoking,” not “the occupants are stealing power to mine Bitcoin.” Include what you know about normal use and any legitimate explanation you can identify. A high load may come from refrigeration, welding, pumps, heating, server equipment, or a temporary construction project.
The 27 September 2021 guide from the National Counterterrorism Center, the Department of Homeland Security, and the FBI lists unusual or massive electricity spikes, suspicious manipulation of power delivery, unusual heat signatures under legally justified thermal imaging, and meter or wiring anomalies as possible indicators. It also warns that “Some indicators may be insignificant on their own.” That qualification should shape every report.
3. Look for corroboration, not a magic number
Ask whether independent clues point in the same direction: an unexplained load increase plus apparent meter bypass, abnormal heat plus continuous ventilation, or power-quality failures plus unauthorized high-power equipment. A single thermal image, sound, usage graph, or computing symptom does not establish mining or theft.
Utility investigators can correlate operational data, information-technology events, and physical-access information. NIST’s utility guidance describes this kind of correlation as part of situational awareness; its statement that “Real-time or near real-time situational awareness is a key element in ensuring this visibility across all resources” describes a utility monitoring framework, not a consumer test.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Rank #2
- 【Dual Mode Inspection】Combines conventional thermal imaging (Center/Hot/Cold spot modes) with thermometer mode for flexible temperature analysis. Use full-screen thermal imaging to monitor moving animals, machinery, automotive, or HVAC systems in real time, ensuring continuous observation with no detail loss. When you need exact numbers such as kitchen use, thermometer mode provides quick, point-and-shoot readings with a clear digital display.
- 【User-Friendly Operation】Weighing just 240g, this compact thermal imager offers a balanced feel with a non-slip grip even during extended use. Intuitive button controls let you power on, navigate menus, capture images, and switch between seven color palettes effortlessly—so you can start inspecting right away.
- 【Multi-Scenario Application】Built with high-precision sensors (NETD < 50mK), it detects subtle temperature differences down to 0.05°C. The -4°F to 1022°F temperature range handles everything from household inspections to high-heat diagnostics, including home kitchens, insulation checks, and automotive maintenance.Adjustable emissivity and distance settings help improve accuracy across materials like cement, ceramic,etc.
- 【Fast Anomaly Detection with Instant Alerts】A 50° wide field of view lets you scan larger areas in less time. Set custom high and low temperature alarms for instant alerts when temperatures exceed your limits. Adjustable level and span settings enhance thermal contrast, making it easier to identify issues such as insulation gaps and floor heat loss.
- 【All-Day Battery Life 】The built-in 2500mAh rechargeable battery provides up to 14 hours of continuous use for uninterrupted inspections. Backed by a 1-year warranty for added peace of mind.
4. Report the concern to the party able to check it
Contact the electricity provider’s safety or theft-reporting channel. If you are a tenant, notify the building owner or manager as well. Local authorities may handle suspected theft, unsafe wiring, or code violations, and reporting procedures differ by jurisdiction.
Give the address or service location, when the unusual activity occurs, the readings or effects you personally observed, and any visible safety hazard. State uncertainty plainly. For example: “The building’s load has increased sharply since last month; there are repeated outages and a damaged service box visible from the sidewalk.” Do not identify speculation as a fact.
A 2024 account from Sarawak’s Ministry of Utility and Telecommunication describes utility teams investigating suspected mining-related electricity theft after reports of direct tapping that bypassed meter readings. That local example illustrates why inspection belongs to authorized utility or government personnel; it is not a prevalence estimate and its reporting contacts apply only in Sarawak.
5. Treat immediate danger as an emergency
Move away from smoking or damaged transformers, fallen or exposed conductors, arcing equipment, burning insulation, damaged meters, and improvised connections. Keep other people and pets away. Call emergency services for an active fire, injury, electrocution, or imminent danger, and notify the utility about the grid or service hazard. Never try to make the area safe by pulling a cable, switching a device, or cutting power yourself.
Free tools Windows power users keep installed
One-click scans. No signup required.
Indicators that deserve professional verification
| Observation | Why it may matter | What it does not prove |
|---|---|---|
| Large or unusual electricity reading | Mining hardware can operate continuously and may create a sustained load; an unexplained change is a useful lead. | It does not identify mining, show that power is stolen, or provide a universal threshold. |
| Meter seal, wiring, or service-route anomaly | Bypassing or altering metering can conceal consumption and create dangerous connections. | A visual impression can be wrong; only an authorized inspection can determine tampering. |
| Direct tap or exposed connection | A connection ahead of the meter can bypass recorded usage and overload conductors. | Do not approach or test it; the condition may be immediately lethal. |
| Unusual heat or ventilation | High-density computing produces heat and may require continuous cooling. | Heat can come from many legitimate loads, and thermal imaging cannot establish mining. |
| Repeated outages or damaged grid equipment | An overloaded or faulty installation can affect transformers, fuses, and local power quality. | Weather, aging infrastructure, or unrelated faults can produce the same effects. |
| Abnormal computer or network behavior | May indicate cryptojacking on a device, especially with unexplained processor use or battery drain. | Device symptoms do not prove that a nearby site is stealing utility electricity. |
Why there is no universal household threshold
Mining demand depends on the number and type of machines, their power settings, cooling system, operating schedule, and the site’s electrical design. A few computers may blend into a normal office load; a dense installation can place a continuous burden on a service or transformer. Comparing one customer’s bill with another’s is therefore unreliable.
EIA reported on 1 February 2024 that it had identified 137 U.S. cryptocurrency-mining facilities and had maximum electricity-use estimates for 101 of them, totaling 10,275 megawatts. Those records are the agency’s facility information at that time, not a current census. EIA noted that actual operation can be below designed capacity and that it lacked data for a well-sourced utilization estimate. It also said facility locations and operating details can be difficult to track because there are millions of customers and miners may relocate.
For national context, EIA estimated that U.S. cryptocurrency mining used 0.6% to 2.3% of total U.S. electricity consumption in 2023. The estimate was published in 2024 and is not a test for an individual property. EIA derived a top-down range using Cambridge Centre for Alternative Finance Bitcoin data and a bottom-up compilation of individual facilities. The top-down calculation covered Bitcoin rather than every proof-of-work cryptocurrency, and the facility data had gaps. EIA later discontinued its emergency collection for Form EIA-862, so the figures should not be treated as a continuously updated meter-by-meter inventory.
Rank #3
- 【Enhanced Thermal Clarity for Precise Inspections】The RT280 handheld thermal imaging camera features a 2.8-inch 320×240 LCD screen for smooth, detailed thermal visuals. Equipped with TISR technology, it enhances thermal image effective resolution from 120×90 to 240×180, enabling the capture of tiny temperature differences. Its 50°x 38° FOV and 25Hz frame rate deliver clear, smooth images, making it ideal for home inspections, electrical checks, mechanical fault diagnosis, and automotive engine inspections.
- 【Smart PC Analysis with 2D/3D & Temperature Insights】Easily transfer images from this thermal imager to Windows PC(Not compatible with Mac) for advanced analysis. The included software supports point, line, and area temperature analysis, 2D/3D thermal imaging, and automatic report generation. Complex thermal data from this infrared cameras thermal imaging device is instantly transformed into actionable, shareable insights, helping you solve problems efficiently and professionally.
- 【Built-in 8GB eMMC Storage for Over 20,000 Images】Capture and store more than 20,000 images and videos with this thermal camera, preserving every detail of your inspections. The 8GB eMMC storage ensures all critical thermal imaging data is saved securely and easily accessible. Whether documenting electrical panels, HVAC systems, or machinery, your ir camera keeps all inspection records organized and ready for analysis.
- 【Accurate Temperature Measurement with Smart Alerts】Measure temperatures from –4°F to 1022°F with ±3.6°F / ±2% accuracy. The RT280 thermal imaging camera automatically detects the highest, lowest, and central temperature points. High/low alarms instantly alert you to anomalies, making it easy to prevent overheating, insulation gaps, or mechanical faults. Clear visual and auditory warnings improve efficiency and safety in every inspection.
- 【9 Color Palettes, Laser Targeting & LED Light】Switch between 9 color palettes to visualize subtle temperature differences with clarity. The built-in laser pointer and LED light allow precise targeting in dark or confined spaces. This infrared camera makes it easy to locate hotspots, leaks, or irregular temperature patterns, delivering professional-grade thermal imaging for electrical, HVAC, plumbing, or mechanical diagnostics.
Physical unauthorized mining versus cryptojacking
Two different problems are often called “crypto mining theft.” Keeping them separate prevents a wrong report.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Physical site using utility electricity
This is a facility or room running mining hardware from a normal service, an altered meter, or a bypass connection. Relevant evidence concerns the electrical installation: load changes, service conductors, meter condition, heat, ventilation, equipment density, and effects on the local grid. Utility staff must verify the service and metering.
Cryptojacking on a computer or device
Cryptojacking is malicious software or code that uses a device’s processor without the owner’s knowledge. It can slow the computer, increase processor activity, shorten battery life, or cause a browser to behave unusually. The United Kingdom’s National Cyber Security Centre described a 2018 incident in which mining code ran in visitors’ browsers and advised closing the affected browser as an immediate step for that incident.
These symptoms concern computing resources, not a physical property’s utility meter. A slow laptop does not show that a neighboring building is mining, and a power spike at a building does not show that your laptop is infected. Investigate the device and the electrical service through their respective channels.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How authorized investigators choose tools
Professional teams should select tools according to authorization, training, and the signal being measured. Utility-grade interval meters and load-monitoring systems can help identify unusual patterns, but a reading still needs context about equipment, schedules, weather, and service configuration.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchThermal imaging may reveal an unusual heat signature when used under legally justified conditions by trained personnel. It is an indicator only: insulation, sunlight, transformers, motors, and ordinary computing equipment can all produce heat. A thermal camera is not a license to surveil private property, enter restricted areas, or declare mining based on a colored image.
Any inspection plan should define who is authorized to enter, what data may be collected, how readings will be corroborated, and how hazards will be controlled. Consumers should provide observations to the utility rather than attempt to reproduce a professional inspection.
Rank #4
- 【Dual Mode Inspection】Combines thermal imaging with Center/Hot/Cold spot modes for real-time visual temperature display, and integrates thermometer mode for fast point-and-shoot readings with precise digital output. Full-screen thermal imaging enables continuous monitoring of moving targets,ensuring stable observation without loss of detail during dynamic inspections.
- 【User-Friendly Operation】 At just 240g, this compact thermal imager features a non-slip grip and balanced handheld design for comfortable long-duration inspections or mobile use. It offers intuitive button controls for power on/off, menu navigation, and image capture, and supports 7 selectable color palettes, enabling fast switching.
- 【Multi-Scenario Application】It supports a broad measurement range from -4°F to 1022°F with enhanced with adjustable emissivity and distance settings,making it suitable for applications.Equipped with a high-sensitivity sensor (NETD < 50mK), the thermal camera can detect extremely subtle temperature differences as small as 0.05°C.
- 【Quick Anomaly Detection with Alerts 】Featuring a 50° wide field of view, the device enables faster scanning of large surfaces and broader inspection coverage. It supports custom high/low temperature alarms for instant notification when abnormal thermal conditions are detected. Level and span adjustment functions make it easier to clearly identify localized issues.
- 【All-Day Battery Life】Built-in 2500mAh rechargeable battery provides up to 14 hours of continuous operation, supporting full-day inspection without frequent recharging. The device also includes a 1-year warranty, ensuring long-term reliability and peace of mind for using.
Common mistakes and safer alternatives
Mistake: treating a high bill as proof
Safer approach: compare the timing and size of the change with legitimate equipment, occupancy, weather, and billing-period differences, then report an unexplained pattern for verification.
Mistake: confronting occupants
Safer approach: use the utility, property manager, or authorities. Confrontation can escalate and does not make an electrical installation safer.
Mistake: opening a meter or panel
Safer approach: keep your hands and tools away. A concealed energized conductor can remain live even when a switch appears off.
Mistake: using a thermal image as a verdict
Safer approach: treat heat as one observation that trained, authorized personnel may correlate with service data and physical evidence.
Mistake: confusing a device infection with utility theft
Safer approach: handle suspected cryptojacking as a device-security issue and report suspected meter or wiring problems as an electrical-service issue.
A concise reporting checklist
- Exact location or service address.
- Date, time, and whether the condition is continuous or intermittent.
- What changed from the normal pattern and how you know the pattern is unusual.
- Visible meter, wiring, transformer, smoke, heat, noise, or outage observations made from a safe, permitted location.
- Any immediate danger to people, buildings, or the grid.
- Legitimate explanations you considered, such as new equipment or seasonal heating.
- Your contact information if the utility or authority needs clarification.
Do not include guesses as facts, private information gathered by trespassing, or instructions for bypassing service. The objective is to give professionals enough precise information to check the installation safely.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsWhat a utility or authority may verify
Authorized personnel can compare interval consumption with the service’s rated capacity, inspect seals and conductors, test metering, check protective devices, examine transformer and feeder conditions, and review outage or power-quality records. They may also determine whether the load is permitted, whether wiring complies with local rules, and whether an unsafe connection is affecting other customers.
Those checks can distinguish an ordinary high-demand customer from an unauthorized or hazardous installation. They also protect evidence and reduce the chance that an untrained person is injured while trying to prove a suspicion.
Bottom line
Use unusual power consumption to start a careful report, never to make a diagnosis. A credible concern combines an unexplained load pattern with corroborating electrical, physical, heat, or grid indicators. There is no universal threshold, and neither a bill nor a device symptom proves crypto mining or electricity theft. Stay out of the installation, report precise observations to the electricity provider or relevant authorities, and treat exposed conductors, fire, smoke, or injury as an emergency.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools

