← back to the index
HS-006 Cloud mining fraud · Thailand 2019

HashBX — Thailand’s First Cloud Mining Service Became Its Most Damaging Fraud

Operation
HashBX
Investor Losses
฿52M+ documented; ~$38M estimated total
Contracts Sold
Bitcoin hashrate rental contracts, lifetime and term packages
Status
At-Large

Summary

HashBX Global Co., Ltd., a Bangkok-based cloud mining platform founded in 2016 by Wanchaleom Langkaweekate, collected funds from Thai retail investors by renting purported Bitcoin hashrate and promising returns of two to thirty percent daily. The platform presented itself as Thailand's first domestically operated cloud mining service, claiming a two-megawatt facility running Antminer S9 rigs in partnership with Bitmain's Antpool. Beginning in August 2018, the company progressively restricted investor withdrawals; by March 2019, a documented victim group had filed police complaints claiming losses totaling 52.4 million baht. Thailand's Securities and Exchange Commission issued a public warning stating that HashBX had not obtained Ministry of Finance approval to operate a digital asset business and had not filed an initial coin offering application as required by Thai law. Broader estimates of total losses across the investor base reached approximately 38 million US dollars, though no aggregated verified figure from a court proceeding exists. Langkaweekate and associated operators were not arrested as of the date of this filing. The company's website domain remained accessible but the operation ceased paying investors.

HashBX launched at the end of 2016 when Thailand had no specific digital asset regulatory framework and cloud mining occupied a legal grey zone that Thai authorities were only beginning to define. The platform's founder openly acknowledged — in an interview with Siam Blockchain at the time of launch — that he had personally lost money to fraudulent cloud mining sites before establishing HashBX, framing his venture as a transparent and verifiable alternative. The 2-megawatt facility claim, the Antpool partnership, and the offer of physical tours to Bangkok investors all served as credibility markers in a market where verifiable operations were rare. Minimum investments began at 380 baht, deliberately set within reach of retail savers.

The collapse followed the pattern common to cloud mining frauds during the 2018 Bitcoin bear market. When Bitcoin prices fell from their late-2017 peak, the revenue from any genuine mining could no longer sustain the promised daily return rates. Withdrawal conditions appeared, then multiplied. An investor who had deposited thirty million baht reported receiving cumulative returns of only thirty thousand to one hundred thousand baht. A lawyer representing seven initial complainants filed formal reports with the Metropolitan Police Bureau in March 2019; a second victim group joined the complaint soon after. The Thai SEC's public notice — citing the absence of any Ministry of Finance license — formally confirmed the company's unlicensed status, but no criminal prosecution was confirmed as of the date of this filing.

Timeline

December 2016
HashBX launches
Wanchaleom Langkaweekate, former owner of iNet Broadband, publicly announces HashBX Global Co., Ltd. at its Bangkok office. The platform offers Bitcoin hashrate rental starting at 380 baht, claiming a 2-megawatt facility with Antminer S9 hardware on the Antpool mining pool.
2017
Rapid expansion during bull market
The platform grows its user base as Bitcoin prices climb through 2017, reaching a reported 7,621 accounts with a combined hashrate of approximately 4,728 TH/s. Returns appear to materialise for early investors, suppressing scepticism and generating word-of-mouth recruitment.
Late 2017–early 2018
Bitcoin price decline begins
The extended bull market peaks in December 2017. As prices fall through 2018, maintenance costs and promised payout rates become structurally incompatible with genuine mining revenues.
August 2018
Withdrawal restrictions begin
HashBX starts imposing conditions on investor withdrawals without transparent public explanation, a pattern documented in subsequent police complaints. Investors attempting to redeem returns encounter new requirements or delays.
Late 2018
Payments effectively cease
Multiple investors report complete inability to withdraw funds. At least one investor had committed 30 million baht and received cumulative returns far below the promised rate. Investor complaints begin circulating on Thai social media and crypto forums.
Early 2019
Victim group organises
Investors engage a lawyer, Wutiikrai Piwkhao, to represent them in filing formal complaints. Evidence gathered includes investment records, account screenshots, and incomplete payout documentation.
March 2019
Police complaint filed
An initial group of seven investors files a formal complaint with investigation unit officers at the Metropolitan Police Bureau in Bangkok, claiming combined documented losses of 52,434,260 baht. A second victim group files separately in the same period.
March 2019
Thai SEC issues public warning
Thailand's Securities and Exchange Commission publicly warns investors that HashBX Global Co., Ltd. had not obtained Ministry of Finance approval to operate a digital asset business and had not registered an ICO with the SEC, making its operations unlicensed under Thai law.
2019
Operators not arrested
Despite the police complaints and SEC warning, no arrest warrant or criminal charge against Langkaweekate or associated operators was publicly confirmed. The case passes to prosecutors and investigators.
2020–2026
Operators remain at large
No confirmed arrest or conviction of any HashBX operator appears in Thai public records or international enforcement databases as of the date of this filing.

The Credibility Architecture HashBX Built

HashBX succeeded in establishing perceived legitimacy precisely because its founder anticipated and addressed the objections that had destroyed the reputation of earlier cloud mining platforms. Langkaweekate's public acknowledgment that he had personally investigated approximately thirty cloud mining sites and found most to be fraudulent was itself a recruitment tool: he positioned HashBX as the exception, the platform built by someone who knew what fraud looked like and had deliberately structured an alternative. The Bangkok facility, the Antminer S9 hardware claims, and the Antpool relationship were all verifiable in principle, and the company offered physical tours to differentiate itself from anonymous offshore operators.

The investor demographic this approach reached was exactly the constituency that bore the greatest subsequent harm. Thai retail investors, many with no prior exposure to cryptocurrency, encountered a platform operating from a registered Bangkok address with a named Thai founder, a known hardware partner in Bitmain, and a minimum investment accessible to working-class savers. The 380-baht entry point and the lifetime contract structure — with inheritance provisions allowing shares to be transferred to family members — were not incidental features but design choices that deepened investor commitment and delayed recognition that the operation had no sustainable revenue model at the promised return rates.

The promise of two to thirty percent daily returns was mathematically incompatible with any legitimate mining operation, even at Bitcoin's 2017 price peak. Two percent daily compounds to a capital doubling every 36 days; at thirty percent daily, the entire global Bitcoin network's revenues would not cover the obligations on a fraction of HashBX's claimed book. No external audit of the facility or hashrate was produced, and the physical tours offered in early marketing had stopped well before investor complaints began.

How the Collapse Unfolded

The withdrawal restriction pattern that began in August 2018 is the fraud's clearest diagnostic signal. In legitimate cloud mining — to the extent the economics can work at all — the operator's liability is denominated in hashrate delivered, not in a fixed-rate return on capital. HashBX had structured its obligations as guaranteed daily return percentages, a commitment that required either genuine mining revenues at those rates or a continuous inflow of new investor capital to fund earlier investors. When Bitcoin prices fell from their December 2017 peak through mid-2018, the inflow of new investors slowed and the mining economics deteriorated simultaneously. The withdrawal restrictions that followed were not a temporary liquidity measure; they were the mechanism by which the operator retained investor capital while ceasing to provide the contracted service.

The investors who had committed the largest sums suffered disproportionately. One documented victim had placed thirty million baht into the platform and received cumulative returns of only thirty thousand to one hundred thousand baht — a recovery rate below one percent of principal. The complaint documentation gathered by the investor group's legal representative included investment records sufficient to establish the basic fraud, but the absence of audited company accounts, the unlicensed operational status the SEC confirmed, and the lack of any third-party verification of the mining infrastructure made the trail to individual operator liability more complex for prosecutors.

The Thai SEC's March 2019 warning, while confirming the unlicensed status, was a civil regulatory notice rather than a criminal referral. Thailand's Emergency Decree on Digital Asset Businesses of May 2018 had come into force only months before the HashBX collapse, creating procedural complexity around which pre-Decree activities were actionable under the new rules and which required older fraud provisions.

The Five Factors

01
Domestic Credibility as a Fraud Asset
HashBX's positioning as Thailand's first nationally operated cloud mining service, with a named Thai founder and a Bangkok office, exploited the trust asymmetry between local operators and anonymous offshore platforms. Investors who had been warned to avoid foreign sites were specifically targeted by a pitch that addressed those concerns. The founder's public narrative — of having lost money to foreign frauds before building a transparent alternative — was itself a social engineering device that pre-emptively neutralised scepticism.
02
Regulatory Pre-emption Gap
The Thai Emergency Decree on Digital Asset Businesses was enacted in May 2018, approximately eighteen months after HashBX began operations. For the entirety of its growth phase, the platform operated in a jurisdiction with no specific digital asset licensing requirement and no agency with a clear mandate to audit cloud mining service providers. This gap allowed the platform to collect funds, make return promises, and build investor pools with no regulatory visibility into its actual hardware or financial position.
03
Return-Rate Impossibility Masked by Bull Market
The promised return range of two to thirty percent per day is not a minor exaggeration of legitimate mining yields; it is several orders of magnitude above what any Bitcoin mining operation could deliver. During the 2017 bull market, nominal gains for early investors — paid from new investor capital rather than mining proceeds — made the rate promises appear credible. The structural impossibility was only exposed when the market turned and the Ponzi arithmetic could no longer be sustained.
04
Lifetime Contract Structure as Commitment Escalation
The design of lifetime contracts, with provisions allowing inheritance transfer of mining shares, was not a feature offered for investor benefit. It was a mechanism for deepening investor commitment to a level that made early exit psychologically and practically difficult. Investors who had designated their mining shares as transferable family assets were less likely to demand early withdrawal and more likely to interpret payment delays as temporary.
05
Audit Absence and Self-Reported Capacity
HashBX's claimed hashrate — 4,728 TH/s across 7,621 accounts — was entirely self-reported with no third-party verification. The Antpool relationship and the Antminer hardware claims could not be independently verified by investors. No blockchain-observable output was attributed to identifiable HashBX mining addresses. This is structurally identical to the mechanism identified by the DOJ in the HashFlare case: a dashboard displaying numbers is not evidence of mining, and the absence of any proof-of-hashrate standard created the fraud's operational space.

Aftermath

The police complaint filed in March 2019 was accepted by investigating officers at the Metropolitan Police Bureau, and evidence was gathered for further prosecution. Thailand's SEC issued its formal public warning in the same month. However, no arrest warrant, criminal charge, or conviction of Wanchaleom Langkaweekate or any other HashBX operator was publicly confirmed as of the date of this filing. The case has not appeared in Thai court records accessible to international researchers. The $38 million total loss estimate cited in regulatory and investor community sources has not been verified through an aggregated court proceeding or official regulatory finding; the documented complaint amount is 52.4 million baht (approximately $1.6 million at 2019 exchange rates) from the initial victim group, with broader estimates covering a larger investor pool that was never fully enumerated in public proceedings.

HashBX stands as one of several Thai cloud mining fraud investigations from 2018–2019 that exposed the vulnerability of retail investors in markets where digital asset regulation came into force only after platforms had already collected significant capital. The Thai Emergency Decree on Digital Asset Businesses, enacted in May 2018, created enforcement tools unavailable for the full growth phase of HashBX's operations. Operators who exploited the pre-Decree gap and subsequently fled illustrated the limitation of reactive regulation in a sector where the launch-to-collapse cycle can complete within two to three years.

Lessons

  1. A domestic registration address, a named founder, and physical infrastructure tours do not constitute evidence that a cloud mining platform's return promises are backed by real mining capacity; independent on-chain verification of block rewards attributable to the platform remains the only meaningful proof.
  2. Daily return promises in the range of two to thirty percent are incompatible with the economics of Bitcoin mining under any market conditions; investors should compute the annualised return implied and compare it to the entire network's total mining revenue as a basic plausibility check.
  3. Lifetime contract structures that allow investment shares to be inherited or transferred should be read as commitment-deepening devices that make withdrawal less likely, not as evidence of the platform's long-term confidence in its own operations.
  4. When a cloud mining platform begins restricting or delaying withdrawals without clearly disclosing the reason, that action should be treated as evidence of insolvency or fraud rather than a temporary technical issue; the sequence of restriction followed by complete cessation is the standard collapse pattern.
  5. Investors in jurisdictions undergoing rapid digital asset regulatory development should confirm that a platform holds a current license under the applicable law, not only that it was operating before that law came into force — legacy unlicensed operations are a distinct risk category.

References