Do not run your own programs on others’ computers, servers, or cameras; do not use company machines for mining

8. Do not run your own programs on others’ computers, servers, or cameras; do not use company machines for mining

Cost: No expense and no time loss

In plain terms: Controlling someone else’s computer, server, or camera without permission is illegal. Operating 20 or more such devices qualifies as a serious offense, punishable by up to 3 years in prison; especially severe cases may incur 3 to 7 years. Even if it does not rise to a criminal offense, offenders can still be detained for up to 5 days and fined between 50,000 and 500,000 yuan. For tech professionals, the most damaging consequence is a lifelong ban from holding key positions in cybersecurity management and network operations after any criminal conviction.

Benefit: Illegally controlling computer information systems is a crime. Serious cases result in up to 3 years in prison plus a fine; especially severe cases incur 3 to 7 years. Controlling 20 or more devices is deemed “serious.” Those not meeting criminal thresholds still face confiscation of illegal gains, up to 5 days of detention, and fines ranging from 50,000 to 500,000 yuan. More serious violations bring 5 to 15 days of detention and fines from 100,000 to 1,000,000 yuan. Anyone with a prior public security penalty is barred for 5 years, while those with a criminal record are barred for life from critical cybersecurity and network operation roles. Example: Li was sentenced to 3 years in prison suspended for 5 years and fined 20,000 yuan after using software to illegally control 105 surveillance cameras; Wu and others received 2 to 4 years and 6 months in prison for implanting malware into mobile phone motherboards to harvest verification codes from over 3.3 million devices.

Evidence grade: A

Sources: National People's Congress (2020). Criminal Law (Amended in accordance with the Criminal Law Amendment (11), Article 285, Paragraph 2). <https://jtgl.beijing.gov.cn/jgj/jgxx/flfg/fl/11033925/index.html>; Supreme People's Court of China, Supreme People's Procuratorate of China (2011). Interpretation of Several Issues Regarding the Application of Laws in Handling Criminal Cases Endangering the Security of Computer Information Systems (Article 1). <https://ga.sz.gov.cn/ZWGK/ZCFG/ZCJD/content/post_1304363.html>; National People’s Congress Standing Committee (2025). Cyber Security Law (amended in 2025, effective on January 1, 2026, Articles 29, 66; 2016 The text of the year is Article 27, 63, and the life ban is the revised Article 66, paragraph 3). <https://www.cac.gov.cn/2025-12/29/c_1768735112911946.htm>; Supreme People's Procuratorate of China (2022). Shandong Binzhou Development Zone: Handled a case of illegal control of computer information systems. <https://www.spp.gov.cn/spp/dfjcdt/202205/t20220518_557113.shtml>; Supreme People's Procuratorate of China (2021). Typical cases of giving full play to procuratorial functions and promoting cyberspace governance (Case 6). <https://www.spp.gov.cn/spp/xwfbh/wsfbh/202101/t20210125_507452.shtml>

Notes: No published cases from China’s Supreme People’s Procuratorate or Supreme People’s Court address mining on company servers; this entry is written under the legal provision concerning unauthorized system control. The lifelong ban from key roles is an additional consequence under China’s Cybersecurity Law, carrying heavier weight for tech professionals than monetary fines alone.