Norton Crypto Mining Review: Norton 360’s Controversial Cryptominer Explained

Something unusual is unfolding at Norton, long associated with antivirus software and consumer security. This review explains how a brand known for multiple privacy and safety tools ended up bundling a cryptocurrency miner—and why many customers are alarmed by the change.

• Virtual private network.
• LifeLock.
• Cloud backup.
• Parental controls.
• Cryptocurrency miner.

On the broader question of whether Norton is trustworthy, the company has a long-standing reputation in the cybersecurity industry and is commonly evaluated in independent antivirus comparisons and consumer ratings. At the same time, Norton has faced recurring criticism over the years for issues adjacent to protection itself—such as aggressive upsells, bundling, auto-renewal surprises, and performance complaints on some systems—which is part of why the mining feature struck such a nerve with customers.

Cryptocurrency adoption continues to surge, with new use cases emerging across industries as people explore what digital assets can do.

Among the latest entrants is Norton. In June 2021, the antivirus provider announced a feature for Norton 360 that would let users mine cryptocurrency—specifically Ethereum.

What initially looked like a harmless add-on has since triggered strong backlash from those who encountered it.

How Norton 360’s Miner Works: Opt-In Controls and Limits

Before jumping to conclusions, there are details worth noting about Norton 360’s crypto miner. In many installations, the miner component is included alongside Norton 360 by default, but it is designed to remain inactive unless you explicitly enable it. Although some users say its presence during installing lacks clarity, it does not run without user consent, and you can enable or disable the feature at will.

Turn it off, and your graphics card won’t spend idle cycles hashing ETH in the background. In other words, it is not an uncontrollable background cryptomining process; users maintain control.

If you simply want it gone, there is a practical difference between disabling and uninstalling. Disabling is typically done inside Norton 360’s settings (so the miner stays present but inactive). Fully removing it usually means uninstalling Norton 360 itself, or removing the crypto-mining component where the installer and version allow it; some users report the process is straightforward, while others say it can be confusing and may leave behind components until the suite is reinstalled or removed cleanly.

It’s also worth separating “crypto mining” from “crypto security.” Norton 360’s security features can help protect people who use crypto (for example, anti-phishing and malicious-site blocking, password management for exchange logins, firewalling, identity monitoring, and optional privacy tools). These protections are integrated into the security suite, not the miner, and they generally do not provide wallet-level protections or on-chain transaction monitoring; they’re aimed at keeping the device and browsing sessions safer rather than policing transactions.

A transparent opt-in is only meaningful when users can clearly see what is installed, what runs on the device, and how to remove it.

The real flashpoint is the fee. Where many pools take roughly 1%–3%, Norton’s service withholds a 15% commission from whatever is mined.

“Norton installs a crypto miner by default, but it stays inactive until you give consent,” says Matjaž Škorjanc of NiceHash. “It aims to mine Ethereum while your computer sits idle. The catch? Norton takes a 15% cut—and you still pay for the Norton 360 subscription.”

There is another wrinkle: payouts arrive in ETH, typically via Coinbase. Depending on how the program is set up, there can also be a minimum payout threshold before you can move funds. If you want to transfer to a different wallet or convert to another currency, Ethereum network fees (and any exchange fees) can be steep. And, as with other mining rewards, users generally need to track and report earnings according to local tax rules.

“ETH is notorious for high transaction costs,” Škorjanc adds. “You may have to wait a long time before you’ve amassed enough to transfer your mined crypto to an exchange or actually use it, which is why complaints are piling up in forums.”

Unsurprisingly, many Norton 360 users are outraged. Even as crypto goes mainstream, critics view this as opportunistic bundling designed to extract profit rather than help customers.

“It looks like a straightforward bid to open up another revenue stream,” says Josh Sandhu, co-founder of Quantus Gallery. “Crypto isn’t disappearing, so they’re confident enough to roll out pooled mining software under the Norton brand.”

“As digital assets become mainstream, established corporations will keep entering the space,” he continues. “In this case, it’s bundling a miner into antivirus software to add a new way to make money.”

Costs, Power Use, and Hardware Wear

The launch landed with a thud. Beyond the eye-popping commission, critics argue the team downplayed the electricity costs of mining—expenses that show up on the user’s bill.

For many typical home setups, potential mining returns can be modest—often ranging from a few cents to a few dollars per day before power costs, depending on hardware, difficulty, and ETH price. After Norton’s cut, local electricity rates, and transfer fees, profitability can narrow quickly, and any “break-even” calculation is highly sensitive to energy costs and how often you actually cash out.

Profitability on consumer hardware is rarely steady. Once electricity, service fees, and withdrawal costs are included, small payouts can shrink to near zero.

• Electricity costs.
• Hardware wear.
• Environmental impact.

“There are broader consequences here,” Sandhu warns. “Mining draws power and affects the climate. For the average user, any ETH they mine could be eaten up by their energy bill, and the graphics card working harder shortens its lifespan. It leaves a bad taste.”

“If big companies jump in, they owe consumers fair treatment—and they should account for the genuine environmental impact,” he adds.

Beyond cost and performance, some critics also worry about security and stability. Any mining component adds complexity to a security suite, can increase system load, and may broaden the attack surface if it introduces additional processes, permissions, or update mechanisms. While complaints often focus on unwanted bundling and resource use (rather than a specific widespread malware outbreak linked to the feature), the optics are complicated for a product that’s supposed to reduce risk.

For Škorjanc, the move feels tone-deaf: miners like NiceHash have spent years fighting antivirus flags on legitimate tools, only for Norton to ship its own miner while appearing to misunderstand how computer mining actually works.

“‘Norton Crypto’ already sounds like a mismatch,” he says. “Anti-virus vendors have blocked signed, secure mining apps for a decade, and now Norton bolts one into its suite without fully grasping the mechanics.”

“Norton 360 also isn’t known for being lightweight,” he continues. “When that big yellow window appears, graphics card usage can surge and everyday tasks can slow to a crawl.”

“For comparison, NiceHash QuickMiner takes about 2% and gives users full control of hardware and settings,” he notes. “On home computers and gaming rigs, careful tuning is critical to prevent overheating. Norton’s lack of adjustable settings is risky and could damage components.”

“Worse, this will introduce thousands of newcomers to crypto with a poor first experience,” Škorjanc concludes. “I struggle to see benefits for end users or the mining ecosystem, though some may switch to better software.”

Whether Norton chose wisely will become clear over time. At minimum, observers hope the company listens to feedback and refines the miner so any future iteration feels transparent, efficient, and truly user-first.