Vast.ai Review: fees, KYC and how to sign up

// Review

by the bestcloudmining editorial desk · curated review · prose updated 2026-11-04 · facts as of 2026-11-04 · how we verify

Overview

Vast.ai is the largest open GPU rental marketplace, operated by Vast.ai Inc. (Delaware C Corp, 2016) [2], with 68-plus GPU types across 40-plus data centers [1]. Hosts set prices; Vast adds no renter-side markup [2]. No KYC is required for normal rental [2]. A CloudSEK threat-intel report (September 2026) documents an active attacker abusing the marketplace's open model [4].

What you can rent

Spot and on-demand GPU instances across 68-plus GPU types in 40-plus data centers [2]. Host-set prices with per-second billing [2]. Payment: Stripe (card) plus BitPay/Crypto.com (crypto, non-refundable) [2]. Unspent credits are refundable [2]. No minimum purchase published [2]. KYC: zero matches in the full terms text [2].

Contract & terms

Vast.ai Inc. (Delaware C Corp, incorporated June 2016, HQ in Los Angeles) governs the terms with California law and JAMS arbitration [2]. No KYC exists for normal rental [2]; the renter-side "No markup layered on top of host-set prices" claim is from the docs [3]. The renter-side fee model is "No markup layered on top of host-set prices" [2]. Host commission is unpublished [2]. Crypto payments are final and non-refundable [2].

Proof & verifiability

The bundles API is publicly accessible and returns live prices [1]. The terms text is server-readable with zero KYC matches [2]. The CloudSEK report (September 2026) is an independent watchdog source documenting marketplace abuse - not a platform breach, but a structural risk of open marketplaces [4]. Reddit complaints about garbage listings and nonsensical prices are real [6]. No confirmed platform breach was found on the check date; the operator publishes a vulnerability-disclosure policy and states a clean security record since launch in 2018 [7].

Reliability & history

The marketplace has run since its 2016 incorporation [2]. A CloudSEK threat-intel report (September 2026) documents hostile tenants deploying bridge agents and a stored-XSS vector against Vast's Caddy auth portals - marketplace abuse, not a platform breach [4]. Reddit complaints include the "garbage listings flood" and mid-job container restarts in a paid benchmark [5]. No fraud, exit or insolvency events for the company [2].

Pricing

Host-set prices, no renter markup [2][3]. Page-1 API sample read 4 November 2026 (64 offers): RTX 3090 min $0.121, RTX 5090 min $0.213, RTX 4090 $0.120-0.541, H100 NVL $2.474, H200 $2.763 per GPU-hr (page-1 sample; no H100 SXM ask was listed on the check date; noise caveat applies) [1]. Payment: Stripe + BitPay/Crypto.com [2]. Crypto non-refundable; unspent credits refundable [2]. KYC: none [2]. No minimum deposit published [2].

Verdict

Vast.ai is the deepest and most verifiable GPU marketplace - live public APIs, a named Delaware entity, published pricing mechanics, and a published vulnerability-disclosure policy [1][2][7]. The open-marketplace model is both its strength (supply) and its weakness (hostile tenants, garbage listings) [4]. Rent short, verify each listing's reputation, and never load a large balance [1]. The marketplace depth (68 GPU types across 40 data centers) is unmatched by any single cloud provider on our list [2]. The per-second billing means you pay only for what you use [2]. The CloudSEK report is the most significant independent security assessment of the platform - it does not find a breach but does document a hostile-tenant pattern that open marketplaces attract [4]. For production workloads, RunPod or Together AI offer more curated supply [2].

// How to get started with Vast.ai

Built only from what is documented on this page as of 2026-11-04 - anything not documented stays a gap on purpose.

1. Open the provider site

   Everything happens on vast.ai - we count the click, nothing else changes for you.

2. No ID check documented

   KYC is documented as none as of 2026-11-04. Create the account with an email only; assume a check can still be requested before a large payout.

3. Pick the smallest unit that still works

   Price from $0.067 per GPU/hr - start with the minimum, not with the plan the checkout page pushes.

4. Pay

   Accepted: BTC plus card transfer. Check the network and the deposit address inside your account, never from an email.

5. Read the term before you sign

   maintenance · refund: Unspent credits purchased by card are refundable via Stripe; crypto-bought credits are not refundable. A term you did not read is money you cannot get back.

6. Verify the output, not the dashboard

   Proof is documented as partial - Offers carry a host reliability score and a verified-vs-community hosting distinction, but there is no hardware TEE or cryptographic proof-of-compute. Compare the first payout with the pool or wallet before scaling up.

Then run the math: mining calculator · contract vs. HODL · all GPU compute providers.

// Is Vast.ai legit?

Short answer: Based on our checks as of 2026-11-04: Vast.ai scores 6.9/10 in our weighted review. We logged no red flags. User reports and operator background are documented with dated sources in the meta-review below.

Status	active
Operator	Vast.ai · HQ USA (high)
Founded	2016
Proof	partial
KYC	none

Red flags

No red flags logged as of 2026-11-04.

What "legit" does not mean

A real, operating provider can still lose you money: with a contract you own no hardware, revenue follows coin price and difficulty, and most published contracts are priced so the seller comes out ahead. "Legit" means the operator exists and pays what its terms promise - not that the deal is profitable. 12 dated sources back this page; they are listed under sources.

// Alternatives to Vast.ai

Same category, scored on the same criteria - so the comparison stays honest. Compare only in the same unit, and read the minimum, KYC and proof columns before switching.

// Vast.ai FAQ

Is Vast.ai legit?

Based on our checks as of 2026-11-04: Vast.ai scores 6.9/10 in our weighted review. We logged no red flags. User reports and operator background are documented with dated sources in the meta-review below.