I would say that it is generally not possible to prove beyond most naysayer's doubts that any cloud company has the physical hardware. Pictures can be faked, the same with invoices, and allowing people to physically see the equipment poses a security risk.
The answer to proving that a company owns actual equipment is to show them the mining address. The issue here is that even this can be faked. A company could rent mining capacity for a period of weeks or months when the term of a mining contract is years. Another way to fake a mining address would be to claim they are mining at a pool (like many smaller cloud mining companies probably are - when they are actually operating in a legal way) that doubles as an exchange (cex.io). The company could launder proceeds from their contract sales either through a mixer or through a large exchange like bitstamp, then deposit the proceeds into cex (the sales proceeds would not go directly to cex in order to make it difficult to draw the connection). Now the company is able to send payments to their customers from an address that can be easily traced to mining proceeds.
I agree, thats why I said its not impossible, just a whole lot more difficult and expensive. But in order to score full marks on my criteria, you also need an asic vendor to vouch for you and there should be no doubt about the identity of the people behind the company. Not many scammers like to expose themselves to prosecution.
I wouldnt hold my breath. I lost count of the number of ponzi's Ive seen come and go over the past years, and if anything, they are getting more transparent (as in, more obvious to be a ponzi), not less.