Loading story…
Authorities and policy groups are intensifying efforts against transnational online scam operations centered in Southeast Asia, particularly Cambodia, where criminal networks have been linked to fraud compounds, human trafficking, and abuse of workers. Reporting highlights recent enforcement actions including Cambodia's extradition of Chen Zhi to China, a new U.S. executive order targeting cyber-enabled fraud, and a Thai-led operation with international partners and Meta that removed 150,000 fake profiles and arrested 21 suspects tied to scam activity. The broader picture is that scam syndicates are adapting quickly, shifting locations, fragmenting into smaller cells, and exploiting gaps between law enforcement, regulators, and private-sector platforms.
On-the-ground reporting from Cambodia describes the human cost inside alleged scam compounds, including forced labor, torture, and coercion of workers recruited under false pretenses. One former guard said he was ordered to use electric shocks and beat Chinese workers inside a heavily secured compound on Bokor Mountain, even as publicized crackdowns were underway elsewhere. That account reinforces concerns that abrupt enforcement alone can displace operations while leaving trafficked workers vulnerable and limiting intelligence collection on how the scam ecosystem functions. A separate report on fake shipment-tracking phishing in the Middle East and Africa is not part of the same event, as it covers a different scam trend and geography rather than the Cambodia-centered scam-compound crackdown.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
22 events from the most recent confirmed update back to the earliest known activity.
On 2026-05-04, Hong Kong’s Department of Justice applied to the High Court for a restraint order targeting assets tied to people and companies allegedly linked to Cambodia’s Prince Group, including chairman Chen Zhi and Wu An Ming. The proposed freeze covers dozens of companies and reflects escalating international action against the conglomerate over alleged scam-compound and cyberfraud ties.
By 2026-04-30, reporting highlighted proposed U.S. legislation including the Dismantle Foreign Scam Syndicates Act, the SCAM Act, and the BRAVE Burma Act. The bills were described as aiming to combine sanctions, interagency coordination, victim support, and pressure on Myanmar’s military regime and allied militias tied to scam-center operations.
On 2026-04-24, the U.S. State Department announced a reward of up to $10 million for information that helps identify and seize illicit funds connected to the Myanmar-based Tai Chang scam center complex. The move expanded U.S. pressure on Southeast Asian scam-center networks beyond the DOJ enforcement actions announced the previous day.
On 2026-04-23, the U.S. Justice Department announced Scam Center Strike Force actions including criminal charges against Chinese nationals Huang Xingshan and Jiang Wen Jie for allegedly managing fraud operations at the Shunda scam compound in Burma. Authorities also seized a Telegram channel used to recruit trafficking victims to a Cambodian scam compound and 503 fraudulent investment domains tied to Southeast Asian scam-center networks targeting Americans.
On 2026-04-23, the U.S. Treasury Department sanctioned Cambodian senator Kok An and 28 associates for allegedly operating and supporting scam compounds in Cambodia tied to fraud against U.S. victims, money laundering, human trafficking, and abuse. U.S. officials said the network used casinos, resorts, and office parks in Poipet, Sihanoukville, and Bavet as bases for scam operations.
On 2026-04-06, Cambodia enacted a new Law on Combating Online Scams by royal decree, creating severe penalties including life imprisonment for operators of scam compounds tied to online fraud, trafficking, forced labor, torture, and deaths. The law also reportedly distinguishes organizers from coerced workers, shielding trafficking victims forced to participate in scams from criminal liability.
By 2026-04-01, Cambodia had extradited Li Xiong, former chairman of the Cambodia-based Huione Group, to China over allegations that he laundered money tied to the regional scam industry. Authorities said the move was part of the broader crackdown on scam compounds and related criminal infrastructure, and Chinese officials linked him to Chen Zhi’s syndicate.
On 2026-03-26, the United Kingdom announced a new round of sanctions against individuals and entities linked to Cambodia’s Prince Group, which has been accused of operating scam centers tied to forced labor and human trafficking. The measures expanded prior U.K. asset freezes to additional London properties and sanctioned figures including Hu Xiaowei.
At a Joint Economic Committee hearing on 2026-03-26, U.S. officials and expert witnesses said China was implicitly enabling Chinese criminal syndicates operating scam compounds across Southeast Asia and selectively intervening when Chinese citizens were affected. The hearing also outlined rising U.S. victimization and proposed stronger diplomatic, regulatory, and anti-fraud measures.
On 2026-03-26, South Korea’s Financial Services Commission announced new steps against online phishing and mule bank accounts, including a joint task force to launch in April and bank detection and information-sharing systems due by the end of September. The regulator also said it would pursue legal changes to speed the freezing of suspected fraudulent accounts and recovery of victims’ losses.
By 2026-03-26, South Korea had responded to the expansion of scam compounds affecting its citizens with indictments, travel restrictions, and diplomatic pressure. The measures were presented as part of growing international pressure on scam operations in Cambodia and Myanmar.
By March 2026, FBI officials said the Internet Crime Complaint Center had received more than 80,000 complaints in 2025 related to these fraud schemes, with losses exceeding $2.9 billion. The bureau linked many of the operations to Chinese organized crime syndicates and highlighted cooperation with Thai authorities.
U.S. authorities froze or seized more than $580 million in digital assets connected to cyber-enabled fraud schemes linked to Southeast Asian scam operations. The action was cited as part of broader international disruption efforts in early 2026.
In early 2026, the United States issued an executive order focused on combating cyber-enabled fraud. The measure was cited alongside other international policy and law-enforcement responses to industrialized scam ecosystems.
In early 2026, the United Kingdom launched a deepfake detection framework in collaboration with Microsoft and other technology companies. The initiative was presented as part of wider policy and industry efforts to counter scam-related abuse of emerging technologies.
As part of the same early-2026 disruption effort, a major technology company shut down more than 150,000 fake or scam-linked online accounts and profiles. The action was highlighted as a public-private measure against transnational fraud networks.
In early 2026, a Thai-led enforcement operation targeted scam networks tied to Southeast Asian compounds, arresting 21 suspects. The operation also seized more than 8,000 mobile phones and 1,300 hard drives.
By mid-March 2026, reporting from Poipet and online recruitment channels indicated that scam compounds in Cambodia were still operating and hiring despite the government's claimed crackdown. Firsthand accounts also described forced labor, torture, and abuse inside the compounds.
In March 2026, the Stimson Center brought together more than 20 experts from over 10 countries to examine how legal frameworks could be better used or updated against transnational scam operations. The workshop emphasized the need for more coordinated, holistic law-enforcement approaches.
Following Chen Zhi's extradition in January 2026, Cambodian authorities expanded a nationwide crackdown, claiming compound closures, arrests, and mass deportations. Analysts and NGOs cited in the reporting said the campaign appeared selective and did not hold senior enablers accountable.
In January 2026, Cambodia arrested and extradited businessman Chen Zhi to China. The move was described as a trigger for intensified Cambodian enforcement against online scam compounds.
On 2021-05-02, Sri Lankan police raided an alleged scam center in Talangama, a suburb of Colombo, and arrested 37 Chinese nationals. Authorities said the suspects were working illegally and seized 35 tablets, 147 mobile phones, and 100 SIM cards during the operation.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
27 references tracked. Mallory keeps watching after this page renders.
thediplomat.com
Open sourceoccrp.org
Open sourcethediplomat.com
Open sourcethediplomat.com
Open sourcethediplomat.com
Open sourcehuntress.com
Open sourcekharon.com
Open sourcebitdefender.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cambodian authorities shut down **190 online scam centers** as part of an intensified national crackdown on transnational fraud operations, according to government statements cited by Reuters. The enforcement action reportedly included the arrest of **173 senior figures** and the deportation of roughly **11,000 foreign nationals**, reflecting the scale and international composition of the scam-compound ecosystem operating in the country. The reporting was published as part of an ISMG “breach roundup” that also briefly noted other, separate security developments (including the European Parliament disabling AI tools on lawmakers’ devices, a *Notepad++* updater supply-chain exposure being patched, an Apple iOS zero-day fix, and emergency remediation for an actively exploited **BeyondTrust** RCE, among others). Those items were presented as additional headlines rather than as part of the Cambodia enforcement action.
Jun 29, 2026
A new **UNODC assessment** says transnational scam networks rooted in Southeast Asia have grown into a global organized-crime force, defrauding victims across East Asia, Southeast Asia, Australia, and New Zealand of an estimated **$88 billion to $114.1 billion in 2025**. The report describes a sophisticated ecosystem dominated by Chinese-origin criminal groups that extends beyond cyber-enabled fraud into cryptocurrency-based settlement networks, criminal infrastructure, trafficking of workers from more than 80 countries, and other illicit goods and services. It identifies **cryptocurrency**, encrypted messaging platforms such as **Telegram**, **generative AI** including deepfakes, and satellite internet services such as **Starlink** as major enablers helping syndicates evade disruption and scale operations. Regional enforcement has intensified, but authorities and researchers say it has largely **displaced rather than dismantled** the scam industry. China has expanded charges against alleged Cambodian scam kingpin **Chen Zhi**, who was deported to China and could face the death penalty, while also executing members of another criminal group tied to scam operations. Myanmar’s junta-backed legislation has introduced severe penalties for online scam activity involving torture or coercion, yet operations are reportedly fragmenting from large compounds into smaller sites in Myanmar and other resilient hubs in **Cambodia, Laos, and Myanmar**, where corruption, special economic zones, and cross-border protection networks continue to sustain the trade.
Jul 31, 2026
Authorities in South Korea have intensified efforts to combat cybercrime scam factories operating in Southeast Asia, particularly in Cambodia, Laos, and Burma. These scam centers, often run as forced-labor camps, have been responsible for a surge in online fraud targeting victims worldwide and have ensnared hundreds of thousands of workers, including an estimated 1,000 South Koreans. Following the gruesome murder of a South Korean student lured to a Cambodian scam center, the South Korean government issued a 'code black' travel ban for certain regions and is preparing sanctions against groups operating these facilities. The scam operations generate tens of billions of dollars annually and have prompted regional governments to increase raids and legal actions against the perpetrators. In a related development, the Korean National Police Agency arrested nearly 50 South Koreans repatriated from Cambodia on suspicion of participating in online scam operations. Investigations are ongoing to determine whether these individuals were coerced or joined the scam networks voluntarily, with reports of some returnees being beaten and forced to work in the scam centers. The case has led to public calls for stronger protections for South Korean citizens against trafficking into overseas scam operations, as officials estimate that many more remain trapped in such facilities in Cambodia.
Jul 12, 2026