Loading story…
INTERPOL and industry reporting warn that transnational fraud networks are becoming more sophisticated and more profitable by combining AI-enabled deception, crypto abuse, and organized scam-center operations. INTERPOL’s 2026 Global Financial Fraud Threat Assessment says AI-enhanced fraud is 4.5 times more profitable than traditional methods and links financial fraud to broader criminal ecosystems including cybercrime, human trafficking, and terrorist financing. Researchers and investigators described tools such as ProKYC that can forge identity documents, generate deepfaked liveness checks, create selfie-with-ID images, and tailor verification artifacts to defeat KYC controls, while a cybercrime forum vendor separately advertised fraudulently verified accounts on exchanges including Bitget, Bitvavo, and Kraken with European IBAN and SEPA capabilities, underscoring how criminals are abusing rather than breaching financial platforms.
Authorities are responding with wider enforcement actions against the infrastructure behind these scams. In India, Goa police arrested seven suspects, questioned 24 others, raided more than 40 locations across 11 states, and identified 313 suspected mule accounts in an investigation spanning investment scams, sextortion, parcel fraud, fake hotel bookings, and so-called digital arrest schemes. In Cambodia, officials said raids across at least five provinces led to more than 1,000 arrests tied to cybercrime and online scam compounds, part of a broader regional crackdown on an industry the UN says generates billions of dollars annually and has been linked to trafficked workers and abuse. INTERPOL said fraud-related Notices and Diffusions have risen 54% since 2024, with support in more than 1,500 transnational fraud cases involving $1.1 billion in losses, and it is launching Operation Shadow Storm to target scam-centre-linked fraud, cybercrime, and human trafficking.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
19 events from the most recent confirmed update back to the earliest known activity.
At a U.S. Senate hearing, State Department officials said President Donald Trump raised Southeast Asian cyber scam compounds with Chinese President Xi Jinping as Washington sought greater Chinese cooperation against transnational scam networks. Officials said the compounds are linked to Chinese organized crime groups operating in Cambodia, Laos, and Myanmar.
The U.S. Senate Foreign Relations Committee held a bipartisan hearing examining whether federal agencies and foreign governments are sufficiently coordinated to combat transnational scam centers. Lawmakers and administration officials said at least 13 federal agencies have relevant authorities, highlighted fragmented leadership concerns, and pointed to an executive-order-backed task force, interagency action plan, and intelligence sharing with allies.
INTERPOL released its African Cyberthreat Assessment Report 2026, saying AI-driven cybercrime accounts for 55% of reported digital crime in Africa based on data from 36 member countries. The report said cybercrime losses rose from $192 million in 2024 to $484 million in 2025 and noted scam centres were reported in 72% of participating countries.
A cybercrime forum seller using the handle RasselKyc advertised fraudulently verified accounts for Bitget, Bitvavo, and Kraken, claiming to fabricate identity documents and complete KYC on buyers' behalf. The listing offered accounts with European IBANs and SEPA Instant capability for $150 to $300 each.
At BSides Las Vegas, BeeSafe AI co-founder Ariana Marian presented research based on AI-driven engagement with more than 1,000 suspected scam conversations. She said pig-butchering and related scammers typically build trust over seven to eight days, often shift targets to encrypted platforms such as WhatsApp or Telegram, and usually request money after roughly 60 exchanges.
FBI Director Kash Patel met Cambodian Prime Minister Hun Manet on July 22, 2026 to discuss joint efforts against transnational online scam operations. U.S. and Cambodian officials said they would deepen coordination through intelligence sharing, accountability for scam bosses and complicit officials, and support for victims.
U.S. authorities imposed a second round of sanctions on Prince Group on 2026-06-23, alongside Huione Group, alleging they laundered proceeds from scam operations and other illicit activity. The reference says DOJ, following a FinCEN investigation, alleged Huione laundered $4 billion between 2021 and 2025, including Prince Group proceeds, and prosecutors soon filed a civil forfeiture complaint seeking to freeze billions in bitcoin.
INTERPOL and the United Nations Office on Drugs and Crime jointly held the Global Fraud Summit, bringing together more than 1,300 participants from government, law enforcement, the private sector, technology companies, and civil society. The summit took place over two days.
INTERPOL announced the launch of Operation Shadow Storm, a UK Home Office-funded international task force targeting scam-centre-linked fraud, cybercrime, and human trafficking for forced criminality. It also issued new guidelines on establishing and operating national anti-scam centres.
INTERPOL released its 2026 Global Financial Fraud Threat Assessment, describing financial fraud as a severe and rapidly evolving transnational crime increasingly tied to organized crime, human trafficking, and cybercrime. The report warned that AI-enhanced fraud is 4.5 times more profitable than traditional methods and that agentic AI can automate end-to-end fraud campaigns.
At Black Hat USA 2026 in Las Vegas, TD Bank's Eric Huber presented findings on ProKYC, a KYC-bypass kit used by Nigerian scam rings. He described capabilities including forged IDs, deepfaked liveness videos, selfie-with-ID generation, geo-tailored EXIF metadata insertion, and provider-specific workflows for crypto exchanges and fintech targets.
INTERPOL said that since 2024, fraud-related Notices and Diffusions increased by 54 percent. It also said it had supported member countries in more than 1,500 transnational fraud cases involving USD 1.1 billion in lost assets.
HUMAN Security’s Satori Threat Intelligence and Research Team published research describing FunFoneFarm as a decentralized market of phone-farm hardware, orchestration software, cloud Android services, and AI-assisted scripting used to industrialize large-scale fraud. The report says researchers reverse engineered a complete kit and identified tools such as Auto.js and VMOS, plus an observed affiliate-tracking shortener link tied to scam redirection toward a legitimate trading platform.
OpenAI said it disrupted a scam operation originating from Poipet, Cambodia by banning associated accounts and blocking creation of new ones after a tip from WhatsApp. The company said the network used ChatGPT for romance, investment, and police-impersonation scams, as well as fake job ads and administrative tasks potentially linked to human trafficking and forced labor, and shared its findings with authorities.
Investigators in the Goa cyber fraud sweep identified 313 suspected mule bank accounts allegedly used to receive or transfer fraud proceeds. Authorities contacted police in the states where the accounts were registered and began examining links to broader organized cybercrime networks.
Police in Goa, India arrested seven people and summoned 24 others in an operation tied to 40 cyber fraud cases that caused nearly $262,000 in losses. About 40 police teams raided more than 40 locations across 11 states and seized 21 electronic devices for forensic analysis.
Cambodian authorities said raids conducted between Monday and Wednesday in at least five provinces led to the arrest of more than 1,000 suspects, including large numbers of foreign nationals. Police also seized computers and hundreds of mobile phones during the operations.
Prime Minister Hun Manet ordered Cambodian authorities to crack down on criminal cybercrime and online scam operations, citing threats to security, public order, and social safety. He said foreign criminal groups had infiltrated Cambodia to engage in online scams.
Amnesty International published findings from an 18-month investigation alleging abuses linked to cybercrime compounds in Cambodia. It said Chinese criminal gangs were involved in slavery, human trafficking, child labor, and torture in more than 50 scamming compounds, with indications of state complicity.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
16 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourceoccrp.org
Open sourcecyberveille.ch
Open sourcescworld.com
Open sourceapnews.com
Open sourceinterpol.int
Open sourcehumansecurity.com
Open sourceapnews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**Transnational criminal networks** are increasingly industrializing online fraud with **AI-enabled social engineering**, according to reporting on scam compounds in Southeast Asia, an Interpol assessment, and policy commentary tied to a new US executive order. Fraud operations linked to *pig-butchering* and romance scams are using generative AI to improve language quality, deepfakes to impersonate trusted people, and low-cost "deepfake-as-a-service" offerings to scale deception. Interpol said AI-assisted fraud is **4.5 times more profitable** than non-AI schemes, while broader reporting describes these operations as structured, multinational enterprises that function like businesses and increasingly rely on automation, synthetic identities, and persuasive impersonation at scale. Reporting from Cambodia and the wider region shows scam operators are now recruiting "**AI face models**" to appear on high-volume deepfake video calls, including applicants from multiple countries seeking work in compounds associated with trafficking-linked fraud operations. The same ecosystem has been described as part of a broader organized-crime model involving forced labor, cryptocurrency investment scams, romance fraud, and impersonation schemes targeting victims globally. One reference on calculating AI ROI in enterprise cybersecurity is **not about this fraud campaign ecosystem**, and an EU sanctions announcement concerns separate state-linked cyber incidents rather than financially motivated AI-enabled fraud.
Jun 29, 2026
Chainalysis reported that **cryptocurrency scams and fraud generated an estimated $17B in victim losses in 2025**, making it the largest year on record in its tracking, with at least **$14B observed on-chain** and expectations that totals will rise as additional illicit addresses are identified. The report attributes the increase to the continued industrialization of scam operations and infrastructure, including *phishing-as-a-service*, AI-generated deepfakes, and professional money-laundering networks, alongside major scam categories such as **pig butchering/romance scams** and HYIP-style schemes. Chainalysis also assessed that scam efficiency increased materially, citing a **253% YoY rise in average scam payment** (from **$782 in 2024** to **$2,764 in 2025**) and noting that **AI-enabled scams** can be significantly more profitable than traditional approaches. A key driver highlighted was the rapid growth of **impersonation scams**, which Chainalysis said rose roughly **1,400% YoY**, with average payments to those clusters up more than **600%**. One example cited was an **E‑ZPass-themed smishing campaign** that used fake toll-payment texts and lookalike sites to deceive victims; Chainalysis linked this activity to the Chinese-speaking group **“Darcula” / “Smishing Triad,”** and referenced reporting and legal action describing tooling and templates used to scale these lures. Separately, reporting on **AI deepfake impersonation** shows similar social-engineering dynamics outside of “crypto-only” contexts, including deepfakes impersonating religious figures to solicit donations and promote fraudulent crypto-related offers, reinforcing the report’s broader finding that **AI-assisted impersonation** is increasing the reach and credibility of scams.
Jun 29, 2026
INTERPOL’s **African Cyberthreat Assessment Report 2026** says artificial intelligence is now linked to **55% of reported cybercrime across Africa**, helping criminals scale scams, credential harvesting, and automated social engineering while making attacks harder to detect. The report says cybercrime losses on the continent rose from **$192 million** in 2024 to **$484 million**, with major threats including **business email compromise**, romance scams, **deepfake-enabled sextortion**, synthetic identity fraud, ransomware, and pervasive **mobile money fraud**; nearly all surveyed countries reported mobile-money-related abuse, and **72%** said scam centers were operating within their borders. INTERPOL described the threat landscape as an industrialized, cross-border ecosystem tied in some cases to **human trafficking** and transnational organized crime, with regional patterns ranging from mobile money fraud and ransomware in East Africa to prolific BEC and romance scams in Central and West Africa. The agency said weak real-time information sharing among banks, telecoms, and law enforcement is being exploited by criminals, but noted some defensive gains: **17 countries** updated cybercrime laws, Tanzania reported a **19%** drop in fraud attempts after stricter SIM registration enforcement, Senegal launched an online reporting platform for digital violations affecting children, and four major cybercrime operations in 2025 led to **more than 1,500 arrests** and **over $100 million recovered**.
Aug 5, 2026