Loading story…
Authorities in South Korea have intensified efforts to combat cybercrime scam factories operating in Southeast Asia, particularly in Cambodia, Laos, and Burma. These scam centers, often run as forced-labor camps, have been responsible for a surge in online fraud targeting victims worldwide and have ensnared hundreds of thousands of workers, including an estimated 1,000 South Koreans. Following the gruesome murder of a South Korean student lured to a Cambodian scam center, the South Korean government issued a 'code black' travel ban for certain regions and is preparing sanctions against groups operating these facilities. The scam operations generate tens of billions of dollars annually and have prompted regional governments to increase raids and legal actions against the perpetrators.
In a related development, the Korean National Police Agency arrested nearly 50 South Koreans repatriated from Cambodia on suspicion of participating in online scam operations. Investigations are ongoing to determine whether these individuals were coerced or joined the scam networks voluntarily, with reports of some returnees being beaten and forced to work in the scam centers. The case has led to public calls for stronger protections for South Korean citizens against trafficking into overseas scam operations, as officials estimate that many more remain trapped in such facilities in Cambodia.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Regional authorities in Asia were reported to be increasing legal and enforcement pressure on cybercrime 'scam factories,' reflecting a broader multinational effort against online fraud operations. This development contextualized South Korea's arrests as part of a wider campaign.
South Korean authorities arrested suspects who had been repatriated in connection with online scam operations. The reporting indicates this was part of a broader regional crackdown on cybercrime and scam compounds.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Authorities and policy groups are intensifying efforts against **transnational online scam operations** centered in Southeast Asia, particularly Cambodia, where criminal networks have been linked to fraud compounds, human trafficking, and abuse of workers. Reporting highlights recent enforcement actions including Cambodia's extradition of **Chen Zhi** to China, a new U.S. executive order targeting cyber-enabled fraud, and a Thai-led operation with international partners and **Meta** that removed **150,000** fake profiles and arrested **21** suspects tied to scam activity. The broader picture is that scam syndicates are adapting quickly, shifting locations, fragmenting into smaller cells, and exploiting gaps between law enforcement, regulators, and private-sector platforms. On-the-ground reporting from Cambodia describes the human cost inside alleged scam compounds, including forced labor, torture, and coercion of workers recruited under false pretenses. One former guard said he was ordered to use electric shocks and beat Chinese workers inside a heavily secured compound on Bokor Mountain, even as publicized crackdowns were underway elsewhere. That account reinforces concerns that abrupt enforcement alone can displace operations while leaving trafficked workers vulnerable and limiting intelligence collection on how the scam ecosystem functions. A separate report on fake shipment-tracking phishing in the Middle East and Africa is **not** part of the same event, as it covers a different scam trend and geography rather than the Cambodia-centered scam-compound crackdown.
Jun 29, 2026
A new **UNODC assessment** says transnational scam networks rooted in Southeast Asia have grown into a global organized-crime force, defrauding victims across East Asia, Southeast Asia, Australia, and New Zealand of an estimated **$88 billion to $114.1 billion in 2025**. The report describes a sophisticated ecosystem dominated by Chinese-origin criminal groups that extends beyond cyber-enabled fraud into cryptocurrency-based settlement networks, criminal infrastructure, trafficking of workers from more than 80 countries, and other illicit goods and services. It identifies **cryptocurrency**, encrypted messaging platforms such as **Telegram**, **generative AI** including deepfakes, and satellite internet services such as **Starlink** as major enablers helping syndicates evade disruption and scale operations. Regional enforcement has intensified, but authorities and researchers say it has largely **displaced rather than dismantled** the scam industry. China has expanded charges against alleged Cambodian scam kingpin **Chen Zhi**, who was deported to China and could face the death penalty, while also executing members of another criminal group tied to scam operations. Myanmar’s junta-backed legislation has introduced severe penalties for online scam activity involving torture or coercion, yet operations are reportedly fragmenting from large compounds into smaller sites in Myanmar and other resilient hubs in **Cambodia, Laos, and Myanmar**, where corruption, special economic zones, and cross-border protection networks continue to sustain the trade.
Jul 31, 2026
The United States government has established a dedicated Scam Center Strike Force to target large-scale cyber scam operations based in Southeast Asia, which have defrauded Americans of at least $10 billion in 2024 alone. This multi-agency task force, comprising the Department of Justice, Treasury, FBI, Secret Service, and State Department, will focus on investigating, disrupting, and prosecuting the leaders and infrastructure behind these scam centers, particularly in Burma (Myanmar), Cambodia, and Laos. The operations often involve romance scams, fraudulent investment schemes, and cryptocurrency-related fraud, with many scam centers relying on forced labor and human trafficking to sustain their activities. In conjunction with the task force's launch, the US Treasury's Office of Foreign Assets Control (OFAC) announced sanctions against the Democratic Karen Benevolent Army (DKBA), an armed group supporting scam compounds in Myanmar, as well as several companies in Thailand linked to Chinese organized crime. The US has already seized over $410 million in cryptocurrency assets and is pursuing further forfeitures. These actions build on previous sanctions against other transnational criminal organizations, such as the Prince Group, and reflect a broader US strategy to dismantle the infrastructure enabling large-scale cyber fraud and to provide restitution and education to victims.
Jun 29, 2026