Loading story…
The US Department of Justice has issued seizure warrants targeting Starlink satellite internet terminals allegedly used by scam compounds in Myanmar, which are implicated in large-scale crypto fraud and money laundering operations targeting US citizens. According to affidavits from FBI investigators, Starlink devices played a substantial role in enabling these scam operations by providing reliable internet connectivity to compounds in the Three Pagodas Pass area, with dozens of terminals observed on the roofs of scam centers controlled by criminal organizations. The warrants direct SpaceX to disable service to the identified devices and accounts, aiming to disrupt the technical infrastructure supporting these transnational criminal activities.
These actions are part of a broader law enforcement initiative to combat "pig butchering" scams and other crypto-related frauds emanating from Southeast Asia, which have resulted in billions of dollars in losses and affected thousands of victims worldwide. The scale and sophistication of these scam compounds, as well as the use of advanced technology like Starlink for operational resilience, highlight the challenges faced by authorities in dismantling such networks. The DOJ's move to seize internet infrastructure marks a significant escalation in efforts to disrupt the technical enablers of organized cybercrime targeting US and global victims.
See the reporting duties and controls this puts on the clock.
4 events from the most recent confirmed update back to the earliest known activity.
Supporting affidavits described how the alleged scam brand 'Wealthob' used a 'wrong number' social-engineering approach, moving victims to WhatsApp or Telegram before promoting fraudulent crypto investments. Investigators said records from SpaceX and Meta/WhatsApp linked the operation's activity to specific Starlink service used at the scam compounds.
US law enforcement obtained two seizure warrants and supporting affidavits targeting Starlink satellite internet terminals and associated accounts allegedly used at scam compounds near Three Pagodas Pass/Payathonzu and the Tai Chang compound. The warrants argued that identified terminals should be disabled or disconnected because they were allegedly facilitating wire fraud and money laundering against US victims.
SpaceX said it proactively disabled more than 2,500 Starlink devices in the vicinity of scam compounds in Myanmar. The company also reported that Starlink usage in Myanmar had declined afterward.
The US Justice Department established the District of Columbia Scam Center Strike Force to target industrialized cryptocurrency scam operations in Southeast Asia. According to the report, the initiative was already operational and had seized roughly $400 million in cryptocurrency tied to scams.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
SpaceX has disabled over 2,500 Starlink satellite internet terminals that were being used to support scam compounds in Myanmar, following mounting pressure from politicians and anti-human trafficking advocates. The company stated that it proactively identified and shut down the devices in the vicinity of suspected scam centers, which had relied on Starlink's global coverage to maintain operations in areas where traditional telecom services are restricted or monitored. This action comes after Myanmar authorities raided a major online fraud operation near the Thai border, seizing dozens of Starlink terminals and detaining thousands of individuals linked to cyber-fraud and human trafficking activities. The scam compounds, often controlled by Chinese-speaking criminal syndicates, have used Starlink to facilitate a range of online fraud schemes, including crypto investment scams and romance frauds, targeting victims worldwide. The influx of black market Starlink terminals into Southeast Asia had allowed these operations to circumvent local restrictions, prompting calls from regional governments and international lawmakers for SpaceX to intervene. SpaceX emphasized its commitment to complying with local laws and working with law enforcement to prevent the misuse of its technology for criminal purposes.
Jun 29, 2026
The United States government has established a dedicated Scam Center Strike Force to target large-scale cyber scam operations based in Southeast Asia, which have defrauded Americans of at least $10 billion in 2024 alone. This multi-agency task force, comprising the Department of Justice, Treasury, FBI, Secret Service, and State Department, will focus on investigating, disrupting, and prosecuting the leaders and infrastructure behind these scam centers, particularly in Burma (Myanmar), Cambodia, and Laos. The operations often involve romance scams, fraudulent investment schemes, and cryptocurrency-related fraud, with many scam centers relying on forced labor and human trafficking to sustain their activities. In conjunction with the task force's launch, the US Treasury's Office of Foreign Assets Control (OFAC) announced sanctions against the Democratic Karen Benevolent Army (DKBA), an armed group supporting scam compounds in Myanmar, as well as several companies in Thailand linked to Chinese organized crime. The US has already seized over $410 million in cryptocurrency assets and is pursuing further forfeitures. These actions build on previous sanctions against other transnational criminal organizations, such as the Prince Group, and reflect a broader US strategy to dismantle the infrastructure enabling large-scale cyber fraud and to provide restitution and education to victims.
Jun 29, 2026
U.S. authorities and private-sector partners disrupted transnational scam compounds in Southeast Asia that were tied to **pig-butchering cryptocurrency fraud**, broader confidence scams, and human trafficking networks used to supply forced labor. Reporting says the **Scam Center Strike Force**, led by the U.S. Attorney’s Office for the District of Columbia with support from the DOJ, FBI, Secret Service, Treasury, and State Department, helped neutralize **1.4 million malicious accounts**, disable supporting infrastructure, and seize more than **500 fake investment domains**. Meta, Microsoft, the U.S. Department of Justice, and other partners were also identified as participants in the disruption effort. The campaign was paired with financial and enforcement actions aimed at the ecosystem enabling the fraud. According to public reporting, U.S. authorities froze more than **$832 million** in cryptocurrency and seized major Telegram recruitment channels allegedly used to traffic workers into scam compounds. Treasury also announced sanctions against a Burma-based armed group and associated companies linked to organized crime targeting Americans, underscoring a broader U.S. effort to pressure entities accused of protecting or facilitating the scam-center industry.
Jul 18, 2026