Loading story…
A new UNODC assessment says transnational scam networks rooted in Southeast Asia have grown into a global organized-crime force, defrauding victims across East Asia, Southeast Asia, Australia, and New Zealand of an estimated $88 billion to $114.1 billion in 2025. The report describes a sophisticated ecosystem dominated by Chinese-origin criminal groups that extends beyond cyber-enabled fraud into cryptocurrency-based settlement networks, criminal infrastructure, trafficking of workers from more than 80 countries, and other illicit goods and services. It identifies cryptocurrency, encrypted messaging platforms such as Telegram, generative AI including deepfakes, and satellite internet services such as Starlink as major enablers helping syndicates evade disruption and scale operations.
Regional enforcement has intensified, but authorities and researchers say it has largely displaced rather than dismantled the scam industry. China has expanded charges against alleged Cambodian scam kingpin Chen Zhi, who was deported to China and could face the death penalty, while also executing members of another criminal group tied to scam operations. Myanmar’s junta-backed legislation has introduced severe penalties for online scam activity involving torture or coercion, yet operations are reportedly fragmenting from large compounds into smaller sites in Myanmar and other resilient hubs in Cambodia, Laos, and Myanmar, where corruption, special economic zones, and cross-border protection networks continue to sustain the trade.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
8 events from the most recent confirmed update back to the earliest known activity.
Thailand increased scrutiny of high-volume Tether transactions as part of a broader campaign against China-linked criminal networks and scam-related money laundering in Southeast Asia. Bank of Thailand Governor Vitai Ratanakorn said the central bank would audit large USDT transactions, citing heavy foreign participation in local USDT selling.
A 2026 UN Office on Drugs and Crime assessment concluded that Southeast Asian cybercriminal syndicates had become a global organized-crime force centered on industrialized cyber-enabled fraud. The report said enforcement actions had mostly displaced operations rather than reduced them and identified cryptocurrency, encrypted messaging, generative AI, and satellite Internet as major enablers.
The Diplomat reported that Cambodian tycoon Chen Zhi was deported from Cambodia to China in January as part of China's escalating crackdown on scam-compound operators in Southeast Asia. He later faced expanded charges in China that could carry the death penalty.
A newly released UNODC report said victims across East Asia, Southeast Asia, Australia, and New Zealand were defrauded of up to $114.1 billion in 2025 by transnational scam networks. The assessment described a sophisticated criminal ecosystem dominated by Chinese-origin organized crime groups.
The U.S. Department of Justice announced that a Chinese national was sentenced to prison for his role in a cryptocurrency scam that targeted Americans. This adds a separate U.S. judicial enforcement action tied to transnational scam activity.
Myanmar enacted junta-backed legislation providing severe penalties, including possible death sentences, for online scam operations involving torture or coercion. The measure was presented as part of wider regional enforcement pressure on scam compounds.
The article says China executed 11 members of the Ming family criminal group as part of its broader enforcement campaign against scam-compound operators. This was cited as evidence of Beijing's escalating legal response to regional scam networks.
Chinese authorities added an intentional bodily injury charge against Chen Zhi, while dropping a prior charge of concealing criminal proceeds and retaining a copyright infringement charge. The expanded case increased the possibility that he could face the death penalty.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
6 references tracked. Mallory keeps watching after this page renders.
thediplomat.com
Open sourcescworld.com
Open sourcedarkreading.com
Open sourcethediplomat.com
Open sourcethediplomat.com
Open sourcejustice.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Authorities and policy groups are intensifying efforts against **transnational online scam operations** centered in Southeast Asia, particularly Cambodia, where criminal networks have been linked to fraud compounds, human trafficking, and abuse of workers. Reporting highlights recent enforcement actions including Cambodia's extradition of **Chen Zhi** to China, a new U.S. executive order targeting cyber-enabled fraud, and a Thai-led operation with international partners and **Meta** that removed **150,000** fake profiles and arrested **21** suspects tied to scam activity. The broader picture is that scam syndicates are adapting quickly, shifting locations, fragmenting into smaller cells, and exploiting gaps between law enforcement, regulators, and private-sector platforms. On-the-ground reporting from Cambodia describes the human cost inside alleged scam compounds, including forced labor, torture, and coercion of workers recruited under false pretenses. One former guard said he was ordered to use electric shocks and beat Chinese workers inside a heavily secured compound on Bokor Mountain, even as publicized crackdowns were underway elsewhere. That account reinforces concerns that abrupt enforcement alone can displace operations while leaving trafficked workers vulnerable and limiting intelligence collection on how the scam ecosystem functions. A separate report on fake shipment-tracking phishing in the Middle East and Africa is **not** part of the same event, as it covers a different scam trend and geography rather than the Cambodia-centered scam-compound crackdown.
Jun 29, 2026
The United States government has established a dedicated Scam Center Strike Force to target large-scale cyber scam operations based in Southeast Asia, which have defrauded Americans of at least $10 billion in 2024 alone. This multi-agency task force, comprising the Department of Justice, Treasury, FBI, Secret Service, and State Department, will focus on investigating, disrupting, and prosecuting the leaders and infrastructure behind these scam centers, particularly in Burma (Myanmar), Cambodia, and Laos. The operations often involve romance scams, fraudulent investment schemes, and cryptocurrency-related fraud, with many scam centers relying on forced labor and human trafficking to sustain their activities. In conjunction with the task force's launch, the US Treasury's Office of Foreign Assets Control (OFAC) announced sanctions against the Democratic Karen Benevolent Army (DKBA), an armed group supporting scam compounds in Myanmar, as well as several companies in Thailand linked to Chinese organized crime. The US has already seized over $410 million in cryptocurrency assets and is pursuing further forfeitures. These actions build on previous sanctions against other transnational criminal organizations, such as the Prince Group, and reflect a broader US strategy to dismantle the infrastructure enabling large-scale cyber fraud and to provide restitution and education to victims.
Jun 29, 2026
INTERPOL and industry reporting warn that transnational fraud networks are becoming more sophisticated and more profitable by combining **AI-enabled deception**, crypto abuse, and organized scam-center operations. INTERPOL’s 2026 Global Financial Fraud Threat Assessment says AI-enhanced fraud is **4.5 times** more profitable than traditional methods and links financial fraud to broader criminal ecosystems including cybercrime, human trafficking, and terrorist financing. Researchers and investigators described tools such as **ProKYC** that can forge identity documents, generate deepfaked liveness checks, create selfie-with-ID images, and tailor verification artifacts to defeat KYC controls, while a cybercrime forum vendor separately advertised fraudulently verified accounts on exchanges including `Bitget`, `Bitvavo`, and `Kraken` with European IBAN and SEPA capabilities, underscoring how criminals are abusing rather than breaching financial platforms. Authorities are responding with wider enforcement actions against the infrastructure behind these scams. In India, Goa police arrested seven suspects, questioned 24 others, raided more than 40 locations across 11 states, and identified **313 suspected mule accounts** in an investigation spanning investment scams, sextortion, parcel fraud, fake hotel bookings, and so-called digital arrest schemes. In Cambodia, officials said raids across at least five provinces led to more than **1,000 arrests** tied to cybercrime and online scam compounds, part of a broader regional crackdown on an industry the UN says generates billions of dollars annually and has been linked to trafficked workers and abuse. INTERPOL said fraud-related Notices and Diffusions have risen **54% since 2024**, with support in more than **1,500** transnational fraud cases involving **$1.1 billion** in losses, and it is launching **Operation Shadow Storm** to target scam-centre-linked fraud, cybercrime, and human trafficking.
Aug 12, 2026