The New Frontier of Cybercrime
When Sri Lankan police descended on a seaside hotel in Chilaw earlier this month, they encountered a scene that has become increasingly familiar across South Asia. Inside the building, authorities detained 152 foreign nationals, mostly Chinese nationals, operating an elaborate online fraud syndicate. The raid yielded 143 laptops, 120 desktop computers, and 370 mobile phones, according to police spokesman Frederick Wootler. Two Chinese nationals attempted to flee during the operation and sustained injuries requiring hospitalization.
This single raid represents something far more significant than an isolated law enforcement success. It signals a fundamental shift in the geography of transnational cybercrime. The sprawling scam compounds that have plagued mainland Southeast Asia since the COVID-19 pandemic are now expanding into new territories, with Sri Lanka emerging as a primary destination for operations displaced by intensifying enforcement pressure in Cambodia and Myanmar.
The numbers reveal a startling acceleration. During the first three months of 2026, arrests related to scam centre operations in Sri Lanka already exceeded fifty percent of the total recorded throughout all of 2025. If current trends persist, annual arrests could surpass six hundred cases, roughly double the figures from either 2024 or 2025. These statistics likely represent only the visible portion of a much larger criminal iceberg, as they do not account for cases handled quietly by immigration authorities or those that remain undetected.
Exodus from Southeast Asian Scam Hubs
The migration of scam operations to Sri Lanka stems directly from unprecedented enforcement actions across Southeast Asia. In Cambodia, authorities launched a massive crackdown in February 2026, raiding 2,709 locations suspected of hosting online fraud operations and identifying more than 21,000 foreign nationals as potential suspects. The campaign targeted the notorious compounds that have operated with varying degrees of official acquiescence for years, generating an estimated $12.5 billion annually, or roughly half of Cambodia’s formal gross domestic product, according to the United States Institute of Peace.
Simultaneously, the Cambodian-Chinese joint operation against Prince Group has escalated dramatically. Chen Zhi, the founder and chairman of the conglomerate and a former personal advisor to Cambodian Senate President Hun Sen, was arrested in Cambodia on January 6 and swiftly extradited to China to face investigation over large-scale online fraud and related crimes. In October 2025, the United States government seized more than fourteen billion dollars in cryptocurrency assets from the group, followed by nearly seven hundred million dollars frozen in Hong Kong, Singapore, South Korea, Thailand, and Taiwan the following month.
These enforcement milestones, while significant, have triggered a predictable evolutionary response from criminal networks. Rather than dismantling the operations, the pressure has forced them to fragment and relocate. Operation owners have demonstrated consistent capacity to adapt by restructuring into smaller, more distributed formations and moving across borders when enforcement builds. The Asia Foundation has tracked increasing references to Sri Lanka on social media platforms used by journalists and commentators monitoring the Cambodia situation, noting the movement of groups and individuals out of Southeast Asia with growing frequency.
The Machinery of Forced Criminality
Behind the technological infrastructure seized in raids like the one in Chilaw lies a brutal system of human exploitation. A February 2026 report from the UN Human Rights Office documents the experiences of hundreds of thousands of people trafficked from dozens of countries into working for entrenched scam operations. The report details instances of torture, sexual abuse and exploitation, forced abortions, food deprivation, and solitary confinement, based on interviews with survivors originating from Bangladesh, China, India, Myanmar, Sri Lanka, South Africa, Thailand, Vietnam, and Zimbabwe.
The operations described in the UN report range from immense compounds resembling self-contained towns spanning over five hundred acres to smaller, more mobile units like those now appearing in Sri Lankan hotels and guesthouses. Survivors described heavily fortified multi-storey buildings with barbed wire-topped high walls, guarded by armed security personnel. Those who failed to meet monthly scamming targets faced immersion in water containers, known as water prisons, for hours at a time.
UN Human Rights Chief Volker Türk characterized the conditions in stark terms following the report’s release.
The litany of abuse is staggering and at the same time heart-breaking. Yet, rather than receiving protection, care and rehabilitation as well as the pathways to justice and redress to which they are entitled, victims too often face disbelief, stigmatization and even further punishment.
The International Organization for Migration has provided direct assistance to forty-one survivors trafficked for forced labor in Southeast Asian Special Economic Zones between January and September 2023, validating the migration dimensions of the crisis. Workers are typically lured through fraudulent job advertisements promising positions in customer service, hospitality, or technology, only to find themselves imprisoned and forced to perpetrate online fraud ranging from impersonation scams to romantic schemes known as pig butchering.
Why Sri Lanka Attracts Scam Networks
Several converging factors have made Sri Lanka an attractive destination for displaced scam operations. The country recorded record tourist arrivals in 2025 and established an ambitious goal of three million arrivals for 2026. To achieve this target, the government has implemented a simplified tourist visa regimen that inadvertently lowers barriers for criminal groups seeking to move personnel across borders quickly.
Currently, citizens of China, India, Russia, Thailand, Indonesia, Malaysia, and Japan can enter Sri Lanka on free tourist visas, with authorities considering extending this scheme to thirty-nine additional countries. Thirty-day tourist visas issued upon arrival can be extended for up to six months, providing ample time for operational establishment. Chinese authorities have acknowledged this dynamic, noting that Sri Lanka’s advanced telecommunications infrastructure, strategic geographical location, relatively lenient visa policies, and hospitable population have made the country a target for transnational fraud groups.
The physical infrastructure necessary for these operations exists abundantly across the island. Hotels, guesthouses, and apartments provide usable operating environments for the smaller, more mobile model that is displacing the large fixed compounds of the earlier Cambodian and Myanmar era. Strong digital connectivity ensures that operational requirements can be met from most parts of the island, while the dispersed nature of smaller groups allows them to scatter when they anticipate enforcement activity, reducing exposure in ways that large compounds never could.
This mobility has already manifested in operational patterns. Following the coastal raid in Chilaw, authorities conducted a separate operation in Anuradhapura, a semi-urban city in the north-central province, detaining 134 foreign nationals. The suspects were found operating across several guest houses in the Anuradhapura and Mihintale areas, demonstrating that operations are extending further inland and into less conspicuous locations where community tip-offs are harder to generate and specialist response capability is thinner.
The Mechanics of Modern Fraud
The fraud schemes perpetrated from these relocated centres have evolved in sophistication and scope. Pig butchering scams, named for the agricultural metaphor of fattening livestock before slaughter, involve perpetrators building long-term romantic relationships with victims to gain trust before introducing fraudulent investment opportunities. These schemes, combined with cryptocurrency-related investment fraud targeting overseas victims, generate an estimated forty billion dollars annually in losses worldwide.
Former workers describe systematic methodologies. The process begins with creating friendships online and building trust through shared interests and backgrounds. The next step involves disclosing wealth and inviting victims to investment groups filled with fake accounts claiming false success. Once victims are induced to invest, mentors guide them onto scam platforms that replicate legitimate trading companies like Amazon or Lazada. Initial small returns build confidence, leading to larger investments that ultimately disappear when the scammers sever contact.
Da Long, a former specialist who worked nearly four years inside Cambodia’s online scam industry before leaving in mid-2024, described the industrial scale of the operations. In just one month, he defrauded six thousand five hundred clients who invested money in fake loan services. Some victims, intending to borrow only twenty-five hundred dollars, potentially lost thousands more through endless cycles of manufactured errors and additional payment demands. His company earned approximately eighteen million dollars in a single month.
Legal Gaps and Enforcement Limitations
Sri Lanka faces substantial challenges in addressing these new forms of criminality through existing legal frameworks. While the country possesses relevant legislation, including provisions in the penal code addressing trafficking, the Computer Crimes Act, and a recent Personal Data Protection Act, these instruments do not adequately address the specific crimes associated with scam centre operations. Pig butchering schemes and cryptocurrency-related investment fraud targeting overseas victims are not well captured by existing statutes.
The predominant response thus far has been deportation rather than prosecution. In one recent case, one hundred twenty-five Chinese nationals detained in Anuradhapura were deported following discussions with the Chinese government, which sent a special aircraft and a team of officials including a doctor to oversee the process. While a new cybercrime investigation bureau has been established within the police and authorities are seeking to strengthen mechanisms to prosecute operators of illegal scam centres, the legal infrastructure remains underdeveloped for this specific threat.
UN officials have emphasized that effective responses need to be centred in human rights law and standards. This means explicitly recognizing forced criminality within anti-trafficking laws and guaranteeing the non-punishment principle for victims of trafficking. Victims require coordinated timely rescue operations, respect for the principle of non-refoulement, and available support mechanisms to ensure trauma rehabilitation and address risks of reprisals or re-trafficking.
International Dimensions and Cooperation
The scope of the crisis extends far beyond Sri Lanka’s borders, requiring coordinated international response. INTERPOL’s Operation Storm Makers II, conducted in October 2023, revealed evidence that the crime trend is expanding globally. Following five months of investigative coordination, law enforcement from participating countries carried out more than two hundred seventy thousand inspections at four hundred fifty human trafficking and migrant smuggling hotspots.
The operation resulted in the arrest of two hundred eighty-one individuals for offenses including human trafficking, passport forgery, corruption, and telecommunications fraud, while rescuing one hundred forty-nine human trafficking victims. Participating countries included Sri Lanka alongside twenty-six other nations spanning Africa, Asia, and the Americas. The investigation uncovered cases in which forty Malaysian victims were lured to Peru and Ugandan citizens diverted through Dubai to Thailand and then Myanmar.
Bilateral cooperation between China and Sri Lanka has intensified following the recent raids. Chinese authorities have expressed full support for Sri Lankan enforcement actions while ensuring the protection of legitimate rights in accordance with law. This cooperation builds upon previous joint efforts that resulted in the arrest and repatriation of several Chinese nationals in 2024. However, the transnational nature of these networks means that enforcement in one location merely displaces rather than eliminates the criminal infrastructure.
Jacob Sims, a fellow at Harvard University’s Asia Center, observed that the crackdowns, while real, appear politically motivated to mitigate reputational, legal, and financial risks arising from sustained official involvement in the industry. He noted that increasingly sophisticated propaganda by scam-sheltering states, along with straightforward displacement of operations to other countries, plays a key role in the industry’s persistence. Sims identified Sri Lanka as reportedly emerging as the next relocation destination for scam workers displaced from Cambodia.
The Essentials
- Sri Lankan police arrested 152 foreign nationals, mostly Chinese, in a raid on a hotel in Chilaw, seizing hundreds of computers and phones used for online fraud operations.
- Scam centre arrests in Sri Lanka have accelerated dramatically in early 2026, with first-quarter arrests already exceeding fifty percent of the 2025 total, suggesting annual figures could double previous years.
- The expansion follows intensified enforcement in Cambodia, where authorities raided 2,709 locations in February 2026 and arrested Prince Group chairman Chen Zhi, triggering displacement of operations rather than their dismantlement.
- A UN Human Rights Office report documents torture, sexual exploitation, forced abortions, and water prisons used against trafficking victims forced to work in scam centres across Southeast Asia and now Sri Lanka.
- Sri Lanka’s simplified tourist visa policies for citizens of China, India, Russia, Thailand, Indonesia, Malaysia, and Japan, plus strong digital infrastructure, create conditions attractive to mobile scam operations.
- Legal frameworks in Sri Lanka inadequately address pig butchering scams and crypto fraud, resulting in a predominant response of deportation rather than prosecution of foreign operators.
- INTERPOL operations reveal the globalization of the threat, with victims trafficked from Africa, Asia, and South America to work in forced criminality across multiple continents.
