Law enforcement agencies across Southeast Asia are mobilizing a unified response to the growing menace of transnational online scam networks, recognizing that fragmented approaches have failed to contain criminal operations that generate billions in illicit proceeds. Speaking at a workshop in Semarang, Indonesia this month, ASEAN police officials acknowledged that cyber-criminals have become increasingly mobile, shifting their infrastructure and personnel to exploit regulatory gaps and geographic advantages across the region. The problem has evolved far beyond isolated criminal enterprises; it now represents a sophisticated, multinational industry that threatens financial security and social stability throughout ASEAN member states.
The most visible manifestation of this threat has been the emergence of scam hubs in Cambodia and Myanmar, where large concentrations of foreign workers and local operatives have been recruited into sprawling operations. These centers function as industrial-scale facilities, with workers organized into hierarchical structures handling different phases of fraud schemes—from victim targeting and social engineering to money laundering and cryptocurrency conversion. Cambodia alone has detained approximately 200,000 illegal workers implicated in online scam activities, suggesting the scale of involvement in countries that have become synonymous with this crime. Myanmar's response has been more aggressive, with authorities deporting roughly 70,000 foreign nationals engaged in illegal activities between 2023 and 2025, while demolishing dozens of buildings that served as operational bases for scam syndicates.
Intelligence assessments from regional security agencies indicate that criminal networks are deliberately relocating operations to secondary destinations as enforcement pressure mounts in traditional hotspots. Laos and Sri Lanka have emerged as attractive alternative locations, offering combinations of lenient visa regimes, established internet infrastructure, limited regulatory oversight, and banking systems vulnerable to money laundering. This geographic mobility underscores a critical vulnerability in ASEAN's response architecture—individual countries working in isolation cannot effectively counter threats that deliberately exploit the region's porous borders and varying levels of law enforcement capacity. The migration of scam centers to new locations also suggests these are not spontaneous criminal undertakings but rather organized enterprises with sufficient resources and expertise to establish operations in unfamiliar jurisdictions.
The United States government has provided sobering evidence of the financial damage inflicted by these networks. American citizens lost a minimum of US$10 billion (approximately RM40 billion) to scam operations based in Southeast Asia during 2024 alone, a figure that likely underestimates total losses given that many victims never report fraud to authorities. This American toll represents only one segment of the global victim population; similar patterns are evident across Europe, Australia, and other developed economies where Southeast Asian scam centers actively target residents through romance frauds, investment schemes, job recruitment deceptions, and cryptocurrency swindles. The sheer magnitude of financial extraction illustrates why these networks have become so attractive to criminals—the profit-to-risk ratio, particularly when operating from jurisdictions with weak enforcement, remains extraordinarily favorable.
Recognizing that unilateral actions have proven insufficient, ASEANAPOL convened a specialized training curriculum development workshop to forge operational consensus among member states' police forces. The June workshop in Semarang brought together law enforcement representatives to establish common standards and methodologies for combating online fraud and cyber-enabled crimes. This collaborative approach represents a significant institutional shift, moving beyond the symbolic cooperation statements that have characterized previous regional initiatives. The organization identified seven critical operational domains requiring enhanced capability: intelligence-led investigation techniques, sophisticated financial tracing methodologies, digital evidence collection standards, online fraud analysis frameworks, cross-border coordination protocols, victim identification and protection procedures, and mechanisms for partnering with private sector entities.
Financial investigation capabilities have emerged as a particular focus because scam syndicates' ultimate objective is asset movement and money laundering rather than data theft or other cybercriminal objectives. By developing specialized training in financial investigations and asset tracing, ASEAN police forces aim to disrupt the profit flow that incentivizes scam operations. Modern scam networks employ multi-layered money movement strategies involving bank accounts, cryptocurrency exchanges, underground banking networks, and trade-based laundering schemes that deliberately fragment transaction trails across multiple jurisdictions. Investigators trained to follow these complex financial pathways can potentially identify key nodes in criminal infrastructure and apply pressure on financial institutions, money exchange services, and cryptocurrency platforms that facilitate illicit fund movements.
The digital evidence dimension reflects the inherent nature of online scams, which leave distinctive forensic signatures across multiple technical platforms. Investigators require standardized approaches to collecting, preserving, and analyzing evidence from social media platforms, messaging applications, email systems, payment gateways, and cloud-based services. ASEAN member states have historically operated with varying standards for digital evidence handling, creating opportunities for criminals to exploit jurisdictional inconsistencies. A unified regional framework for digital evidence collection establishes common baselines and mutual recognition standards that will facilitate smoother cross-border investigations and increase the evidentiary weight of transnational case files.
Victim identification and protection has become increasingly recognized as essential to dismantling scam operations. Many victims are reluctant to report fraud due to shame, fear of secondary victimization, or belief that authorities cannot help them recover losses. By developing victim-centered protocols, ASEAN police forces can build community trust and generate intelligence leads from victims who understand their attackers' operational methods and infrastructure. Protection protocols are equally critical because victims who cooperate with law enforcement may face intimidation, threats, or coercion from criminal networks attempting to prevent testimony. Regional coordination in victim protection requires mechanisms to ensure that victims in one jurisdiction receive support even when investigators operate from neighboring countries.
Public-private cooperation represents another frontier that ASEAN police forces are attempting to formalize. Technology companies, financial institutions, telecommunications providers, and cryptocurrency exchanges possess real-time visibility into scam operations that law enforcement cannot independently access. These organizations control the technical infrastructure through which scams are perpetrated and funds are moved, giving them significant leverage to disrupt criminal activities. Structured partnerships with vetted private sector entities can accelerate threat intelligence sharing, enable faster identification of compromised accounts, and facilitate rapid takedown of fraudulent platforms and accounts. However, such partnerships require clear legal frameworks, confidentiality protections, and mechanisms to prevent private sector entities from exceeding their appropriate authority.
Sri Lanka's experience this year demonstrates both the scale of the problem and the potential impact of aggressive enforcement. Sri Lankan police arrested nearly 700 individuals involved in cybercrime activities during 2024, suggesting both the prevalence of scam infrastructure in the island nation and the increased enforcement capacity being directed toward these crimes. These arrests represent actual prosecution potential rather than mere detentions, implying that Sri Lankan authorities are building criminal cases with sufficient evidentiary strength to withstand courtroom scrutiny. As word spreads that jurisdictions are taking enforcement seriously, criminals may be incentivized to relocate to locations perceived as softer enforcement environments.
The fundamental challenge facing ASEAN's collective response remains the structural incentives that make scam operations so attractive to organized crime groups. As long as Southeast Asian jurisdictions offer combinations of lenient visa policies, minimal regulatory oversight, reliable infrastructure, and banking systems vulnerable to money laundering, criminal enterprises will view the region as a desirable operational location. The training curriculum development and intelligence-sharing initiatives represent necessary but insufficient responses to threats that exploit geography, sovereignty, and regulatory variation. True suppression of scam hubs will require more aggressive steps: harmonized visa and immigration policies that prevent known criminals from establishing operations, enhanced banking sector oversight with mandatory reporting of suspicious transactions, infrastructure controls limiting bandwidth and telecommunications resources available to known scam centers, and mutual legal assistance treaties that enable rapid extradition and prosecution of major operatives.
For Malaysian readers and other Southeast Asian citizens, the expansion and relocation of scam hubs carries direct implications. As criminal networks establish footholds in neighboring jurisdictions, the risk of Malaysian victims increases because syndicates often target diaspora populations and conduct recruitment among Southeast Asian communities regardless of where their operational centers are physically located. The enhanced intelligence-sharing and cross-border cooperation that ASEAN is now formalizing may eventually improve Malaysia's investigative capacity and victim recovery outcomes. However, the persistent migration of scam centers to new locations suggests that these networks retain significant organizational resilience and will likely continue adapting faster than law enforcement can respond through conventional means.
