• Criminal networks favour SL due to ease of getting tourist visas and limited regulation on SIM cards and internet connections

Sri Lanka is emerging as a hub for transnational cybercrime, after a crackdown in South-East Asia (SEA) pushed Chinese-run criminal networks to relocate their vast scam operations.

Police Media Spokesperson, Assistant Superintendent of Police and attorney Fredrick U. Wootler said that the country is witnessing an “alarming increase of cybercrimes” perpetrated by people entering the country as tourists, and then illegally setting up scam operations targeting people across the world.

Authorities have carried out more than a dozen raids on alleged scam operations in the country since the beginning of the year (2026), arresting and deporting almost 700 foreigners accused of involvement.

On 11 June, the Police carried out its latest raid in the commercial capital Colombo where they detained 18 Chinese citizens and one from Laos. At the site of the raid, the scammers had left behind dozens of fake documents, from a falsified legal certification, fake US Treasury documents and fake company registration, stating that their company was worth US $ 10 billion. An officer from the Crime Investigation Bureau who carried out the raid said that they had also discovered 62 passports, mostly for Chinese nationals. “They had phones, laptops, pen drives, random-access memories, a processor, a stamp to forge documents, and so many forged documents. One certificate, which we found was also forged to show that they were a business registered in the US, was framed and hung on the wall,” he said.

The majority of those arrested and deported for involvement in scams this year have been Chinese citizens, people from Vietnam, India, Indonesia, Laos, the Philippines, Malaysia and Myanmar have also been detained in raids. The Police said that all those arrested had come to Sri Lanka on tourist visas.

The transnational scam industry that flourished in SEA over the past decade has become one of the largest organised-crime enterprises in the world. It is mostly run by Chinese gangs and staffed by hundreds of thousands of workers, many trafficked or coerced into the job. From vast fortified compounds in Cambodia and Myanmar, large scale fraud factories orchestrate operations that run from romance scams and crypto fraud, to online gambling and money laundering on a global scale. Yet, as political pressure has grown on host countries in SEA, scam compounds have faced a significant crackdown from the authorities, pushing the Chinese operatives and crime syndicates to find new locations to set up operations.

Sri Lanka has emerged as a favoured new destination, due to the ease in getting tourist visas and the newly introduced “digital nomad” visas. There is also limited regulation on subscriber identity module (SIM) cards and internet connections, as well as a wide availability of offices and hotels to rent for a low price.

Sri Lanka’s mechanisms to go after cybercrime are seen as limited. The current modus operandi is mostly to deport foreigners found carrying out cybercrimes, rather than prosecuting them.

Cybercrime researcher and author of Scam: Inside SEA’s Cybercrime Compounds, Mark Bo said that he had noticed a shift in operations towards Sri Lanka starting two years ago, as it began to be mentioned in posts on the messaging app Telegram, as well as in recruitment drives. “After the crackdown really ramped up in Cambodia, I saw a lot more posts on Telegram channels of people saying that they were moving to Sri Lanka,” said Bo. “There’s clearly been some kind of transplanting of the exact same set-up there. It shows the challenge of controlling the industry because one of its defining characteristics is how mobile and how adaptable it can be.”

The operations have been accelerating beyond the control of the authorities. Businessmen in Colombo complained that the rents for office spaces had more than doubled in some complexes, due to the surge in demand and high prices paid by groups coming in from China.

Rather than setting up visible compounds, Police found that these operations tried to avoid detection by working in small groups of five people, which rotate around different hotels, apartments and offices every three months. The officer said that the operations that they had busted recently were clearly backed by huge sums of money, with eight floors of an apartment building rented out in one incident.

Superintendent of Police, Kamal Ariyawansa confirmed that it was a Chinese crime syndicate behind the operation, which was attempting to scam American victims into investing in a fake US company.

The Chinese embassy in Colombo has publicly acknowledged the involvement of its citizens in telephone fraud gangs, which they said had moved to Sri Lanka after the crackdown in SEA. “Cases like these pose immense harm, and the Chinese Embassy provides full support to Sri Lankan law enforcement agencies in resolutely cracking down on suspects,” they said.

The Guardian