Inside the Criminal Networks Behind Global Online Fraud
In recent years, federal investigators have identified large-scale scam compounds operating throughout Southeast Asia as a major source of cryptocurrency investment fraud, romance scams, impersonation schemes, and other forms of cyber-enabled financial crime targeting Americans and victims around the world. According to the U.S. Department of Justice, these compounds function as sophisticated criminal enterprises that combine technology infrastructure, social engineering operations, money laundering networks, and victim recruitment systems into a highly organized fraud ecosystem. Unlike traditional scams carried out by individuals or small groups, scam compounds often operate on an industrial scale, employing hundreds or even thousands of workers who are tasked with targeting victims across multiple countries simultaneously.
These operations have become a growing concern for law enforcement agencies because they blend cybercrime, financial fraud, organized crime, and, in some cases, human trafficking. Federal authorities have increasingly focused on dismantling the infrastructure that supports these networks, including fraudulent websites, cryptocurrency wallets, communication platforms, and recruitment channels used to sustain their operations.
What Is a Scam Compound?
A scam compound is a secured facility used to conduct large-scale online fraud operations. Investigations conducted by U.S. and international authorities indicate that many compounds operate much like corporate offices, with specialized departments responsible for different stages of the fraud process. Within a single compound, there may be teams dedicated to investment fraud, romance scams, customer support impersonation schemes, cryptocurrency payment processing, software development, money laundering, and recruitment activities.
These organizations are capable of targeting thousands of victims simultaneously through social media platforms, messaging applications, dating websites, and fraudulent investment portals. Many compounds maintain extensive technological infrastructure designed to support continuous operations, including call centers, computer networks, cryptocurrency payment systems, and databases containing information about potential victims. The scale and sophistication of these facilities have led investigators to describe them as highly organized criminal enterprises rather than isolated scam operations.
Locations Identified by Investigators
According to information released by the Scam Center Strike Force and other federal agencies, investigators have focused significant attention on scam compounds operating in Burma (Myanmar), Cambodia, and Laos. These regions have emerged as major hubs for transnational fraud operations due to a combination of weak regulatory oversight, criminal influence, and the availability of isolated facilities that can be used to house large numbers of workers.
Federal authorities have stated that Chinese organized crime affiliates play a significant role in the financing, management, and expansion of many of these networks. Investigations suggest that criminal groups often establish interconnected operations across multiple countries, allowing them to move personnel, technology, and financial assets while reducing the risk of disruption by local law enforcement. This cross-border structure makes investigations particularly challenging and requires extensive international cooperation.
Human Trafficking and Forced Labor
One of the most alarming findings from recent investigations involves the use of human trafficking and forced labor within scam compounds. Federal authorities and international organizations have documented numerous cases in which individuals were recruited through fraudulent job advertisements promising legitimate employment opportunities in technology, customer service, marketing, or sales.
Upon arrival, many victims reportedly discovered that they had been transported to scam compounds and were forced to participate in online fraud schemes. Reports describe situations involving passport confiscation, physical intimidation, debt bondage, restricted movement, surveillance, and threats of violence. Some individuals were allegedly required to meet fraud quotas and faced punishment if they failed to generate sufficient revenue from victims.
Law enforcement agencies increasingly view these operations as involving both financial crime and serious human rights abuses. As a result, investigations often involve cooperation between cybercrime units, anti-trafficking specialists, financial investigators, and international law enforcement partners.
Recent Federal Enforcement Actions
On April 23, 2026, the U.S. Department of Justice announced major enforcement actions through the Scam Center Strike Force targeting scam centers operating throughout Southeast Asia. These actions represented one of the most significant coordinated efforts undertaken by federal authorities to disrupt the infrastructure supporting international fraud networks.
Federal prosecutors charged two Chinese nationals accused of operating a cryptocurrency investment fraud compound in Burma and attempting to establish an additional operation in Cambodia. Authorities also reported the restraint of approximately $701,962,392.15 in cryptocurrency linked to scam-center money laundering operations. According to federal officials, these assets were connected to financial networks used to process and conceal proceeds generated through fraudulent investment schemes.
Investigators additionally seized 503 fraudulent investment websites that allegedly impersonated legitimate trading and investment platforms. These websites were designed to convince victims that they were participating in genuine investment opportunities while directing deposits into cryptocurrency wallets controlled by scammers. Federal authorities also seized a Telegram channel allegedly used to recruit trafficking victims for scam compounds located in Cambodia, highlighting the role that communication platforms can play in sustaining these criminal enterprises.
How Scam Compounds Operate
Federal investigations have revealed a common operational model used by many scam compounds. The process typically begins with victim identification, during which criminals search for potential targets through social media platforms, dating applications, messaging services, and online advertisements. Sophisticated data collection techniques may also be used to identify individuals who appear financially capable of investing significant amounts of money.
Once a target has been identified, operators begin a relationship-development phase. During this stage, scammers may spend weeks or even months building trust through frequent conversations and carefully crafted narratives. In romance scams, victims may believe they are developing a genuine personal relationship, while investment scams often involve individuals posing as successful traders or financial advisors.
After trust has been established, victims are directed toward fraudulent investment platforms, cryptocurrency schemes, romance-related financial requests, or impersonation scams. Fake account dashboards, fabricated profit reports, and manipulated transaction histories are commonly used to convince victims that their investments are generating returns.
The final stage involves money laundering. Funds obtained from victims are transferred through cryptocurrency wallets, exchanges, shell companies, and international financial channels designed to obscure the origin and destination of the money. Investigators frequently describe these operations as highly structured and professionalized, with different teams responsible for victim acquisition, fraud execution, technical support, and financial laundering.
Operation Level Up
To reduce victim losses and identify ongoing fraud schemes more quickly, federal authorities launched Operation Level Up, an initiative focused on proactively contacting individuals believed to be targeted by cryptocurrency investment scams. According to publicly released figures, investigators identified and contacted approximately 8,935 victims, and officials reported that 77 percent of those contacted did not realize they were actively being scammed at the time.
Federal authorities estimate that the initiative helped prevent more than $562 million in additional losses. Operation Level Up demonstrates a shift toward proactive intervention, allowing investigators to warn victims before they transfer additional funds rather than relying solely on traditional post-crime investigations.
Digital Infrastructure Behind Scam Compounds
Modern scam compounds rely heavily on digital infrastructure to maintain operations and reach victims worldwide. Investigators increasingly focus on disrupting this infrastructure because doing so can significantly reduce the ability of criminal organizations to conduct fraud at scale.
Key components of scam-center infrastructure include fraudulent domains, hosting providers, messaging applications, cryptocurrency wallets, recruitment channels, payment-processing systems, and internet connectivity services. Criminal organizations often maintain hundreds of websites simultaneously, allowing them to quickly replace domains that are identified or seized by authorities.
Federal investigations have also targeted communications infrastructure used by scam compounds to coordinate operations and maintain continuous contact with victims. By disrupting these systems, authorities aim to reduce the operational capacity of fraud networks and increase the costs associated with maintaining large-scale scam operations.
Why These Investigations Matter
Scam compounds are responsible for billions of dollars in losses affecting victims worldwide. According to federal officials, these operations target a wide range of individuals, including retirees, first-time investors, professionals, small business owners, and experienced cryptocurrency users. The success of these schemes often depends less on technical sophistication and more on the ability of scammers to exploit trust, emotional vulnerability, and financial aspirations.
Beyond the direct financial harm caused to victims, scam compounds contribute to broader criminal activity by generating revenue that can be used to support organized crime networks, money laundering operations, and human trafficking activities. Their international structure allows them to operate across multiple jurisdictions, making enforcement efforts particularly complex.
Disrupting these networks requires coordinated action among law enforcement agencies, financial institutions, technology companies, cryptocurrency service providers, and international partners. Federal authorities continue to emphasize that combating scam compounds is not only a cybersecurity issue but also a financial crime and public safety priority.
Public Safety Advisory
The Scam Center Strike Force encourages the public to remain vigilant when approached with investment opportunities or online relationships that involve financial requests. Common warning signs include guaranteed investment returns, cryptocurrency trading opportunities that promise unusually high profits, unexpected romantic relationships formed online, requests to move conversations to private messaging applications such as WhatsApp or Telegram, demands for cryptocurrency transfers, and claims that additional payments are required before funds can be withdrawn.
Scammers often create a false sense of urgency and may use fabricated account balances or fake customer support representatives to pressure victims into sending more money. Individuals should independently verify investment opportunities, avoid transferring funds to unknown parties, and seek advice from trusted financial professionals before making significant financial decisions.
Early reporting helps investigators identify criminal networks, disrupt ongoing fraud operations, and protect future victims from similar schemes.
Report Suspicious Activity
If you believe you have encountered activity connected to a scam compound, it is important to preserve as much evidence as possible. Useful information may include website URLs, cryptocurrency wallet addresses, screenshots, chat logs, emails, transaction records, social media profiles, payment receipts, and any other communications related to the suspected fraud.
Information reported by victims frequently assists investigators in identifying larger criminal organizations operating across multiple countries. Even if financial losses have not yet occurred, reporting suspicious activity can help authorities detect emerging fraud trends, identify infrastructure used by scammers, and prevent additional victims from being targeted.