Cybercrime Operations Shift to Sri Lankan Shores
Following intensified crackdowns on scam compounds in neighboring Cambodia, criminal organizations are reportedly establishing new bases in Sri Lanka’s scenic beach resorts and modern office buildings. This relocation signals a potential new chapter for one of the world’s rapidly expanding illicit industries. Investigators point to a confluence of factors making the South Asian island nation an attractive destination for these operations, including visa-free travel for certain nationalities, readily available commercial space, robust telecommunications infrastructure, and a well-entrenched informal money transfer system.
Sri Lankan authorities have responded by establishing a dedicated cybercrimes unit and have reported arresting over 1,000 individuals this year alone. Many of these arrests have occurred in popular western beach areas and the capital city, Colombo. Assistant Police Superintendent Fredrick Wootler stated, “Police, along with the immigration department and the central bank, are working as a collective effort to see that this is being controlled.” However, observers suggest the country has a limited window to effectively address these increasingly sophisticated and mobile criminal enterprises.
Challenges in Law Enforcement and Shifting Tactics
Dilrukshi Handunnetti, director at the Centre for Investigative Reporting Sri Lanka, noted, “In Sri Lanka there are issues with implementing our laws, the fact that we don’t necessarily crack down on these companies — they simply use tourist visas.” This approach allows operations to fly under the radar of law enforcement.
Recent raids highlight the scale of the problem. In April, officers discovered over 150 foreign nationals allegedly operating a cyber-scam scheme from a west coast property. Days later, another raid on a multistory apartment building near Colombo resulted in the arrest of 120 foreign nationals. As authorities increase pressure, some scam operators are reportedly moving away from large, easily identifiable compounds towards hotels, apartment buildings, and office spaces that can be quickly rented and just as rapidly abandoned.
Erin West, founder of anti-scam nonprofit Operation Shamrock, expressed concern over these evolving tactics: “This is happening in ways that are unfortunately even more difficult for us to keep our eyes on. I think we’ve created such skilled workers, whether they wanted to be or not, that they can operate really in any kind of environment.”
Global Scammer Relocation and Regulatory Stress
A reports a US congressional committee last year identified a trend of fraud networks relocating to jurisdictions experiencing “regulatory stress” – areas with less stringent enforcement but well-developed digital infrastructure. The suspected emergence of Sri Lanka as a new hub aligns with this pattern. Many individuals may be migrating from established scam centers in Southeast Asia, seeking new opportunities due to limited alternative employment prospects.
This trend reflects a broader pattern of scam operations expanding beyond traditional strongholds in the UAE, Timor-Leste, Fiji, and parts of Africa, raising concerns about the increasing globalization of transnational criminal gangs. China, for instance, has expressed significant attention to these developments. Chinese diplomatic pressure played a role in Cambodia’s recent clampdown.
The Chinese embassy in Sri Lanka released a statement in mid-March indicating it was “closely following” reports of arrests of suspected scammers, including Chinese nationals. The statement cited Sri Lanka’s developed telecommunications infrastructure, favorable geography, and the “kindness and friendliness of its people” as factors contributing to the rise in scam operations. A long-standing presence of Chinese workers in Sri Lanka, partly due to the Belt and Road initiative, could also facilitate operators blending into the diaspora. Sanjana Hattotuwa, an independent researcher, noted, “It’s not unusual to see entire apartment complexes and shopping complexes, and sometimes even neighborhoods inhabited by Chinese.”
International Cooperation and Emerging Risks
Experts suggest Sri Lankan authorities could learn from countries like Vietnam and the Philippines in preventing the entrenchment of scam operators, drawing a contrast with Cambodia’s experience. Julia Dickson, an associate fellow at the Centre for Strategic and International Studies, questioned, “It comes down to, are officials keen to actually take action, or are they benefiting substantially like those in Cambodia?”
Sri Lanka’s ranking of 107 out of 182 countries on Transparency International’s 2025 Corruption Perceptions Index places it just above Algeria, Bosnia and Herzegovina, and Laos. While visitor arrivals have seen an increase, plans to expand visa-free entry to 40 countries could potentially exacerbate the situation.
Stephanie Baroud, a criminal intelligence analyst with Interpol, stated that it is too early to confirm if human trafficking is occurring alongside these scam operations in Sri Lanka, though she acknowledged that loose visa policies can be an enabling factor in trafficking. Furthermore, Sri Lanka reportedly lacks a comprehensive legal framework to combat cyber-scam operations. Easy access to SIM cards and widespread internet connectivity make it an attractive base for fraud networks, according to Hattotuwa. The nation’s informal Undiyal money-transfer system may also serve as a conduit for illicit funds, potentially including cryptocurrency, beyond regulatory oversight.
Central Bank Governor Nandalal Weerasinghe indicated that Sri Lanka’s Financial Intelligence Unit is collaborating with local law enforcement to combat illicit fund flows. However, he declined to comment on potential cooperation with foreign authorities. Enhanced information sharing is crucial, especially as reduced foreign aid has weakened civil society groups that often provide early warnings about emerging criminal hubs. Dickson emphasized, “We have a lot less information about what’s going on on the ground,” underscoring the critical need for better intelligence sharing to track these evolving fraud networks.
The evolving landscape of illicit finance, particularly concerning the movement of funds and the potential for circumvention of traditional financial systems, underscores the importance of robust, transparent, and secure infrastructure. For individuals seeking to protect their assets from potential freezes or surveillance, exploring decentralized solutions that prioritize user control and privacy becomes increasingly relevant. Technologies that enable confidential transactions, such as those offered by privacy-by-default blockchains like Zano, or private Bitcoin alternatives like BTCX via Confidential Layer, aim to mitigate the risks associated with public ledger exposure and traceability. Similarly, decentralized stablecoins, such as fUSD, are designed to operate without central issuers capable of arbitrarily freezing user funds, offering an alternative to centralized stablecoins that have faced scrutiny for their potential for financial censorship.
