A forged certificate, framed and hung on a wall, claimed the company behind it was registered in the United States and worth $10bn. None of it was real. Police who raided a Colombo office this week found the certificate alongside 62 passports, most of them belonging to Chinese nationals, plus phones, laptops, pen drives and a rubber stamp for manufacturing official-looking paperwork. Eighteen Chinese citizens and one Laotian were detained. It was the latest in a string of busts that has left Sri Lankan authorities sounding genuinely rattled.
The country has carried out more than a dozen raids since January and deported close to 700 foreigners accused of running online fraud, according to reporting in the Guardian. The police spokesperson, Fredrick Wootler, described an "alarming increase" in cybercrime committed by people who arrive as tourists and quietly set up shop. The targets sit anywhere in the world. The operators sit in rented offices just off Colombo's main thoroughfares. What makes the story worth watching is not the raids. It is where the people being arrested came from, and why they left.
The crackdown that moved the problem
For a decade, the centre of gravity for transnational online fraud was south-east Asia, mostly Cambodia and Myanmar, where fortified compounds processed romance scams, fake crypto investments, online gambling rackets and money laundering at industrial scale. Most of these operations are believed to be run by Chinese syndicates and staffed, in many cases, by people who were trafficked or coerced into the work. Reliable totals are difficult to pin down, but the estimates that do circulate are uniformly staggering. American officials calculate that US citizens alone were swindled out of $10bn by scam centres based in the region during 2024.
Governments in the region eventually faced enough political heat to act. As the compounds came under pressure, the syndicates did what mobile criminal enterprises always do: they moved. Mark Bo, a cybercrime researcher and the author of a book on the region's scam compounds, said he began noticing the shift about two years ago, when Telegram channels and recruitment posts started mentioning Sri Lanka as a destination. After the Cambodian crackdown intensified, he said, the chatter about relocating there grew louder. "There's clearly been some kind of transplanting," Bo told the Guardian, describing the same operational template reappearing on a new island.
That adaptability is the whole problem, and it is the part law enforcement keeps losing on. You can demolish a compound. You cannot easily demolish a business model whose only fixed asset is a laptop and a willingness to relocate.
Why Sri Lanka
The appeal is fairly mundane, which is precisely why it works. Tourist visas are easy to obtain, and the government recently introduced a digital nomad visa that makes longer stays simpler still. SIM cards and internet connections face little scrutiny. Office space and hotel rooms can be had cheaply. And a sizeable Chinese footprint already exists in Sri Lankan infrastructure and commerce, so Chinese visitors do not draw a second glance. Add relaxed rules on online gambling and gaming, and a country still digging out of a brutal economic collapse has, more or less by accident, assembled a welcome mat for exactly the sort of operator fleeing tighter jurisdictions.
The nationalities turning up in the raids underline how international the workforce has become. Chinese citizens dominate the arrest figures, but officers say their net has also closed around people from Indonesia and the Philippines, from India and Malaysia, and from Sri Lanka's own troubled neighbours Myanmar, Laos and Vietnam. In every case, police note, the individual had arrived on nothing more than a tourist visa.
The tradecraft has adjusted to the environment. Forget the sprawling fenced compounds. The model police now describe is small cells of around five people who shuffle between hotels, flats and offices every three months, staying loose and hard to pin down. Demand has been heavy enough to bend the local property market. Businesspeople in Colombo say rents in some office complexes have more than doubled, pushed up by groups arriving from China with cash to spend.
There is a deeper weakness in Sri Lanka's response, and the syndicates appear to understand it well. Rather than prosecuting the foreigners it catches, the country mostly deports them. That is cheaper, faster and clears the headlines. It also means the people running these schemes face an inconvenience, not a reckoning. Deport someone from Colombo and nothing stops the same network from flying in a fresh team next week, or simply setting up two countries over.
Whether Sri Lanka builds the legal machinery to actually prosecute these cases, and whether its courts and police can handle the volume, will decide whether this stays a relocation story or becomes a permanent one. The syndicates have already shown they will go wherever the friction is lowest. So far, on the evidence of those 700 deportations, Colombo has given them little reason to leave.