CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Global disruption of pig-butchering cryptocurrency scam networks with 276 arrests

First reported
Last updated
2 unique sources, 2 articles

Summary

Hide ▲

A coordinated international law enforcement operation dismantled nine cryptocurrency investment fraud centers across Dubai and Southeast Asia, arresting 276 suspects linked to pig-butchering (romance baiting) schemes that defrauded victims through fake investment platforms. Scammers cultivated trust with targets via fabricated relationships before redirecting victims to counterfeit cryptocurrency investment portals where deposited funds were immediately siphoned and laundered through layered crypto accounts. Victims were coerced into borrowing money and taking loans to increase investments, exacerbating financial losses. The operation targeted operations including Ko Thet Company, Sanduo Group, and Giant Company, with fugitives still at large. Additional developments include the seizure of over $701 million in illicit funds, charges against key figures in forced labor scam compounds, sanctions on a Cambodian senator tied to cyber scam networks, and the disruption of an Android banking trojan linked to scam operations in Cambodia. U.S. authorities also expanded victim notification efforts and launched new cybersecurity initiatives to counter evolving fraud tactics.

Timeline

  1. 30.04.2026 14:21 2 articles · 4d ago

    International law enforcement dismantles pig-butchering crypto scam networks with 276 arrests

    Dubai Police, in coordination with U.S. and Chinese authorities, dismantled nine cryptocurrency investment fraud centers linked to pig-butchering schemes. 276 suspects were arrested across Dubai and Thailand, including key figures tied to Ko Thet Company, Sanduo Group, and Giant Company. Victims in the U.S. reported millions in losses, with funds laundered through layered crypto accounts. Two fugitives remain at large as law enforcement expands cross-border disruption efforts. This phase is updated to reflect new details on financial seizures, victim notification efforts, and the broader enforcement landscape, including sanctions on Cambodian Senator Kok An, charges against Chinese nationals operating Shunda compound, and the disruption of an Android banking trojan linked to K99 Group compounds in Cambodia.

    Show sources
    Open in new tab

Information Snippets

Similar Happenings

US disrupts Myanmar-based scam compound and sanctions Southeast Asian financial fraud network

US authorities executed a coordinated enforcement action targeting a Myanmar-based scam compound linked to a broader Southeast Asian financial fraud network. The operation included sanctions against 29 individuals, the seizure of a Telegram channel with 6,000+ followers, and the takedown of over 500 .com domains tied to fake investment sites. Two Chinese nationals were criminally charged for managing operations that forced trafficked workers to conduct phone-based social engineering attacks targeting US citizens. The network’s infrastructure and workforce were traced to a compound seized by Burmese forces in November 2025 near the Thai border, revealing a multi-stage scam operation involving deceptive recruitment, coercion, and fraudulent financial schemes.

Open in new tab

Increased Cryptocurrency and Forex Investment Scams in Asia

A surge in fake investment platforms targeting cryptocurrency and forex exchanges is driving a new wave of financial crime across Asia. These scams, orchestrated by organized cross-border groups, exploit social media and messaging apps to lure victims. The schemes use sophisticated trading interfaces and complex backend systems to steal funds. Group-IB's research outlines two key models: a Victim Manipulation Flow and a Multi-Actor Fraud Network. These models detail how trust is built and exploited, and how distinct roles cooperate within a single operation. The report highlights shared technical fingerprints, such as reused SSL certificates and identical chatbot systems, linking multiple scam campaigns. The growing international threat is exemplified by the August 2025 arrest of 20 individuals in Vietnam connected to the $1bn Paynet Coin crypto fraud. This case illustrates how online investment scams have scaled beyond borders, with operators recruiting globally and leveraging fake corporate accounts, stolen identity data, and mule networks to move funds undetected.

Open in new tab

Meta Enhances Scam Protection for Messenger and WhatsApp

Meta has introduced new tools to protect users of Messenger and WhatsApp from scams. The tools include warnings for screen sharing during video calls on WhatsApp, a scam detection feature on Messenger, and a new security feature to help users spot potential scams when being added to a group chat by unknown contacts. Meta also reported actions taken against fraudulent accounts and scam centers. Meta's efforts are part of ongoing measures to combat scams, including romance baiting schemes operated by cybercrime syndicates in Southeast Asia. These scams often involve psychological manipulation and financial fraud. In 2025, Meta removed over 159 million scam ads and took down over 10.9 million accounts on Facebook and Instagram linked to criminal scam operations. Meta also participated in a global law enforcement operation that led to the arrest of 21 suspects and the shutdown of more than 150,000 accounts linked to scam networks in Southeast Asia. Meta collaborated with the FBI, the DOJ Scam Center Strike Force, and Thai police to disrupt scam centers in Southeast Asia. The operation targeted scam centers that targeted users in the US, UK, and the APAC region. Thai Police arrested 21 suspects and Meta shut down more than 150,000 accounts linked to the scam centers. In a similar operation conducted in December, Meta removed 59,000 accounts, pages, and groups across its platforms.

Open in new tab

U.S. sanctions cyber scam operations in Southeast Asia

The U.S. Department of the Treasury has sanctioned additional entities in Cambodia, including Senator Kok An, for operating large-scale cryptocurrency fraud networks embedded within scam compounds, including casinos and commercial buildings. These networks defrauded Americans of at least $10 billion in 2024 through romance baiting and fake investment platforms, with financial losses reaching millions per victim. The sanctions target 29 individuals and organizations and are coordinated with the Department of Justice, FBI, and Secret Service. Recent enforcement actions include the seizure of 503 fraudulent domains, disruption of a messaging app used for human trafficking recruitment, and criminal charges against operators in Burma and Cambodia. The U.S. has escalated efforts to dismantle these operations, which are linked to widespread human trafficking, physical abuse, and casino-based money laundering. The sanctions block U.S.-based assets and prohibit transactions with designated parties, aiming to disrupt the financial and operational infrastructure sustaining these cyber-enabled fraud networks.

Open in new tab