Sri Lanka is increasingly becoming a hub for transnational cybercrime as criminal networks, primarily operated by Chinese gangs, relocate from Southeast Asia following intensified regional crackdowns. Sri Lankan authorities have reported a significant rise in cybercrime activities carried out by foreign nationals who enter the country on tourist visas and establish fraudulent operations targeting victims worldwide.
Since the start of 2024, Sri Lankan police have conducted more than a dozen raids, arresting and deporting nearly 700 individuals suspected of involvement in scam operations. In the most recent operation, carried out in Colombo last Thursday, 18 Chinese nationals and one individual from Laos were detained. Officials discovered a large cache of falsified documents at the raid site, including registration papers falsely claiming the company was worth $10 billion, along with 62 passports predominantly belonging to Chinese citizens.
Law enforcement personnel seized an array of electronic devices such as phones, laptops, and storage media, as well as tools used for document forgery, including a stamp and forged business certification representing a fictitious U.S.-registered company. Police Superintendent Kamal Ariyawansa confirmed that the operation was orchestrated by a Chinese crime syndicate aiming to defraud American investors through fake company investments.
While the majority of those apprehended have been Chinese nationals, individuals from Vietnam, India, Indonesia, Laos, the Philippines, Malaysia, and Myanmar have also been implicated in these scams. All are reported to have entered Sri Lanka under tourist visas. The prevailing response by Sri Lankan authorities has been to deport arrested suspects rather than pursue formal prosecutions.
The rise in cybercrime activity in Sri Lanka is linked to a shifting landscape in Southeast Asia, where longstanding scam enterprises—often described as some of the largest organized crime networks globally—have faced mounting government pressure. These syndicates operate large-scale fraud “factories” from fortified compounds in countries like Cambodia and Myanmar, engaging in a variety of illicit activities such as romance scams, cryptocurrency fraud, online gambling, and money laundering. U.S. officials estimate losses from scams originating in Southeast Asia reached $10 billion in 2024.
Sri Lanka’s appeal to these criminal groups stems from relatively lax regulations, including ease of obtaining tourist and new digital nomad visas, minimal control over SIM card and internet usage, and abundant low-cost office and hotel rentals. The country’s regulatory and enforcement frameworks around cybercrime and online gambling remain limited. Additionally, China’s extensive economic involvement in Sri Lanka and the existing presence of Chinese nationals make the island a convenient base for these operations.
The Chinese embassy in Colombo has publicly acknowledged the involvement of some of its citizens in telephone fraud schemes that have shifted to Sri Lanka following crackdowns in other parts of Asia. Embassy representatives affirmed their cooperation with Sri Lankan law enforcement efforts to address the issue, emphasizing the harm caused by such criminal activities and pledging full support to authorities in pursuing suspects.