Sri Lanka has emerged as a growing operational base for international telecom fraud and pig-butchering investment scams, with organised cybercrime networks exploiting the island nation's economic vulnerabilities and regulatory gaps to set up large-scale scam centres. The shift, accelerating since mid-2024, marks a significant decentralisation of Southeast Asian cybercrime operations toward South Asia.

Why Sri Lanka Became a Target

Cybercrime syndicates originating from Myanmar, Cambodia, and Laos — long the epicentres of Southeast Asian scam compounds — are reportedly relocating operational hubs to Sri Lanka, drawn by relaxed scrutiny over foreign investment and cash inflows amid the country's prolonged economic crisis. According to reports, the combination of financial desperation and weakened institutional oversight has made Sri Lanka an attractive low-risk base for transnational criminal networks.

Raids and Arrests Across the Island

Since mid-2024, the Sri Lanka Police and the Criminal Investigation Department (CID) have conducted several major raids, dismantling foreign-run scam centres and making hundreds of arrests. Operations have targeted luxury hotels and guest houses in Kandy, Panadura, and Negombo, which were allegedly repurposed as fraud operations hubs.

In the largest single bust reported, 150 individuals — including 133 Chinese nationals, 13 Vietnamese, and one Malaysian — were arrested at a luxury hotel in Ambakandavila in April 2026. Investigators seized hundreds of computers, mobile phones, and SIM-box devices capable of operating hundreds of SIM cards simultaneously to dispatch thousands of fraudulent calls and messages.

How the Scams Operate

The primary revenue model is pig butchering — a scheme in which scammers cultivate online romantic relationships with victims over weeks or months before persuading them to invest in fraudulent platforms. Once sufficient funds are deposited, the platforms vanish along with the money.

Recruiters for these networks advertise fake 'online marketing' or 'data entry' jobs on social media to lure workers, often migrants. Once inside, workers reportedly have their passports confiscated and are coerced into running scam campaigns. Separately, scammers use VPNs to mask their locations and compromise social media accounts — including WhatsApp — to send phishing links directing victims to deposit funds into private bank accounts.

Who Is Behind the Networks

According to reports, Chinese and Nigerian nationals are identified as the primary operators of these scam centres in Sri Lanka. Investigators allege that these local hubs are directly linked to larger international criminal syndicates headquartered in Myanmar and Cambodia — countries that have, in recent years, become synonymous with industrial-scale cyber fraud compounds.

Broader Implications for the Region

This is not an isolated phenomenon. Sri Lanka's emergence as a scam hub follows a well-documented pattern: as law enforcement pressure mounts in one country, criminal networks migrate to jurisdictions with weaker oversight. India, as a neighbouring country, faces heightened risk, given that Indian citizens are among the most frequently targeted victims of pig-butchering and telecom fraud schemes originating from South and Southeast Asia. Analysts warn that without coordinated regional enforcement and tighter foreign investment monitoring, Sri Lanka risks becoming a permanent node in the global cybercrime network.