The message feels personal. Someone took time to write it. They asked how your week is going and seemed genuinely curious about your life. Over days or weeks, they built something that feels like a real connection. The intent seems good. Replies come quickly. The interest feels real. In many cases, the message comes from one of the scam compounds of Southeast Asia.
However, what most victims never find out is that the person on the other end was working a shift.
They were sitting at a desk in a compound in Myanmar or Cambodia, alongside hundreds of others. They followed a script and hit daily targets, all under threat of violence if their numbers weren’t good enough. In fact, this is not a collection of individual fraudsters. It is an industry.
The Scale of Scam Compounds Is Almost Impossible to Process
At least 120,000 people across Myanmar and around 100,000 in Cambodia may be held in scam compounds and forced to work on online fraud, according to a 2023 UN Human Rights Office report on “online scam operations and trafficking into forced criminality.”
Furthermore, the same body and allied researchers warn that tens of thousands more have been trafficked into similar operations in Laos, the Philippines, and Thailand, making Southeast Asia the core geography of this industry.
Americans alone reported $20.877 billion in losses to cyber‑enabled crime in 2025. Investment fraud accounted for $8.6 billion, and cryptocurrency investment schemes drove roughly $7.2 billion of that total.
These are not rounding errors. Indeed, this is an industry with infrastructure, management hierarchies, financial systems, and HR practices. The fact that it runs on human trafficking and coercion does not make it any less organized. If anything, it makes it more so.
How Scam Compounds Are Built and Run
Criminal networks with links to Chinese organized crime have converted hotels, office blocks, and casinos across Southeast Asia into scam compounds. These fortified operational centers generate billions of dollars annually from victims across the globe. Inside, the structure is closer to a corporate call center than a criminal hideout.
Workers form teams that run specific fraud types: pig-butchering, romance scams, fake crypto investment platforms, task scams. Additionally, there are daily quotas, performance targets, and shift supervisors. Scripts are provided. Results are monitored.
FBI agents reviewed evidence from the Shunda Park compound in Myanmar after its seizure in November 2025. It showed a Chinese-run, hierarchical operation. Trafficked workers there were held against their will and threatened with violence if they failed to meet fraud targets. The operation is run like a business. Enforced like a prison.
Who Is Being Trafficked Into Scam Compounds
This is where the story becomes genuinely disturbing, because the victims inside the compounds are not the profile most people would expect. Unlike traditional labor trafficking victims, these individuals are often young, urban, multilingual, and tech-savvy. Traffickers lure them from cities, not rural villages. Recruitment is sophisticated. Fake job posts on platforms like LinkedIn promise customer service or IT roles, complete with interviews, visas, and flight arrangements.
Workers also arrive from across the world including China, India, Taiwan, Vietnam, Ethiopia, Kenya, the Philippines and beyond. Once inside, they lose their passports to confiscation. Their movement is restricted. Only senior managers have freedom to come and go. When Myanmar’s KK Park compound was raided in early 2025, approximately 1,500 workers crossed into Thailand, including hundreds from India as well as citizens from China, the Philippines, Vietnam, Ethiopia, and Kenya. They were educated, multilingual professionals. They had applied for what they believed were legitimate technology jobs, and they found themselves in a compound with no way out.
The person running a romance scam against a victim in Ohio may themselves be a victim of trafficking in Myanmar. Both realities are true simultaneously. That complexity is part of what makes this problem so difficult to address.
The Technology Stack Behind the Fraud
These operations are not running basic email scams. The technology that scam compounds deploy has evolved significantly. As a result, the gap between what they use and what most individuals and businesses have as protection is narrowing fast. For example, AI-generated personas maintain conversations with dozens of targets simultaneously. Deepfake video calls provide visual proof of an identity that doesn’t exist. Fake investment platforms show real-time portfolio returns. They are complete, functional interfaces that look exactly like legitimate financial products until the moment the money disappears.
The social engineering scripts are professionally developed and regularly updated based on what works. Underground banking systems and cryptocurrency mixing move the money out through multiple jurisdictions before anyone can trace it.
So what does this mean practically? The barrier to falling victim to these scams is not a failure of intelligence. It is a failure of information. These are sophisticated, well-resourced operations. They target people who have no reason to expect the level of deception aimed at them.
What the International Response Looks Like And Why It's Struggling
Enforcement has accelerated significantly, and it is starting to have real impact.
In September 2025, the US Treasury sanctioned Myanmar‑ and Cambodia‑linked business networks and individuals. Authorities allege they were involved in billion‑dollar scam operations, and the sanctions explicitly linked their activities to human trafficking and online fraud.
In April 2026, the Justice Department’s Scam Center Strike Force announced charges against two Chinese nationals accused of managing the Shunda compound in Myanmar and trying to expand into Cambodia. It also announced the seizure of at least 503 fake investment websites and more than $701 million in cryptocurrency tied to the schemes. These are meaningful steps. But the structural problem remains.
The compounds operate in jurisdictions where governance is either actively complicit or too weak to act consistently. In those places, US Trafficking in Persons Reports have repeatedly cited official complicity in trafficking and failures to investigate corrupt officials. When one compound is shut down, operations relocate. When one jurisdiction cracks down, the industry moves to the next border. The crackdowns are working at the margins. The industry remains adaptive, mobile, and deeply embedded in the political economy of the region.
What Scam Compounds Mean for Businesses and Investigators
For most businesses, the scam compound industry feels distant. It’s a problem for law enforcement, for governments, for international bodies. It is not, the thinking goes, something that needs to sit on a risk register. However, that thinking is increasingly wrong.
Scam compound operations are the operational engine behind the fastest-growing categories of financial fraud targeting businesses globally. These include pig-butchering schemes targeting high-net-worth individuals and executives, fake investment platforms targeting corporate treasury functions, and romance fraud targeting employees with access to financial systems. In fact, the individuals running these schemes are not lone operators. They are employees of an industry.
How Scam Compounds Complicate Fund Tracing
For fraud investigators, tracing funds from these scams leads almost inevitably into cryptocurrency networks, underground banking systems, and jurisdictions with limited legal cooperation. The investigative challenges are significant. Still, the available tools are improving faster than the industry can adapt, including blockchain forensics, OSINT, and cross-border intelligence networks. For businesses, the risk extends beyond direct fraud exposure. Supply chain and counterparty risk from entities unknowingly connected to scam compound networks is a real and underassessed threat. Due diligence frameworks that don’t account for this specific threat are operating with a blind spot.
Therefore, understanding the threat specifically, structurally, at the level of how it actually operates, is the first step to building defenses that actually work.
Both Victims and Perpetrators
The scam compound industry is not a cybercrime problem. It is a human trafficking problem, a corruption problem, a geopolitical problem, and a financial crime problem. All of them operate simultaneously, at industrial scale. Their financial infrastructure is sophisticated enough to challenge the most advanced investigative capabilities in the world.
The UN Human Rights Office has stressed that many workers in these operations are victims coerced into “forced criminality.” Authorities misidentify them as criminals or immigration offenders despite evidence of beatings, torture, and sexual violence.
The message that felt personal was written by someone who had no choice but to send it. Understanding that does not make the fraud any less damaging. But it does fundamentally change what kind of problem this is, and what kind of response it actually requires.
FAQs
What is a scam compound?
A scam compound is a fortified operational facility typically a converted hotel, casino, office building, or residential complex used by criminal networks to run large-scale online fraud. Workers inside are divided into teams running specific scam types: pig butchering, romance fraud, fake cryptocurrency investment platforms, and task scams. The operations resemble corporate call centers, with daily quotas, performance monitoring, and management hierarchies enforced through document confiscation, debt bondage, and threats of violence.
Who works in scam compounds and are they victims?
Are Scam Compound Workers Victims or Criminals?
Both questions have complicated answers. Many workers inside scam compounds are themselves trafficking victims recruited through fake job advertisements promising legitimate technology or customer service roles, then transported across borders, stripped of their passports, and forced to commit fraud under threat of violence. The person running a romance scam against a victim in one country may themselves be a victim of trafficking in another. Both realities are simultaneously true. That complexity is part of what makes this problem so difficult to address.
What types of fraud do scam compounds run?
The most common operations include pig butchering, long-term investment fraud combining fake relationships and fraudulent cryptocurrency platforms romance fraud, task scams, and fake investment platforms. Additionally, the technology deployed is sophisticated: AI-generated personas, deepfake video calls, fake trading interfaces showing real-time fabricated returns, and professional-grade social engineering scripts updated regularly based on what works.
What is the international response to scam compounds and is it working?
Is the International Response Working?
Enforcement has accelerated significantly. In 2025, the US Treasury sanctioned individuals and entities connected to Myanmar and Cambodian compound operations, Congress introduced dedicated legislation, and FBI agents recovered thousands of devices from seized facilities. These are meaningful steps. However, the structural problem remains: the compounds operate in jurisdictions where governance is either complicit or too weak to act consistently. When authorities shut down one compound, operations relocate. The crackdowns are working at the margins. The industry remains adaptive.
What does this mean for businesses and how does CAT Investigators help?
For businesses, the risk extends beyond direct fraud exposure. Indeed, supply chain and counterparty risk from entities unknowingly connected to scam compound networks is a real and underassessed threat. Due diligence frameworks that don’t account for this specific threat are operating with a blind spot. CAT Investigators provides fraud investigation, financial crime analysis, and cross-border due diligence for businesses and institutions navigating complex and emerging threat landscapes including exposure to scam compound-linked networks.