The emergence of mobile, sophisticated scam networks operating across Southeast Asia has prompted ASEAN's police forces to forge unprecedented cooperation mechanisms designed to combat what authorities increasingly recognise as one of the region's most damaging transnational crimes. Intelligence agencies across the bloc are now documenting a troubling pattern: as law enforcement pressure mounts in established scam hubs, criminal syndicates are methodically relocating their operations to less-monitored jurisdictions such as Laos and Sri Lanka, seeking jurisdictions where enforcement capacity remains limited and regulatory oversight less stringent.

Recognising the scale of the challenge, ASEANAPOL convened senior officials and investigators from member states in Semarang, Indonesia, between June 15 and 17 for a comprehensive workshop aimed at establishing common training standards and operational protocols. The gathering produced a practical curriculum designed to equip regional law enforcement with specialised capabilities in combating online fraud and cyber-enabled scams. The training framework addresses multiple investigative disciplines critical to dismantling these operations: intelligence-led approaches that map syndicate structures and funding flows, sophisticated financial investigations that trace illicit proceeds through layered banking systems and cryptocurrency channels, and digital evidence collection methodologies adapted to the unique forensic challenges posed by borderless cyber crime.

The scam phenomenon has evolved from small-scale operations into sprawling criminal enterprises commanding resources and technical sophistication comparable to traditional organised crime groups. These networks exploit the region's digital connectivity, varied regulatory environments, and porous financial systems to orchestrate fraud at industrial scale. They target vulnerable populations across North America, Europe, and Asia, employing psychological manipulation and technological deception to extract payments from victims who often remain unaware they have been defrauded until financial damage is substantial.

The geographic concentration of scam infrastructure in Cambodia and Myanmar has made these nations particular focal points for enforcement action. Cambodia has responded with mass detention campaigns, holding approximately 200,000 individuals linked to online scam operations, though questions persist regarding the distinction between coerced labour and voluntary participation in these networks. Myanmar's approach has proven more destructive: security forces have deported roughly 70,000 foreign nationals implicated in cybercrime activities between 2023 and 2025 and systematically demolished dozens of buildings identified as operational bases for scam centres. These aggressive interventions reflect the political will to address the issue but also highlight the scale of the problem within these nations' territories.

Elsewhere in the region, law enforcement agencies report growing caseloads. Sri Lankan police have arrested nearly 700 individuals involved in cybercrime operations during the current year alone, signalling both the prevalence of scam activity on the island and heightened enforcement attention. These arrest figures, while substantial, likely represent only a fraction of actual criminal involvement, as many perpetrators operate with protection from corrupt officials or operate through layers of intermediaries that obscure their role in the broader enterprise.

The economic dimensions of the problem are staggering. United States government estimates indicate that Americans alone lost at least US$10 billion (RM40 billion) to scam operations based in Southeast Asia during 2024, a figure that reflects only losses reported to authorities and excludes victims in other Western nations, Australia, the Middle East, and increasingly affluent sectors of Asia itself. When extrapolated globally, the total damage inflicted by Southeast Asian scam syndicates likely exceeds US$20 billion annually, making this a significant drain on wealth within victim nations and a major source of illicit income flowing into the region.

The relocation of scam operations to secondary locations reflects calculated criminal adaptation to enforcement pressure. Syndicates are drawn to jurisdictions offering permissive visa regimes that facilitate rapid movement of personnel, robust internet infrastructure capable of supporting large-scale fraud operations, expanding air connectivity that enables operatives to transit between hubs while minimising detection risk, and financial systems sufficiently porous to allow proceeds to be extracted and laundered across borders. Sri Lanka, with its tourism-dependent economy and visa-on-arrival policies, has emerged as an attractive alternative to more heavily monitored traditional hubs. Laos, similarly, offers geographic isolation, limited law enforcement resources, and cross-border financial corridors that facilitate money movement into Thailand and beyond.

The ASEANAPOL curriculum development initiative recognises that enforcement effectiveness depends on harmonised investigative standards and seamless intelligence exchange across national boundaries. The training framework emphasises victim identification and protection protocols, acknowledging that many scam victims suffer profound psychological trauma and financial devastation requiring coordinated social support alongside criminal investigations. The initiative also incorporates public-private cooperation mechanisms, recognising that telecommunications companies, financial institutions, payment processors, and technology platforms possess crucial data and forensic capabilities that law enforcement agencies require to trace criminal networks.

For Malaysia and other ASEAN members, the implications are multifaceted. Malaysian citizens and residents have become both victims and, in some cases, perpetrators of scam operations. The nation's position as a regional financial hub and technology leader makes it both a target for transnational fraud networks seeking to exploit Malaysian banking systems and a source of investigative expertise that can assist regional counterparts. Malaysian law enforcement agencies have developed considerable capacity in cybercrime investigation and financial crime tracing, capabilities that gain enhanced value through coordinated regional deployment.

The cross-border nature of these enterprises means that unilateral enforcement actions, however vigorous, prove insufficient. A scam centre dismantled in Cambodia may simply relocate its operations to Laos or Sri Lanka within weeks. Victims in Australia or Canada require coordinated investigation across multiple jurisdictions. Proceeds laundered through Malaysian banks must be traced through financial intelligence networks spanning multiple countries. This reality demands sustained commitment to intelligence-sharing frameworks, mutual legal assistance treaty implementation, and unified operational standards across ASEAN member states.

The challenge extends beyond law enforcement to address underlying structural vulnerabilities. Permissive visa policies in certain jurisdictions, corruption that enables scam operations to function openly, inadequate regulation of telecommunications and internet service providers, and porous financial systems that facilitate money laundering all require sustained policy attention at national and regional levels. Without addressing these enablers, enforcement pressure alone will simply redistribute criminal operations rather than genuinely dismantle them.

ASEAN's coordinated response, embodied in the ASEANAPOL curriculum and intelligence-sharing commitments, represents a necessary escalation in regional capacity to address transnational cybercrime. Yet success will ultimately depend on whether member states prioritise implementation of agreed protocols, allocate adequate resources to specialised cybercrime units, and demonstrate political will to prosecute perpetrators regardless of their nationality or connections to influential actors. The billions of dollars flowing into the region through scam operations represent both a law enforcement challenge and a development concern, as resources that might otherwise support legitimate economic activity are instead captured by criminal networks operating with near-impunity across porous regional borders.