Sri Lanka's tranquil streets are giving way to a more sinister reality – one of transnational cybercrime, as large-scale scam operations relocate to the island nation in search of easier targets and more lenient regulations. The influx of Chinese-run criminal networks has left authorities scrambling to keep pace with an "alarming" surge in online scams.
According to Fredrick Wootler, a spokesperson for the Sri Lankan police, there has been a marked increase in cybercrimes perpetrated by individuals entering the country on tourist visas. These visa holders have established illicit operations designed to defraud people worldwide. Since the beginning of the year, Sri Lankan authorities have conducted over a dozen raids on suspected scam centres, resulting in the arrest and deportation of nearly 700 foreign nationals – predominantly Chinese citizens.
In one recent raid in Colombo, police detained 18 Chinese nationals and one from Laos. The discovery of sophisticated forgery equipment, including devices for creating fake legal certifications, counterfeit US Treasury documents, and falsified company registrations, has sparked concerns about the scale of these operations. An anonymous officer from the crime investigation bureau highlighted the finding of 62 passports, mainly Chinese, alongside phones, laptops, and stamps for forging documents. One forged certificate, framed and displayed, falsely claimed the operation was a US-registered business valued at $10 billion.
The migration of criminal enterprises to Sri Lanka is attributed to its relatively lenient regulations on tourist visas – including the newly introduced 'digital nomad' visas. Furthermore, the country's limited oversight on SIM card registration and internet connections, coupled with affordable office and hotel rentals, makes it an attractive location for these highly mobile operations. Mark Bo, a cybercrime researcher, noted a discernible shift towards Sri Lanka in Telegram discussions and recruitment drives over the past two years, underscoring the adaptability of these criminal networks.
This development poses a significant threat to UK businesses and consumers, who may face increased exposure to sophisticated online fraud. The National Cyber Security Centre (NCSC) frequently advises UK citizens on the growing threat of cyber scams, which often originate from such transnational networks. These operations specialise in various forms of fraud, from romance scams and cryptocurrency investment schemes to online gambling and money laundering, all designed to extract funds from unsuspecting victims globally.