A violent late-night confrontation between two groups of Chinese nationals near a suspension bridge outside Colombo has left one man dead and pulled Sri Lankan investigators into what now looks like a transnational cyber-fraud network operating with troubling freedom on the island. The case has been handed to the Colombo Crimes Division, a signal of how seriously authorities are treating its wider implications.
Two Chinese nationals were arrested attempting to flee the country through Bandaranaike International Airport, while a third victim was found dead in Eheliyagoda, his hands and legs bound, eyes covered, and his body concealed under stones. Two others abducted alongside him were recovered alive, tied up, inside Colombo Port City itself.
An Abduction That Points to Organised Crime
According to police accounts, three Chinese nationals had gone fishing near the bridge the previous night when, at around 2 a.m., a second group of roughly twenty Chinese nationals arrived, armed, and abducted them by force. The scale and coordination of that response, twenty men mobilised in the middle of the night, is itself being read by investigators as evidence of an organised structure behind the attack rather than a spontaneous personal dispute.
Investigators found that the Chinese nationals involved had entered Sri Lanka roughly four months earlier with no record of lawful employment or legitimate business activity, a detail that has become a familiar marker in the island’s recent cybercrime cases. Police have seized two vehicles, including a luxury SUV, and are now examining digital evidence recovered from the scene in the hope of identifying the wider network the victim and his attackers were allegedly part of.
A Pattern Sri Lanka Can No Longer Treat as Isolated
The Port City killing lands amid what has become an unmistakable surge. Official figures show more than a thousand foreign nationals, overwhelmingly Chinese, Vietnamese and Indian, were arrested in connection with cyber-fraud operations in Sri Lanka in just the first five months of 2026 alone, a pace authorities say already exceeds half of all such arrests recorded in the whole of 2025. Raids this year have ranged from 152 foreign nationals detained at a rented hotel in Chilaw to roughly 120 suspects, drawn from countries including China, Cambodia, Malaysia and the Philippines, arrested across multiple floors of a residential complex in Rajagiriya.
The operational pattern differs from the sprawling scam compounds seen in Myanmar and Cambodia. Sri Lankan investigators describe smaller cells of five to ten people rotating between hotels, rented flats and offices every few months, a structure built specifically to stay ahead of law enforcement. Sim-box devices capable of running hundreds of cards simultaneously, forged US Treasury letters, and fabricated company registration documents have all turned up in recent raids, evidence of operations sophisticated enough to target victims well beyond Sri Lanka’s own borders.
Displacement, Not Disappearance
The broader regional context is not incidental. Sri Lankan officials and researchers increasingly view the island’s cyber-fraud boom as displacement rather than a new phenomenon, syndicates pushed out of Myanmar, Cambodia and Laos by coordinated international crackdowns relocating to a country the Chinese embassy in Colombo itself has acknowledged offers “well-developed telecommunications infrastructure” and “relatively lenient visa policies.” Investigators are now examining whether Chinese Triads, the transnational organised crime networks long associated with such operations across Chinese-speaking diaspora communities, played a direct role in the killing.
Prof. Triveni Singh, the cybercrime expert and former IPS officer, said Southeast Asia’s fraud syndicates have shown a consistent pattern of relocating operations the moment one jurisdiction tightens enforcement, making cross-border intelligence sharing and joint investigation essential rather than optional. He urged the public, in India and the wider region, to treat unsolicited investment, romance or employment offers with scepticism, use only verified platforms, and thoroughly verify any proposal before sharing money or personal information, cautioning that the same networks implicated in violence in Colombo have historically drawn victims from across Asia, India included.
