India’s cybercrime authorities helped locate a scam compound in Cambodia after detecting a distress message from Indian nationals held inside the facility, leading to the rescue of 81 people, according to a new report released by the Financial Action Task Force (FATF).
The report, published on November 5, 2026, details how India’s embassy in Phnom Penh worked with the Indian Cyber Crime Coordination Centre (I4C) to identify the location of the compound in Bavet, Cambodia, during late 2025.
The findings also reveal how Indian job seekers were recruited through fraudulent employment offers, transported across international borders and forced to participate in online scams.
The global anti-money laundering watchdog has warned that such operations have developed into organised criminal businesses capable of generating billions of dollars through cyber fraud, human trafficking and money laundering.
Distress Message Helped Authorities Locate Cambodian Scam Centre
The rescue operation began after Indian nationals held inside a scam compound in Bavet, a city near Cambodia’s border with Vietnam, issued a public distress message.
The Indian embassy identified the message and established contact with the people seeking help.
It then asked I4C to determine the compound’s location using publicly available digital information, a technique known as open-source intelligence.
Such investigations can involve examining images, maps, online posts and other information available through public sources to identify a location.
Once the site was identified, Indian officials escalated the information to Cambodian authorities.
The intervention resulted in the rescue of 81 Indian nationals over two days.
The rescue occurred in late 2025, while the November 5 report provides new international documentation of how the operation was coordinated.
The report does not identify the operators of the particular Bavet compound or specify how many people were arrested following the rescue.
It also does not establish that every person rescued was involved in the same type of online fraud.
Fake IT Jobs And Recruitment Fees Trapped Indian Workers
The report examines a separate group of 15 Indians repatriated from scam compounds in Cambodia, Laos and Myanmar during 2023 and 2024.
Their accounts revealed striking similarities in recruitment methods, travel routes and the conditions they faced after arriving overseas.
Many were offered supposedly well-paid jobs in customer service or information technology.
They generally travelled through Thailand before being transported to scam facilities in neighbouring countries.
Some recruitment networks charged workers between ₹50,000 and ₹70,000 in fees, collected through cash or online payments.
These payments could contribute to debt bondage, leaving workers financially dependent on the people controlling their employment and movement.
Instead of performing the legitimate jobs they had been promised, the recruits were coerced into carrying out fraudulent online activities.
The cases from Laos involved intermediaries who facilitated transportation to inland facilities, while those involving Myanmar were connected to compounds in conflict-affected areas.
Investigators also gathered information about trafficking routes, recruitment agents, methods of coercion and the forms of cyber fraud that workers were forced to conduct.
The findings highlight an important distinction between people directing these criminal enterprises and trafficked workers compelled to participate in them.
A person found inside a scam compound may be a victim of trafficking rather than a willing member of the criminal network.
SIM Boxes, Payment Gateways And Crypto Support Scam Networks
The report describes scam compounds as organised businesses supported by specialised services operating across several countries.
Within the compounds, criminal operators may manage worker accommodation, salaries, technology and the physical infrastructure required to conduct scams.
However, many essential services are outsourced.
These include recruitment agents, illegal payment gateways, SIM suppliers, data brokers and operators providing international calling facilities.
SIM boxes are devices capable of routing large volumes of calls through mobile connections. Criminal networks can misuse them to disguise international calls as local traffic or support mass scam communications.
The report also identifies services that convert cash into virtual assets, including cryptocurrency, allowing criminal proceeds to move through different financial channels.
Such arrangements can make investigations more difficult because a single scam may involve multiple intermediaries located in different countries.
The organisers may control the operation without directly managing every bank account, phone number or digital wallet used to target victims.
FATF warned that scammers increasingly use AI-generated material, deepfakes and automated communications to reach more victims.
It also observed that criminal groups are moving away from relying exclusively on large compounds towards smaller, dispersed operations that can relocate when authorities intervene.
FATF Highlights India’s Cyber Fraud Response System
The November 5 report identifies India’s I4C as an example of an integrated approach to cybercrime reporting, financial intervention and coordination between investigative agencies.
Its Citizen Financial Cyber Fraud Reporting and Management System connects complaints with banks, payment aggregators, e-commerce platforms and virtual asset service providers.
This allows authorities and financial institutions to identify suspicious money trails and attempt to freeze assets before stolen funds disappear through multiple transactions.
The report also highlights Sahyog, which supports requests involving online-content removal and virtual asset service providers, and Samanvaya, which helps connect investigations across states.
Samanvaya includes a dedicated mechanism for information relating to people rescued from scam compounds and illegal recruitment networks.
The FATF report urges countries to act against the entire criminal ecosystem rather than concentrating only on raids against physical compounds.
Its recommendations include identifying recruiters, tracing suspicious payments, disrupting telecommunications infrastructure and improving cooperation between governments, banks and technology companies.
The watchdog emphasises that the first 24 to 72 hours after fraud is detected can be particularly important for tracing and freezing stolen funds.
Its findings show that dismantling international scam networks requires action against both the criminals directing operations and the financial and technological services keeping them active.
What This Means For You:
Verify overseas job offers through official channels before paying recruitment fees or travelling abroad. If someone reports being held at a suspected scam facility, contact Indian consular authorities and law enforcement promptly rather than relying on recruiters or intermediaries.
