Southeast Asia Scam Economy: A Digital Infrastructure Problem
Southeast Asia's scam economy is a digital infrastructure problem — and it matters for every founder building on the region's financial rails.
Every crackdown on SEA's fraud compound industry produces the same sequence. Governments announce enforcement. Compounds close or relocate. Workers are displaced. A few months later, the same operations are running at similar scale from a different jurisdiction. In January 2026, Cambodia announced it would eradicate its scam compound industry by April. Most operations relocated to Thailand and Vietnam. One compound on the Thailand-Cambodia border spans 197 acres — the equivalent of 150 American football fields — and continued operating through the announced eradication period. The East Asia Forum called it the "whack-a-mole" scam economy. The metaphor is accurate. The explanation it implies — that enforcement is underfunded or underpowered — is not.
The Compound Is a Business
The scam compound is structurally an industrial services operation. Workers — the majority trafficked, recruited through fake job listings — are assigned to specialized fraud campaigns: pig-butchering investment scams, romance fraud, AI-generated voice phishing, crypto recovery schemes. Each has management layers, conversion rate KPIs, and training playbooks. The OHCHR estimates 220,000 people are currently trapped in these operations across Myanmar and Cambodia. The LSE Business Review's February analysis described them as "industrialised fraud factories" running with the same operational discipline as a call center outsourcing firm — because that is, in structural terms, what they are.
The humanitarian dimension is real and deserves coverage. But it is also a distraction from the more durable analytical question: why does this industry survive every crackdown? The answer is not lack of political will, though political will is often absent. The answer is that the inputs to a scam operation — labor, digital accounts, payment clearance, and communication infrastructure — are either portable or distributed across jurisdictions in ways that no single crackdown can disrupt simultaneously.
The Infrastructure Anatomy
When Cambodia's January 2026 crackdown shut down physical compounds, the workers were stranded. Amnesty International flagged the resulting displacement as a humanitarian crisis. The tell is structural: the physical nodes — the compounds, the buildings, the workforce in them — are moveable. The financial infrastructure was not disrupted at all.
The payment flows inside a scam operation require the same infrastructure that a legitimate regional payment platform needs: cross-border transfers, digital wallet clearing, currency conversion, and a network of informal money intermediaries who sit at the boundary between formal and informal finance. USDT and other stablecoins have become a growing clearance layer — fast, cross-border, and operating on wallet infrastructure that regional crypto exchanges and digital asset platforms are actively building out. A scam payment that originates with a victim's e-wallet in the Philippines, transfers to a clearing account in Cambodia, and converts to USDT moves through similar technical architecture as a legitimate B2B remittance using the same corridor — the difference lies in the identity verification at each node, not the rails themselves.
The SCMP's analysis of the industry's durability named the mechanism directly: "everyone gets a cut." The scam economy is not parasitic on SEA's political economy. It is co-evolved with it. In Myanmar, compounds operate under the protection of ethnic armed organizations that also control border trade. In Cambodia, the compounds are built inside special economic zones originally developed for Chinese tourism investment, with the same infrastructure subsidies and regulatory light-touch that governments use to attract legitimate FDI. The mechanisms are different — armed organization protection in Myanmar, state-adjacent investment structures in Cambodia — but both reflect a political economy where the same conditions that accelerate legitimate digital commerce also provide cover for fraud at scale.
Why the Whack-a-Mole Mechanism Is Structural
The mobility of the scam industry is a function of how digital infrastructure is layered, not a failure of enforcement ambition.
The fraud playbook is platform-agnostic. WhatsApp, Telegram, Instagram, and WeChat are all viable targeting surfaces. Switching between them requires no physical infrastructure and minimal retraining. The digital accounts used in campaigns — the fake personas, the aged social media profiles, the verified phone numbers — are purchased in bulk from account farms in countries where identity verification is weakest. When one platform cracks down, the operation rotates and continues purchasing accounts from a different supplier. The account farm ecosystem is a distinct and largely unregulated sub-industry that spans jurisdictions no single regulator controls.
The payment clearance layer is the most durable because it is the most formally integrated into the regional financial system. Informal money service businesses — remittance agents, pawnshops, unlicensed currency exchange operators — serve as the last mile for both scam proceeds and legitimate cross-border payments. They are the same channels used by migrant workers sending remittances home, by rural SMEs receiving payments from urban buyers, by the first digital financial experience for many consumers in underbanked populations.
The Dual-Use Infrastructure Problem
Eight ASEAN economies are now connected through bilateral QR payment linkages. The expansion to India, Japan, and Hong Kong is underway. The QR linkages are a genuine infrastructure achievement. Regional commerce is faster, cheaper, and more accessible for small merchants. It is also an expansion of the cross-border rail network that informal money movers use to clear funds across jurisdictions without triggering the transaction monitoring that a SWIFT transfer would.
The dynamic is the dual-use infrastructure problem. The same frictionless onboarding that drives e-wallet adoption creates the account supply that scam operations purchase in bulk. The same real-time payment rails that make regional commerce efficient make cross-border fund movement fast enough to outrun forensic investigation. The same regulatory arbitrage that founders exploit to launch in a market before compliance costs scale is the arbitrage that account farms exploit to operate in jurisdictions where identity verification is weakest.
The distinction is where in the infrastructure stack the scam economy operates most freely. Regulated e-wallet platforms — GCash, Maya, GoPay — carry meaningful KYC requirements and transaction monitoring obligations. They are not the primary surface. The highest concentration of scam clearance activity sits at the informal MSB layer — the pawnshops, unlicensed remittance agents, and cash-in/cash-out operators that formal fintech platforms depend on for last-mile liquidity. There, identity verification is thinnest, enforcement is most inconsistent, and the formal and informal economies are most entangled. Founders who assume that operating through regulated channels insulates them from the dual-use problem are right about their own platform and wrong about the system they are part of.
What This Means for Operators
Compliance is a network contribution, not just a firm-level cost. Every platform that ships with weak account verification is not just creating a liability for its own fraud detection team. It is contributing to the account supply that scam operations purchase. The network effect of KYC quality runs in both directions. Platforms that treat compliance as a minimum viable control contribute to the conditions that will eventually produce stricter regulation for everyone. Regional central banks — BSP in the Philippines, OJK in Indonesia — have increased scrutiny of e-money issuers in recent cycles, and the scam economy's growing international visibility makes further tightening likely. Platforms with the weakest controls today will face the largest retrofitting costs.
Cross-border corridors carry structured fraud risk. Fintech founders building on high-exposure corridors — Philippines to Cambodia, Vietnam to Myanmar, any route that passes through informal MSB networks — should model fraud surface area the same way a lender models default risk: as a structural cost that requires provisioning, not an exceptional case. The scam economy is not declining. As AI-generated synthetic media improves voice cloning, deepfake identity creation, and personalized targeting at scale, the next phase of SEA's scam economy will overlap increasingly with the AI application layer that legitimate startups are also building — creating a new version of the dual-use problem at the product surface rather than the rails layer.
The infrastructure problem has no clean solution, and founders who wait for governments to solve it are mispricing the risk. Crackdowns will continue to produce whack-a-mole dynamics as long as the political economies that sustain the physical compounds remain intact — and those political economies are not changing on a fintech company's roadmap timeline. The founders who build durable businesses on SEA's financial rails are the ones who treat the scam economy not as an externality but as a structural feature of the operating environment — the same way they treat currency risk, regulatory uncertainty, or infrastructure latency. It is not going away. It is going to get more sophisticated. Build accordingly.
