Chinese Cybercrime Op EXPOSED—Massive Raid Unveiled

Person using tablet surrounded by cybersecurity icons

Sri Lanka’s police have arrested 152 foreign nationals in a massive raid on a Chinese-run cyberscam operation, exposing how criminal networks exploit coastal tourism infrastructure to defraud victims worldwide—raising questions about border security and the reach of transnational organized crime.

At a Glance

Sri Lankan police arrested 152 foreign nationals, mostly Chinese, on April 3, 2026, for operating a cyberscam center from a rented hotel in Chilaw, 80km north of Colombo.
Officers seized 143 laptops, 120 desktops, and 370 mobile phones; two suspects were hospitalized after attempting to escape during the raid.
Suspects were remanded until April 9 for investigation, facing potential criminal charges or deportation under Sri Lankan law.
This marks the second major crackdown in weeks, following a March 18 raid that arrested 135 suspects, signaling escalating law enforcement response to organized cybercrime networks.

Massive Raid Disrupts Chinese-Linked Scam Hub

Sri Lankan police executed a coordinated raid Friday, April 3, 2026, targeting a hotel in Chilaw that had been converted into a full-scale cyberscam operation. The 152 arrested foreign nationals, predominantly Chinese men, had rented the facility to run phishing and investment fraud schemes targeting victims globally. Police spokesperson Frederick Wootler stated: “Those involved in scamming will be dealt with under our criminal law, while others could be deported.” The operation’s scale and sophistication underscore how organized crime groups exploit tourism infrastructure in developing nations.

Extensive Equipment Seized as Evidence

Officers confiscated 143 laptops, 120 desktops, and 370 mobile phones during the raid—hardware essential to the scam operation’s infrastructure. This equipment seizure represents a significant disruption to the network’s ability to continue defrauding international victims. Two Chinese nationals sustained injuries while attempting to escape and were hospitalized for treatment. The scale of hardware recovered demonstrates the industrial nature of these operations, which employ dozens of workers executing coordinated fraud schemes across multiple time zones.

Pattern of Escalating Law Enforcement Action

Friday’s raid represents the second major crackdown in less than three weeks. On March 18, 2026, immigration authorities arrested 135 suspects, including 126 Chinese nationals, in a similar alleged scam setup. The rapid succession of large-scale operations signals heightened vigilance and improved intelligence-sharing between Sri Lankan police and immigration authorities. This escalation reflects growing international pressure to combat transnational cybercrime networks that target victims across borders with sophisticated schemes.

Chilaw’s Vulnerability to Criminal Exploitation

Chilaw’s coastal location and established tourism infrastructure make it an attractive base for criminal enterprises seeking to operate covertly. The town’s hospitality sector provides convenient cover for scam centers disguised as legitimate businesses. Criminals exploit weak oversight and the transient nature of tourism areas to establish call centers where operatives execute phishing attacks and investment fraud targeting victims worldwide. This geographic vulnerability mirrors patterns seen across Southeast Asia, where similar cyberscam hubs have been discovered and dismantled.

Sri Lanka's immigration authorities raided an alleged Chinese-run online scam operation, officials said on Tuesday, arresting 135 suspects.https://t.co/BQDNnslA31

— The China-Global South Project (@ChinaGSProject) March 18, 2026

The suspects remain in custody pending investigation, with court-ordered remand until April 9, 2026. Sri Lankan authorities face decisions regarding criminal prosecution or deportation proceedings. This incident highlights the persistent challenge nations face in combating organized transnational crime and protecting citizens from fraud networks that operate across borders with minimal accountability.