Report : Digital Scams in Southeast Asia: A Criminal Industry Threatening Trust and the Economy

Organized scam centers, fake investments, banking fraud and social-media manipulation: cybercrime has become one of Southeast Asia’s major economic challenges. In a study published on 12 October 2026, the ASEAN+3 Macroeconomic Research Office (AMRO) warns about the scale of the problem, the difficulty of recovering stolen funds and gaps in protection. For Cambodia, the stakes extend beyond digital security to confidence in the financial system and the country’s economic appeal.

A criminal industry with an international reach

Sometimes it begins with a simple message. An unusually attractive investment opportunity, an unexpected job offer, an alarming bank notification or an urgent request from someone close. A few exchanges are enough to establish trust. Then comes the decisive moment: convinced that they are acting in their own interests, victims willingly transfer their money.

At the other end of the conversation, the person responding is not necessarily a lone scammer. They may belong to a structured organization employing specialists in psychological manipulation, digital technologies and money laundering.

What once appeared to be a succession of individual frauds has gradually become a full-fledged criminal industry.

In its study, Managing Digital Scam Risks in ASEAN+3: Regulatory Frameworks and Policy Responses, the ASEAN+3 Macroeconomic Research Office (AMRO) stresses that digital scams now pose a challenge extending well beyond consumer protection.

Their growth paradoxically accompanies Asia's digital economic progress. Instant payments, e-wallets, banking applications and commercial platforms have made transactions easier for millions. Yet these innovations also provide criminal networks with unprecedented opportunities.

According to projections cited by AMRO, ASEAN's digital economy, valued at approximately US$300 billion in 2023, could reach US$1 trillion by 2030. A more integrated regional regulatory framework could potentially raise that figure to nearly US$2 trillion.

This considerable growth naturally attracts criminal organizations that exploit fast transfers, growing numbers of users and differences between national regulations.

Work by INTERPOL and the United Nations Office on Drugs and Crime (UNODC), cited by AMRO, describes the proliferation of hundreds of large-scale scam centers across Southeast Asia. Some networks are also linked to money laundering and human trafficking.

Their geographical reach complicates enforcement: fraudsters can operate in one country, approach victims in another, receive funds in a third and subsequently transfer the proceeds through several jurisdictions.

Billions of dollars lost across the region

The scale of the problem is clear from the statistics assembled by AMRO.

According to Global Anti-Scam Alliance (GASA) surveys, approximately 63% of adults surveyed in six ASEAN economies—Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam—reported encountering a scam attempt in the preceding 12 months.

In the three “Plus-3” economies selected for comparison—Japan, South Korea and Hong Kong—the proportion was approximately 40%.

More troublingly, 22% of respondents in the ASEAN economies studied said they had lost money, compared with 8% in the Plus-3 group.

Official national figures confirm the financial significance of this criminal activity.

In Singapore, scams reported to the police accounted for S$913.1 million in losses in 2025, or approximately US$719 million. In Malaysia, losses associated with online scams reached 2.77 billion ringgit, approximately US$681 million.

In Indonesia, reported losses between November 2024 and December 2025 amounted to some US$509 million. In Thailand, online offences reported between March 2022 and August 2025 generated nearly US$2.9 billion in losses.

These figures cover different periods and use different reporting methods. They therefore cannot support a rigorous ranking of the most affected countries.

Nevertheless, they reveal a common reality: cybercrime is now sufficiently significant to command the attention of central banks, financial authorities and governments.

Cambodia faces a twofold challenge

For Cambodia, the study's conclusions carry particular significance.

The Kingdom has undergone a rapid transformation of its financial environment in recent years. The widespread adoption of QR-code payments, the rise of banking apps and the development of e-wallets have profoundly changed consumer habits.

These innovations have made commercial transactions easier and helped broaden access to financial services. They represent important progress for individuals and small businesses alike.

But modernization also brings new vulnerabilities.

According to Cambodian Ministry of Interior data cited by AMRO, reported losses from domestic online scams exceeded US$45 million in 2025.

This figure concerns officially recorded losses in the domestic market. It does not represent either the total proceeds of criminal networks operating in the region or losses potentially suffered by their foreign victims.

That distinction highlights two dimensions of Cambodia's challenge.

The first is protecting citizens, businesses and users of digital financial services.

The second is combating transnational criminal organizations that may use the country's territory as a base of operations.

These two challenges demand complementary responses: stronger banking security, digital education, criminal investigations, anti-money-laundering measures and international cooperation.

Cambodia's digital economy will depend in part on its ability to act on all these fronts.

When victims authorize the payments themselves

One of the main difficulties identified by AMRO lies in the nature of modern scams.

Unlike traditional bank fraud, in which criminals gain unauthorized access to an account, many scams today involve payments willingly authorized by victims.

One person believes they are investing in a legitimate financial company. Another thinks they are helping a relative. A business owner pays an invoice whose bank details have been fraudulently altered.

In each case, the transaction may be technically valid.

The user has personally approved the transfer, sometimes after completing several authentication steps.

Yet the decision is based on deception.

This form of authorized payment fraud presents a considerable challenge for financial institutions because the manipulation occurs before the banking system executes the transaction.

Scammers exploit universal psychological triggers: fear, urgency, trust, the prospect of profit or the need for affection.

Investment scams are among the most widespread categories. They promise attractive returns through platforms designed to look credible.

Shopping scams rely on fake listings or fictitious stores. Impersonation scams borrow the credibility of an institution or official representative.

Romance scams, meanwhile, often build a relationship gradually before financial requests begin.

These can cause particularly substantial losses for individual victims.

Social media and messaging apps: preferred entry points

Digital platforms occupy a central place in criminal strategies.

Phone calls and text messages remain important channels, but messaging apps and social networks now make it easier to contact potential victims.

In regional surveys cited by AMRO, Facebook and WhatsApp were each mentioned by more than half of respondents who had encountered a scam attempt.

Telegram and Gmail appeared in approximately one-third of responses, while TikTok and Instagram were cited by around one-fifth.

These findings do not imply that the platforms themselves participate in fraud. Rather, they show how criminals exploit communication tools that have become indispensable in everyday life.

Artificial intelligence adds another layer of difficulty.

It enables the rapid production of convincing messages, personalized approaches, automated conversations and misleading content.

Criminal networks can therefore multiply their attempts without proportionately increasing their workforce.

In response, protection can no longer rest solely with banks.

Telecommunications operators, technology companies and digital platforms must also contribute to identifying and removing fraudulent activity.

Money that disappears within moments

The speed of digital payments is one of the principal benefits of financial modernization.

But when a transaction is fraudulent, that efficiency becomes a major obstacle.

Once transferred, money can pass through multiple accounts, be converted into digital assets or cross borders before the victim even realizes what has happened.

AMRO observes that bank transfers are the principal payment method used by scam victims in seven of the nine economies studied.

In the Philippines, e-wallets occupy the leading position.

Methods vary from country to country, but the difficulty remains the same: criminals can move funds far faster than authorities can trace them.

The recovery statistics are particularly revealing.

In four ASEAN economies—Indonesia, Malaysia, the Philippines and Thailand—approximately 72% of victims who lost money reported the incident to the relevant payment provider.

Yet only 20% managed to recover at least some of their funds.

In the Plus-3 economies studied, 87% of victims filed a report and 46% recovered funds or had payments blocked before they reached the scammers.

These gaps reflect differences in procedures, monitoring capacity and protection mechanisms.

Above all, they demonstrate the importance of responding quickly.

Sometimes just a few minutes determine whether fraudulently transferred money can be recovered or is lost for good.

Lasting human and economic consequences

Behind the financial statistics are often devastating personal experiences.

For a family, the loss of savings can jeopardize a home purchase, education funding or essential expenses.

For a small business, a major fraud can cause a cash-flow crisis, delayed payments or difficulties servicing loans.

The psychological consequences can also be considerable.

Shame, a sense of betrayal and fear of judgment may lead some victims to remain silent.

According to surveys cited by AMRO, approximately 40% of scam victims surveyed in Southeast Asia reported at least one financial consequence, including reduced spending, difficulty accessing credit or increased debt.

But the effects go beyond immediate losses.

Nearly one-third of victims also reported greater distrust of digital tools and platforms.

This erosion of trust represents a significant risk for emerging economies.

If consumers see electronic payments as unsafe, they may hesitate to use mobile banking or make online transactions.

Cybercrime could then undermine progress in financial inclusion.

Banks face growing risks

Digital scams can also have indirect consequences for financial institutions.

A household that loses a substantial share of its savings may struggle to repay loans.

A business affected by fraud may be forced to scale back operations or postpone repayments.

Banks may also face additional costs related to investigations, compensation, stronger security systems and reputational damage.

AMRO cites the case of the US-based Heartland Tri-State Bank, which became insolvent in 2023 after its chief executive transferred approximately US$47.1 million into a scam involving fraudulent cryptocurrency investments.

The example illustrates the potentially severe consequences of an exceptional fraud.

However, the organization remains cautious in its assessment.

Available evidence does not establish that digital scams currently constitute a widespread systemic threat to banks across ASEAN+3.

So far, their direct consequences have generally been absorbed by the earnings and capital of the institutions concerned.

The greater risk lies in the gradual accumulation of economic losses, financial distress and declining trust in digital services.

Regulation remains insufficiently coordinated

The transnational nature of scams contrasts with regulatory systems that remain largely national.

Each country has its own legal definitions, reporting procedures, banking obligations and reimbursement mechanisms.

This fragmentation complicates investigations and can create opportunities for criminal networks.

AMRO identifies several complementary tools: anti-money-laundering measures, payment-system oversight, prudential regulation and loss-sharing arrangements.

Yet none covers the entire life cycle of a scam on its own.

The difficulty is especially evident when a victim is manipulated on a digital platform before any bank transaction begins.

Reimbursement is another sensitive question.

When someone personally authorizes a transfer after being deceived, who should bear the loss?

The customer, the bank, the telecommunications operator or the platform used to establish contact?

Several jurisdictions are developing shared-responsibility mechanisms based on the respective obligations of service providers and consumers.

The aim is to strengthen victim protection while encouraging all parties to improve preventive safeguards.

Prevent, detect and block before it is too late

For AMRO, prevention must be a priority.

Low recovery rates show that preventing a fraudulent transfer is generally more effective than trying to trace the money afterward.

Awareness campaigns should explain manipulation techniques, fake investment offers and the risks of sharing personal information.

They should also be tailored to different audiences: young social-media users, older people, merchants and first-time users of banking services.

Financial institutions must simultaneously strengthen monitoring of suspicious transactions, analysis of unusual behavior and identification of accounts used to move fraudulent funds.

AMRO recommends measures including transaction limits, confirmation delays, stronger warnings and mechanisms allowing users to suspend banking services quickly.

These safeguards may introduce some friction into transactions designed to be instantaneous.

But a small reduction in speed can provide the time needed to prevent fraud.

The challenge is to strike a balance between convenient payments and user security.

ASEAN must strengthen cooperation

The fight against digital scams can no longer be waged effectively by individual states alone.

Criminal networks can move operations from one territory to another, while funds pass through several jurisdictions.

Coordinated police operations have produced results, but they are often temporary. Some organizations can reconstitute themselves after their facilities have been dismantled.

AMRO therefore recommends more permanent regional cooperation involving police services, financial authorities, payment providers and telecommunications regulators.

Priorities include rapid information-sharing, harmonized statistical data, stronger mutual legal assistance and better procedures for freezing and recovering assets.

The growing integration of regional payment systems makes this coordination even more necessary.

In time, a bank detecting a suspicious transaction could immediately alert its foreign counterpart, allowing funds to be temporarily frozen within an appropriate legal framework.

Such arrangements must nevertheless comply with national privacy and data-protection rules.

Regional cooperation is therefore not about imposing identical regulations on every country, but about ensuring that differences between systems do not become safe havens for criminal organizations.

For Cambodia, a question of trust and investment appeal

AMRO's conclusions suggest that fighting digital scams should be treated as an integral part of economic development.

For Cambodia, the modernization of financial services is a major achievement. Electronic payments facilitate trade, support businesses and help integrate the country into the regional economy.

But these advances must be accompanied by effective protection mechanisms.

Users need to recognize attempted fraud, report incidents promptly and receive clear responses from the institutions involved.

Banks and payment providers must be able to identify suspicious transactions, while authorities need sufficient resources to prosecute organized networks.

International cooperation is equally important, given the cross-border nature of criminal organizations and the financial channels they use.

Beyond citizen safety, the credibility of Cambodia's financial system is at stake.

For investors, companies and international partners, transaction security directly contributes to the quality of the business environment.

The Kingdom's ability to combat digital scams is therefore a question of confidence, reputation and economic attractiveness.

Protecting trust to safeguard the digital future

Southeast Asia is entering a decisive phase of digital development.

Regional financial integration, the expansion of commercial platforms and the widespread adoption of instant payments offer enormous opportunities.

But these advances require security systems capable of evolving at the same pace as technology.

Transaction speed can no longer be the sole measure of a financial system's performance. Its ability to detect fraud, interrupt suspicious transfers and support victims is equally essential.

AMRO's study does not conclude that a systemic crisis is imminent. It does, however, stress that the scale, persistence and transnational nature of scams justify sustained action by the authorities.

For Cambodia and its neighbors, the challenge is now to preserve the benefits of the digital revolution without allowing criminal organizations to exploit its vulnerabilities.

Because behind the billions of dollars diverted, the compromised bank accounts and the organized scam networks lies a fundamental question: whether citizens can trust the institutions and technologies they use every day.

And in a region where growth increasingly depends on digital exchange, that trust may become one of the most valuable economic assets of all.

SOURCE

ASEAN+3 Macroeconomic Research Office (AMRO), Managing Digital Scam Risks in ASEAN+3: Regulatory Frameworks and Policy Responses, 12 October 2026.