Bangkok’s “Phantom Cell Tower” Busted: Inside the Mobile Phishing Scam
Thailand’s Cyber Police, in collaboration with the local telecom operator AIS, carried out a large-scale operation dubbed “KHAO SAN”, during which two young Thai nationals were arrested for executing tasks on behalf of a Chinese criminal syndicate. The suspects employed a vehicle outfitted with concealed equipment designed to broadcast mass waves of fraudulent SMS messages containing links to phishing sites. The action followed an earlier arrest in August connected to the same line of investigation.
According to police reports, the perpetrators had installed inside the car a complex setup consisting of a so-called False Base Station, routers, and antennas, all powered by a portable generator. The equipment was ingeniously hidden both inside and outside the vehicle, disguised to resemble decorative elements. This configuration enabled the real-time distribution of text messages masquerading as official notifications, redirecting unsuspecting victims to fraudulent websites.
At the time of their arrest, the two suspects—aged 25 and 23—were found inside a Suzuki Ertiga driving through Bangkok’s busy streets. Authorities noted that even while under surveillance, the investigators’ own phones continued receiving malicious SMS messages. Alongside the broadcasting system, a Wi-Fi repeater was also discovered in the vehicle, operating in tandem with the false base station.
Investigators revealed that one of the arrested men had initially been offered employment by a Cambodian intermediary linked to a Chinese coordinator. At first, his duties involved escorting a foreigner around the city, but soon he received a parcel containing the specialized equipment and instructions for installation. The system was controlled through a dedicated application for mass messaging. The young men were paid on a daily basis, with the costs of vehicle rental covered by the Chinese organizer. Their routes targeted Bangkok’s most crowded areas, including Khao San Road, Chinatown, Thonglor, Huai Khwang, and other bustling districts.
The suspects now face a wide range of charges, including illegal use of radio frequencies, operating an unauthorized telecommunications station, attempted fraud, and inputting false data into computer systems. They have also been accused of active participation in a criminal organization.
The investigation is ongoing, with Thai authorities seeking to determine whether this incident is connected to previous cases and whether a larger, centralized network is being orchestrated by the same Chinese mastermind. Law enforcement officials have vowed to identify the foreign organizers and dismantle the entire scheme to prevent future attacks.
