UN Warns of New Cyberfraud Hub in Timor-Leste
The United Nations has issued a warning about a new trend in the operations of international criminal networks. According to a report by the UNODC, evidence of fraudulent centers has been uncovered in the Special Administrative Region of Oecusse-Ambeno in Timor-Leste: law enforcement officers discovered SIM cards and satellite internet equipment in one of the hotels. Investigations revealed links between the seized materials and companies connected to convicted cybercriminals, operators of illegal gambling networks, and groups associated with the triads. Timor-Leste, which only gained independence in 2002 and has a GDP of less than $2 billion, has now emerged as a fresh target for such structures.
According to the UN, the shift is rooted in the increasing pressure exerted by police and security agencies on traditional hubs of criminal activity in Southeast Asia. Heightened oversight has complicated operations for fraud syndicates in Cambodia, Myanmar, and other countries in the region, pushing them to seek out new territories with little experience in countering such schemes. Timor-Leste fits this profile: with limited resources for monitoring and enforcement, criminal syndicates are attempting to entrench themselves there under the guise of legitimate investment. Shell companies, professional intermediaries, and multiple passports are employed to blur the boundaries between illicit business and the formal economy.
The UN’s warning came just three days after the U.S. Department of the Treasury announced new sanctions against cyberfraud centers in Myanmar and Cambodia. American authorities stated that in Myanmar such compounds operate under the protection of the Karen National Army, an armed group aligned with the military junta. With this cover, two individuals — She Zhijiang and Saw Chit Thu — transformed a small village on the Moei River into a resort town designed for gambling, drug trafficking, prostitution, and fraudulent schemes targeting, among others, U.S. citizens. The Treasury specifically emphasized that Zhijiang is the founder and majority shareholder of the Yatai New City complex.
In Cambodia, the Treasury noted that the sanctioned centers were initially established by Chinese criminal groups as casinos. Over time, however, they proved far more profitable as venues for cryptocurrency investment fraud, and their operational focus shifted rapidly. The sanctions entail the freezing of all assets and property of the named individuals and companies within U.S. jurisdiction, as well as a prohibition on American entities conducting business with them.
The situation in Timor-Leste appears especially alarming against the backdrop of the nation’s planned accession to the Association of Southeast Asian Nations (ASEAN). Experts warn that if the infiltration of fraudulent centers is not curbed, the consequences could undermine not only the internal security of the young republic but also the stability of the wider region. The unfolding developments in Oecusse-Ambeno highlight the ability of transnational criminal structures to adapt fluidly to pressure and relocate their operations to environments where resistance is weakest.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.