Southeast Asian Cyber-Syndicates

Not an FTONo U.S. State Department Foreign Terrorist Organization designation as of November 14, 2026

Profile Overview //

Threat Tier

Tier 2 - Transnational / Professionalized

Volatility Index

VI-3 - Moderate

Organization Type

Cyber / Scam Syndicate

Operational Status

Active

Designation Status

US TCO designation (E.O. 13581)

FTO Designation

Designation Detail

REPORTED (Orrick): Treasury designated a Southeast Asia-based transnational criminal organization in October 2025 under Executive Order 13581 over scam compounds; OFAC sanctioned nine individuals and 26 entities on June 23, 2026. CONFIRMED: FinCEN designated Cambodia-based Huione Group a primary money laundering concern under Section 311 of the USA PATRIOT Act in October 2025 and proposed an amendment in June 2026. Not designated a Foreign Terrorist Organization as of November 12, 2026.

Area of Operation

Southeast Asia, East Asia, Europe

Specific AOR

REPORTED: Cambodia, Hong Kong, Thailand and the United Kingdom (entities sanctioned June 23, 2026). DATA DEFICIT: Full compound geography.

Force Strength

DATA DEFICIT: No sourced figure.

Leadership

REPORTED: The June 2026 sanctions targeted the organization's second-in-command and major investors in scam compounds; the Orrick summary names no individuals. DATA DEFICIT: Leadership.

Headquarters

Phnom Penh, Cambodia (approximate regional marker)

Coordinates

11.5564, 104.9282

Operational Monikers

Scam compound operators, pig-butchering networks, Huione Group (laundering platform)

Last Verified

2026-11-12

Operational Brief //

CommandEleven Intelligence Desk // Transnational Organized Crime Desk, status as of November 12, 2026

Bottom Line Up Front. Southeast Asian cyber-scam syndicates run large fraud operations from compounds in Cambodia and neighboring countries and launder the proceeds through payment platforms and cryptocurrency. In October 2025 Treasury designated a Southeast Asia-based transnational criminal organization over scam compounds, and FinCEN designated the Cambodia-based Huione Group a primary money laundering concern. On June 23, 2026 Treasury sanctioned nine individuals and 26 entities, FinCEN proposed to extend the Huione rule to a successor entity, and the Justice Department seized Huione's backend infrastructure. We assess that the sector adapts quickly: a new licensed payment institution reportedly took over the prior entity's role.

What We Could Not Source. Membership, total revenue, the names of all syndicates, and the cross-border structure. Our verified sources cover the U.S. financial actions, not the compound operators themselves. The Prince Group has its own profile.

History, Goals and Doctrine //

Operational History

CONFIRMED: October 2025 U.S. designation and Huione Group rule. CONFIRMED: June 23, 2026 coordinated action: OFAC sanctions, a FinCEN proposed rule adding Pay Service PLC and a "successor entity" definition, and a Justice Department seizure of Huione's backend infrastructure. REPORTED: FinCEN said a newly licensed Cambodian payment institution took over the prior entity's role.

Operational Goals

ASSESSED: Run fraud operations and launder proceeds through payment and crypto channels.

Ideology

None. Profit-driven criminal enterprise.

Org Doctrine

Business-style compound operations backed by laundering platforms.

Regional Command

DATA DEFICIT: Not publicly mapped.

Operational Signature

Online investment and romance fraud run from compounds; laundering through payment platforms, banks and cryptocurrency.

Flashpoint

CONFIRMED: June 23, 2026 U.S. coordinated action.

Primary Adversaries

U.S. Treasury, FinCEN and Justice Department; regional authorities.

Terror Group Links //

Link Nature

Logistical / Smuggling

Evidence Tier

DATA DEFICIT

Link Evidence

DATA DEFICIT: We found no sourced link between the cyber syndicates and a terrorist group.

Capabilities and Finance //

Weaponry Focus

Small Arms (Pistols/Rifles)

Technology Profile

DATA DEFICIT: No sourced assessment. We do not publish technical specifics.

Financial Vectors

Cryptocurrency / Dark Web TransfersReal EstateHuman Trafficking

Spatial Profile

Urban and border compounds in Cambodia and neighboring countries; financial nodes in Hong Kong, Thailand and the UK.

Cyber Assessment

DATA DEFICIT: No sourced information.

Governance and Control //

Territorial Controllers

DATA DEFICIT: Plaza-level controllers are not publicly mapped.

Administrative Responsibility

ASSESSED: Fraud operations and laundering.

Administrative HQ

DATA DEFICIT: Not publicly confirmed.

Command Table

DATA DEFICIT: No sourced information.

Court Registry

CONFIRMED: Justice Department seizure of Huione backend infrastructure announced June 23, 2026.

Disruption Vector Matrix //

Logistical Vulnerability

Dependence on payment platforms and licensed financial intermediaries.

Logistic Strategy

Successor-entity rules and platform takedowns.

Financial Vulnerability

Concentrated laundering through a few platforms.

Financial Strategy

Section 311, sanctions and infrastructure seizures.

Leadership Vulnerability

Investors and second-in-command are now sanctioned.

Leadership Strategy

Continue targeting investors and facilitators.

Disruption Strategy

Section 311 actions against laundering platforms, sanctions on investors and fronts, infrastructure seizures and cooperation with regional partners.

Threat Matrix //

Operational Threat

4 - High (National/Cross-Border Infiltration)

ASSESSED: Moderate to high financial harm to victims worldwide, with associated forced labor.

Kinetic Capability

1 - Minimal (Low-yield/Uncoordinated)

ASSESSED: Low.

Logistical Resilience

3 - Medium (Localized Taxation/Smuggling Links)

ASSESSED: High. Operators replaced the sanctioned payment entity quickly.

Information Influence

2 - Low (Localized Printed/Audio Leaflets)