"Cyber-enabled and crypto investment fraud is devastating Main Street Americans, wiping out life savings and preying on some of our most vulnerable citizens," said U.S. Attorney Jeanine Ferris Pirro for the District of Columbia.
Scam Center Strike Force and the May 18, 2026 "Disruption Week"
The U.S. Department of Justice described a coordinated operation beginning May 18, 2026, branded "Disruption Week," conducted as part of the ongoing Scam Center Strike Force initiative. The effort targeted transnational criminal organizations running cyber-enabled fraud and so-called "pig butchering" (romance baiting) scams that the DoJ says are operated from compounds in Southeast Asia. The operation combined government action and voluntary private-sector measures to interrupt networks that cultivate long-term relationships with victims, induce deposits to fraudulent investment platforms, and launder stolen funds.
Private sector partners and concrete actions taken
The DoJ named a suite of private-sector participants: Apple, Coinbase, Google, Meta, Microsoft, Silent Push, SpaceX/Starlink, TRM Labs, and Zenlayer. Those companies, together with international law enforcement partners — the Australian Federal Police, Canadian Anti-Fraud Centre, New Zealand Police, the Royal Thai Police, and the U.K. National Crime Agency — executed a range of technical and account-level interventions.
- Platforms and providers disrupted more than 1.4 million accounts, pages and groups across Facebook and Instagram, and 20,000 Microsoft accounts.
- Thousands of Starlink kits used by scammers were disabled or interrupted.
- Companies and partners interrupted malicious IP address traffic and network connections, decommissioned servers and hosting infrastructure, and identified multiple scam platforms for referral to U.S. authorities.
Scale of financial disruption and arrests
Private-sector entities voluntarily froze over $3.8 million in cryptocurrency that the DoJ said was involved in laundering funds stolen from Americans. In a coordinated statement cited by the DoJ, Meta said law enforcement has arrested 63 potential criminals connected to scam centers thus far, and Coinbase froze over $3 million in cryptocurrency assets tied to criminal networks.
Separately, the Royal Thai Police opened new cases through its Anti-Cyber Scam Center and arrested seven suspects in Thailand tied to the operation. The DoJ also cited a related international sweep last month in which U.S. and Chinese authorities arrested at least 276 suspects and shut down nine scam centers used for cryptocurrency investment fraud schemes targeting Americans.
How the schemes operate and the human cost
The DoJ characterized the frauds as relationship-based confidence schemes: perpetrators cultivate victims over time, coax them into depositing funds into bogus investment platforms promising high returns, and then divert those assets into accounts under the scammers' control. The department reported reported losses from cryptocurrency investment scams rising from $3.96 billion in 2023 to $5.8 billion in 2024 and to more than $7.2 billion in 2025, a 24% year-over-year increase.
The DoJ also described the criminal ecosystem behind many of these schemes. According to the announcement, criminal syndicates operate out of industrial-scale compounds in Cambodia, Laos, and Burma along the border with Thailand; they recruit or lure workers to Thailand with promises of high-paying technical jobs, seize identification documents, and traffic people into scam compounds. Within those compounds, trafficked workers are frequently forced to conduct fraud operations against victims under threat of violence.
What this means for technologists, policymakers, and victims
- Technologists and security teams: Expect continued, voluntary coordination with law enforcement and hosting platforms to take down accounts, decommission infrastructure, and interrupt IP traffic tied to scam operations. The operation demonstrates the scale of resources some criminal networks use — from social-media accounts to Starlink kits — and the need for cross-company action.
- Policymakers and law enforcement: The Scam Center Strike Force model emphasizes international investigation and extradition referral pathways; the DoJ highlighted referrals of identified scammers and platforms to U.S. authorities for investigation and possible prosecution, and the Royal Thai Police reported new arrests and cases.
- Affected victims and the public: The DoJ framed these schemes as rapidly growing and highly damaging to Americans' finances; freeze actions by companies such as Coinbase and coordinated account takedowns aim to limit further laundering and to preserve assets for potential forfeiture or restitution.
Police Lieutenant General Jirabhop Bhuridej of the Royal Thai Police framed the cooperation sharply: "Transnational online fraud cannot be solved by any single agency or country acting alone, which is why strong collaboration and timely information sharing remain essential to dismantling these networks and protecting the public." The operation produced immediate technical and legal results — account disruptions, asset freezes, infrastructure decommissioning, arrests, and referrals — while leaving a substantial caseload for investigators and prosecutors in multiple jurisdictions.
Original story: https://thehackernews.com/2026/06/doj-disrupts-southeast-asia-crypto.html
