A United Nations report released July 21, 2026 in Bangkok puts total fraud losses across East Asia, Southeast Asia, Australia, and New Zealand at between $88.3 billion and $114.1 billion for 2025, more than tripling the $18 to $37 billion recorded just two years earlier. The findings come from UNODC's "An Interconnected Criminal Ecosystem: Transnational Organized Crime Threat Assessment for South-East Asia 2026" and document a criminal economy that now spans continents, relies heavily on cryptocurrency infrastructure, and is accelerating with the help of generative AI.

Scale and Speed of Growth

UNODC describes organized crime in the region as having moved away from fragmented, locally rooted operations toward an increasingly integrated, technologically sophisticated transnational criminal economy.

China, South Korea, and Taiwan recorded the largest individual losses.

Workers from at least 80 countries and territories have been identified inside scam compounds concentrated in Myanmar and Cambodia. Some were trafficked under false promises of legitimate employment, while others entered as willing participants in criminal operations.

"The scale and complexity of this expanding organized crime economy are outpacing existing responses," said Inshik Sim, UNODC Lead Analyst.

Malvertising, the use of fake or hijacked online advertisements to redirect victims to fraud sites or deliver malware, grew 42% year over year in 2025 as syndicates expanded their digital recruitment methods.

Alongside AI-generated personas and deepfakes, low-earth orbit satellite connectivity is among the technologies syndicates have deployed in compounds operating across remote border zones.

The Crypto Layer

Cryptocurrency is not incidental to this ecosystem. It functions as the core financial infrastructure through which scam proceeds move and are laundered at scale.

USDT (Tether) is the dominant instrument used for that purpose.

Chinese-language money laundering networks processed roughly $44 million per day across nearly 1,800 identified wallets in 2025, totaling an estimated $16.1 billion in illicit volume for the year, according to Chainalysis.

The Cambodia-based Huione Group offers one of the clearest windows into how this financial plumbing works. The conglomerate processed $98 billion in total cryptocurrency inflows over roughly four and a half years and laundered at least $4 billion in illicit proceeds. That figure breaks down across three documented categories: $37 million traced to North Korean cyber heists, $36 million to crypto investment scams, and $300 million to other cyber fraud, illustrating the breadth of illicit sources the platform served.

In October 2025, the U.S. Treasury's FinCEN used Section 311 of the USA PATRIOT Act to cut Huione off from the U.S. financial system. The Justice Department later seized its backend cloud infrastructure.

A separate development carries significant implications for the stablecoin ecosystem. In January 2026, U.S. authorities transferred $225 million in seized USDT directly to Tether on Ethereum, bypassing exchanges entirely. The action set a precedent for how enforcement agencies can engage directly with stablecoin issuers to freeze and recover illicit funds.

The dominant scam type driving losses is what researchers call "pig butchering," a long-con fraud (known as shāzhūpán in Mandarin) where operators spend weeks or months building romantic or professional trust with a target, then gradually convince them to invest in fake cryptocurrency platforms before draining the account entirely.

The average payment per pig butchering incident reached $2,764 in 2025, up 253% from $782 in 2024. Operations using AI tools generated 4.5 times more revenue than traditional methods, per Chainalysis data.

Regional Exposure: South Asia and Africa

India sits in a particularly difficult position. The country's National Cyber Crime Reporting Portal recorded over 2.4 million complaints and approximately $2.7 billion (roughly ₹22,495 crore) in losses in 2025.

Beyond direct victimization, Indian nationals have been trafficked to Myanmar scam compounds through a documented two-step route. Victims are first recruited with offers of high-paying legitimate jobs in Thailand, then subsequently relocated across the border into Myanmar compound operations. That Thailand transit step is central to how the deception functions, presenting a plausible destination before the transfer occurs.

For South Asian fintech and crypto platforms operating P2P rails, OTC desks, or informal remittance corridors, the practical risk is concrete: these are active laundering pathways now under increased scrutiny from international compliance partners. Bangladesh and Pakistan face comparable exposure, given analogous patterns of youth unemployment, overseas worker migration, and low crypto-literacy that the UNODC report explicitly identifies as risk factors.

Africa's role in this ecosystem is expanding in two directions simultaneously. Fraud networks are actively targeting new victim pools on the continent as enforcement pressure mounts in Southeast Asia. At the same time, UNODC confirmed that African financial networks are being integrated into scam proceeds flows as a laundering node.

Nigeria and Kenya, both major crypto adoption markets, were enforcement targets in Interpol's Operation Red Card 2.0 (December 2025 to January 2026), which resulted in 651 arrests and the recovery of $4.3 million.

For Web3 builders and DeFi users in those markets, this creates a concrete regulatory headwind: cross-border stablecoin flows and P2P crypto trading are now directly in scope for international AML enforcement, even when underlying use cases are legitimate.

Enforcement Is Expanding, but So Are the Networks

A string of major operations in early 2026 demonstrates that law enforcement has grown more technically capable. Operation Atlantic in March identified more than 20,000 fraud-linked wallet addresses, froze $12 million, and disrupted more than 120 web domains.

An April strike on the Shunda Compound restrained $701.96 million in crypto and took down 503 fake investment websites.

A coordinated action in Dubai the same month dismantled nine compounds, resulted in 276 arrests, and referred 93 victims for suicide intervention.

Despite these operations, UNODC officials caution against treating disruption as a complete strategy. "It spreads like a cancer," said Benedikt Hofmann, UNODC Acting Regional Representative. "Authorities treat it in one area, but the roots never disappear; they simply migrate."

Delphine Schantz, a UNODC official tracking the regional organized crime economy, has made the same point in starker terms: "A counter-organized crime strategy focused on disruption alone does not work." Schantz has also documented how dismantled networks reconstitute: "They're going back to their country of origin and they're tapping into some existing criminal networks."

The data bears this out. Syndicates facing pressure in Southeast Asia have already opened physical operations in South America, where recruitment is actively targeting Spanish- and Portuguese-speaking workers. Simultaneously, networks are recruiting individuals fluent in German, Dutch, Polish, French, Italian, Norwegian, and Swedish. These recruitment patterns signal that the geography of this criminal economy is widening, not contracting.

For the crypto industry broadly, the trajectory points toward accelerating regulatory scrutiny of DEXs, cross-chain bridges, and permissionless protocols that serve high-adoption markets in Asia and Africa. Blockchain analytics firms are now standard partners in global law enforcement operations, and that integration is deepening with each enforcement cycle. For privacy-oriented communities within crypto, however, this expansion raises surveillance concerns that sit alongside the compliance opportunities, a tension that will sharpen as international enforcement operations grow in scope and technical sophistication.