Malaysian Police Bust 335 at Forest City Fraud Compounds, Crypto Scam Links Emerge
Malaysian authorities dismantled two transnational scam syndicates operating inside the country's most prominent ghost-town development, arresting 335 people on July 15, 2026, in the largest single-operation enforcement action yet at the Johor site.
Police raided 32 premises inside Forest City, a sprawling reclaimed-island development on the Johor Strait, seizing roughly RM 1 million (approximately US$245,000) in assets along with 1,557 mobile phones, 313 computers, 17 laptops, 10 modems, and one Mazda CX-8. The suspects, aged 20 to 58, were running coordinated love scams and cryptocurrency investment fraud targeting victims primarily in China and Indonesia, with additional targets in Japan, the United States, and Europe.
Two Syndicates, One Address
The first syndicate, comprising 279 suspects, ran romance fraud and fake crypto investment schemes. The second, with 56 members, impersonated law firms and recruitment agencies while also promoting fraudulent crypto investment opportunities. Johor Police Chief Comm Datuk Ab Rahaman Arsad confirmed the scope: "The fraud activities were carried out through investment and love scams, targeting victims from abroad."
Of the 335 arrested, 309 were Chinese nationals, 19 were Indonesian, four were from Myanmar, and three were Malaysian. The apparent paradox of Chinese nationals comprising the large majority of those arrested while China is simultaneously the primary victim country reflects a well-documented dynamic in regional scam compounds: Chinese-speaking operators are recruited or trafficked from mainland China specifically to target Chinese-speaking victims across the globe. Malaysian police charged 194 foreign nationals; 159 were prosecuted on the first day, with 35 more the following day. As of the raid announcement, the masterminds behind both syndicates remained at large. Agents on the ground were earning between RM 2,500 and RM 4,000 per month (roughly US$580 to $930), some recruited with a degree of agency and others potentially trafficked into the operation.
The syndicates recruited victims through Telegram, WhatsApp, and TikTok. The tenancy structure was deliberately obscured: apartment units were booked under a company name, while bungalow lots were registered under individual names. "The apartments were all booked under a company name, while the bungalow lots were under individual names," Arsad told reporters.
Forest City: The Infrastructure of Vacancy
Forest City was conceived as a US$100 billion development by Chinese property giant Country Garden Holdings, which built it in partnership with a Malaysian company linked to Malaysia's Yang di-Pertuan Agong (King) Sultan Ibrahim. The project targeted primarily Chinese buyers when it launched in 2016. Designed to eventually house 700,000 residents, it currently holds fewer than 10,000 people, roughly one percent of intended capacity. Country Garden's 2023 offshore debt default deepened the vacancy problem, leaving vast stretches of discounted luxury real estate accessible to foreign tenants with minimal scrutiny.
Forest City offers cheap space, international connectivity, and proximity to Singapore's telecommunications infrastructure. That combination has made the development an attractive base for transnational fraud operations. Opinion columnist Nelson Benjamin, writing in The Star on July 30, flagged the structural concern directly: "Syndicates appear to be leveraging Singapore's advanced telecommunication networks to carry out their scamming activities."
One analyst, Murray Hunter, writing on Substack, draws a direct comparison to Sihanoukville, Cambodia, where a Chinese-backed casino boom in the late 2010s gave way to large-scale scam compounds and human trafficking networks before partial crackdowns forced their dispersal. Johor, the argument goes, is following a similar trajectory.
The On-Chain Gap
Malaysian police have not released wallet addresses or transaction records tied to this operation, and have not publicly confirmed whether any blockchain analytics firm is assisting with fund tracing. That is a notable gap. In comparable enforcement actions, such as Interpol's Operation First Light 2026 (276 arrested, US$701 million frozen), investigators have engaged firms like Chainalysis and TRM Labs to trace proceeds through stablecoin and mixing pathways.
According to forensic patterns documented by Chainalysis and TRM Labs in comparable operations, USDT (the Tether stablecoin, primarily on the Tron network) functions as the primary settlement and laundering layer, routed through peer-to-peer exchanges and over-the-counter desks before moving offshore. No such data has been confirmed in this case.
The broader numbers are stark. According to the UN Office on Drugs and Crime, Southeast Asian scam networks cost victims between $88.3 billion and $114.1 billion in 2025 alone, roughly three times the upper range of the 2023 estimate. Chainalysis reports that crypto flows to services linked to human trafficking rose 85 percent year over year. That figure reflects the broader regional pattern, and encompasses operations where workers range from willing recruits to confirmed trafficking victims; it should not be read as characterising the legal or moral status of all individuals arrested in this case. The average crypto scam payment jumped from $782 to $2,764, a 253 percent increase.
What Comes Next
Forest City's management issued a cooperative statement following the raids, welcoming the enforcement action and backing a proposal for a permanent on-site police station. "We welcome the proposal for a permanent police station here and are prepared to provide our full cooperation and support to make it a reality," the statement read.
Malaysian police confirmed they will work with Interpol to track suspects and networks across borders. The structural problem, however, outlasts any single bust. The call-agent layer is replaceable. The compounds remain. And the masterminds have not been found.
The Johor-Singapore Special Economic Zone, a cross-border integration project launched in early 2024, carries direct reputational exposure if the fraud corridor in Johor is not addressed at the regulatory level. For crypto exchanges, on-ramp providers, and wallet services operating across Malaysia and Indonesia, the pressure to tighten KYC and AML controls on small, high-velocity inflows is only going to intensify. Indonesia's Financial Services Authority (OJK) and National Cyber and Encryption Agency (BSSN) have both identified crypto investment fraud as a top-tier enforcement priority for 2025 and 2026, signalling that regional regulatory coordination is increasingly likely.