The WSJ details how industrial-scale scam compounds in Cambodia are run by transnational crime syndicates that have stolen billions from victims worldwide. These operations combine forced labor, polished social engineering, and increasingly sophisticated malware to bypass traditional checks.
Researchers have already linked compounds in Cambodia to global waves of mobile banking fraud, including Android trojans that hijack facial recognition, intercept SMS codes, and move funds directly from victims’ accounts. In parallel, the U.S. Treasury and other governments are sanctioning individuals and entities tied to these networks, which confirms that this is organized financial crime, not a string of isolated scams.
For CFOs, controllers, and treasury teams, the takeaway is clear: your organization is up against scaled, well-funded operators who specialize in impersonation and payment redirection. These groups target high-value, high-velocity environments - fund managers, private equity, real estate developers, and operating companies moving large payments - because a single successful diversion can be worth millions.
At the same time, insurance coverage for social engineering and wire fraud remains limited, meaning victims often absorb the full loss when a payment is misdirected. Even when banks and law enforcement engage quickly, recovering funds that have already been laundered through international networks is rare.
Conduit Security is built for this new reality and helps teams facing “Scambodia”-style threats by:
In a world where cybercrime can build skyscrapers, Conduit helps with each transaction and intervenes before a life‑changing fraudulent payment becomes the next line item in a scam compound’s revenue plan.