Sri Lanka’s strategic position along major Indian Ocean trade routes, expanding global connectivity and growing investment opportunities make it an attractive destination for legitimate businesses. However, the same openness can also create vulnerabilities if immigration controls, financial oversight and cybercrime enforcement fail to keep pace with emerging transnational threats.
Several days ago, an incident involving two groups of Chinese nationals at the Colombo Port City premises raised fresh concerns about the possible spillover of transnational criminal disputes into Sri Lanka.
According to Police, two Chinese nationals were found bound inside a vehicle after an alleged confrontation, while another member of the group was abducted. The abducted individual was later found murdered in a forested area in Eheliyagoda, nearly 60 kilometres from Port City, prompting an investigation by the Colombo Crimes Division (CCD).
The incident has reignited concerns that Sri Lanka may be witnessing the arrival of organised criminal actors displaced from other parts of Southeast Asia.
One of the emerging security challenges confronting the country is the possibility that organised crime networks are searching for new operational bases following crackdowns elsewhere in the region. Among the most concerning developments is the expansion of Chinese-speaking criminal syndicates involved in cyber fraud, online scams, illegal gambling and money laundering, which have spread across Southeast Asia over the past decade and are increasingly seeking opportunities in new jurisdictions, including Sri Lanka.
For years, parts of Southeast Asia became centres for large-scale online criminal enterprises. Myanmar, Cambodia, Laos, Vietnam and the Philippines witnessed the rapid growth of scam compounds operated by organised crime groups generating billions of dollars through cyber-enabled fraud. These organisations functioned like multinational corporations, with recruitment networks, technology specialists, financial operators and sophisticated international money-laundering channels.
The COVID-19 pandemic accelerated this transformation. With lockdowns, travel restrictions and the closure of casinos and entertainment venues, many criminal syndicates shifted from physical gambling operations to online fraud. Investment scams, cryptocurrency schemes, romance scams and identity theft became highly profitable, allowing criminal groups to target victims worldwide while operating from jurisdictions where enforcement was weak.
The most notorious example emerged in Myanmar's Myawaddy region, near the Thailand border, where vast scam compounds became synonymous with cybercrime, human trafficking and forced labour. Thousands of people from across Asia, including Sri Lanka, Bangladesh, India and several other countries, were lured with promises of legitimate employment before being forced to participate in online fraud operations.
Sri Lanka was also affected by this criminal enterprise. More than 40 Sri Lankans who had been deceived and recruited into these scam compounds were rescued through coordinated international operations and repatriated. Their experiences exposed the human trafficking dimension of these cybercrime networks and demonstrated how transnational criminal organisations exploit vulnerable individuals for illicit financial gain.
Regional crackdowns during 2025 dismantled many of the major scam compounds and led to the rescue of thousands of trafficking victims. However, dismantling physical compounds did not eliminate the criminal organisations behind them. Organised crime networks rarely disappear after law enforcement operations. Instead, they relocate, adapt and search for jurisdictions where regulatory gaps and weak enforcement create fresh opportunities.
This is the challenge now confronting Sri Lanka.
The Port City abduction and murder has brought these concerns into sharper focus. The CCD has taken over the investigation, while two suspects were arrested at Bandaranaike International Airport as they allegedly attempted to flee the country.
Although investigators have yet to establish the full circumstances surrounding the crime, the incident has raised serious questions about the identities, backgrounds and activities of those involved.
The murder also comes amid growing concerns over alleged cybercrime operations involving foreign nationals in Sri Lanka. Authorities have conducted several raids targeting suspected online fraud networks, with hundreds of Chinese nationals reportedly arrested in connection with cybercrime investigations, immigration offences and illegal employment-related violations.
During one operation, investigators recovered hundreds of mobile phones, laptops, routers and other electronic equipment suspected to have been used in financial fraud. These cases have heightened concerns that criminal expertise developed in scam compounds across Myanmar, Cambodia and Laos may now be migrating to new destinations.
The threat posed by these networks extends well beyond cyber fraud. International investigations have shown that such criminal enterprises are frequently involved in human trafficking, document forgery, money laundering, identity theft and other forms of organised crime. Their ability to move people, technology and illicit funds across borders makes them a significant challenge for governments worldwide.
The experiences of Cambodia’s Sihanoukville and Myanmar’s Myawaddy offer important lessons. Investment hubs and special economic zones can become vulnerable when rapid economic development is not matched by strong governance, effective regulation and robust law enforcement.
Projects such as Colombo Port City represent significant opportunities for Sri Lanka’s economic future. However, they also require stringent financial oversight, stronger immigration controls, enhanced cybercrime capabilities and closer international law enforcement cooperation to ensure that criminal organisations do not exploit the same openness that attracts legitimate investors.
Sri Lanka's recent struggles in addressing major financial irregularities-- including questions surrounding missing funds from banking systems, alleged suspicious transfers to overseas accounts and cyber-related incidents involving state financial systems-- have also raised concerns about the country's preparedness to combat increasingly sophisticated digital crimes.
The inability to fully establish how some of these transactions occurred or identify those responsible may create a perception among international criminal networks that Sri Lanka has vulnerabilities in its cyber defences, financial intelligence systems and digital law enforcement capabilities.
As the country accelerates its digital transformation and expands electronic financial transactions, strengthening cybersecurity, financial intelligence, regulatory oversight and public awareness will be essential to ensure that Sri Lanka does not become an attractive destination for transnational cyber-enabled criminal enterprises.
________________________________
The writer is an award-winning journalist and the Deputy Editor of Ceylon Today. She can be reached at [email protected]