From Rags to Ransomware – How a Small Cambodian Scam Center Used Crypto to Steal Billions

If you know where to look, you can find a specific type of building on the outskirts of Sihanoukville, Cambodia. tall walls. The top has barbed wire. windows that are closed from the inside. From the street, it might look like a cheap logistics warehouse or a dorm. You wouldn’t give it much thought. Naturally, that was the whole point.

Workers inside those walls, many of whom were migrants who were tricked by false job postings and imprisoned against their will, were made to bombard targets on social media and messaging apps while manning call center floors lined with phone racks that controlled tens of thousands of fictitious profiles. Not ransomware in the conventional, technical sense.

A human-operated fraud machine that operates shifts, meets daily quotas, and steals life savings from strangers in New Jersey, London, and Seoul is perhaps more subtle. And all of it was purportedly directly managed by a Fujian Province real estate developer in his 30s who had rebranded himself as one of Cambodia’s most reputable philanthropists.

His name is Chen Zhi, and his journey from a small beginning with a faltering online gaming company to the defendant in the biggest cryptocurrency forfeiture case in American legal history is one of those tales that seems nearly unbelievable until you recognize how clear the warning signs were all along.

Depending on your point of view, Chen entered Cambodia in 2010 or 2011, entering a nation that was undergoing significant change. The old mustard-colored French colonial mansions were being replaced by glass towers that caught the afternoon light like something from a developer’s pitch deck, changing Phnom Penh’s skyline in real time. Once a peacefully charming seaside town, Sihanoukville was evolving into something completely different, with new casinos, opulent hotels, Chinese signage everywhere, and money coming in from investors seeking returns that the overheated mainland market was unable to provide. In summary, it was a great time to arrive with aspirations and few inquiries about the source of your funding.

At the age of 27, Chen established the Prince Group in 2015. By 2018, he had obtained a commercial banking license, started the third airline in Cambodia, invested a minimum of $2.5 million to obtain a Cypriot passport, and eventually became a citizen of Vanuatu. It was an incredible entrepreneurial run on paper. In reality, it’s difficult to avoid having a nagging, low-level suspicion that something doesn’t quite add up when you look at that rate of expansion. Without an uncommon source of operating capital, legitimate companies rarely grow from a failing gaming startup to a multinational conglomerate in less than ten years.

The U.S. Department of Justice indictment claims that Chen and his top executives secretly expanded Prince Group into one of the biggest transnational criminal organizations in Asia, profiting handsomely from fraudulent cryptocurrency investment schemes at scam compounds located throughout Cambodia. The cynicism of the mechanics was almost elegant.

The so-called “pig butchering” scams usually involved trafficked workers enticing victims into fictitious romantic relationships on the internet, gaining their trust over the course of weeks or months, and then convincing them to make significant investments in fraudulent cryptocurrency platforms. The concept of fattening a pig prior to slaughter is where the name originates. However, those engaged in the fattening were not volunteers. They were held captive.

In just two specific locations, 1,250 mobile phones were used to manage 76,000 accounts on a well-known social media network. Go over that number once more. Each of the 76,000 fictitious accounts cultivated a real person somewhere in the world, creating what they thought was a real connection. Over $400,000 in cryptocurrency was lost by one victim. It’s not a number. That’s a retirement for someone. Ten years’ worth of savings. trafficked upward through a sophisticated money laundering network that took years for U.S. federal investigators to fully map before reaching a phone farm in Cambodia.

The extent to which the operation was integrated into legitimate structures made it especially challenging to dismantle. The Prince Group had operations in over 30 nations. Cryptocurrency “spraying” and “funneling” techniques were used to launder profits, which were then used to purchase yachts, private jets, and a Picasso painting from an auction house in New York. The group allegedly took advantage of what investigators have called “Singapore Washing” in Singapore, which is the practice of hiding illegal funds behind a façade of respectability by using the city-state’s financial institutions and family office systems. Some of the banks and intermediaries involved might not have known. It’s also possible that some of them made insufficient inquiries.

Since December 2020, the 127,271 Bitcoin that were seized, valued at about $15 billion, had mostly lain dormant. TRM In wallets with seed phrases, those coins simply sat there. According to reports, Chen Zhi personally supported scholarships for underprivileged students, collected titles from the Cambodian king, and partnered with the son of the Interior Minister. Prosecutors claim that Chen once boasted that the scam was making $30 million every day. Even so, he appeared to be a philanthropist from the outside.

This seems to have been made possible by the way each level of legitimacy supported the one before it rather than by a single point of failure. The bank was required by the real estate firm. The casino was necessary for the bank. In order to provide the money, the casino required the scam compound. The indictment claims that the majority of Prince Group’s income came from fraud and money laundering, and that many of the company’s legitimate operations were merely used to conceal the illegal activity going on beneath the surface. Respectability’s architecture was completely load-bearing.

Prince Group is “an essential part of the scaffolding that makes global cyber-scamming possible,” according to a transnational crime expert and visiting fellow at Harvard University’s Asia Center, who also referred to Chen as a “central pillar” of the criminal economy entwined with Cambodia’s ruling regime. The operation likely lasted as long as it did because of its close proximity to power. Law enforcement tends to look elsewhere when you are the prime minister’s advisor, a recipient of the highest civilian honor in the kingdom, or a well-known contributor to government initiatives. The enterprise was virtually invisible at the domestic level due to Cambodia’s political structure.

Chen Zhi is still at large. He faces a maximum sentence of 40 years in prison for wire fraud conspiracy and money laundering conspiracy, according to the U.S. indictment. 146 people and organizations connected to the network were the focus of the Treasury Department’s sanctions. Nineteen London properties associated with the Prince Group, valued at over £100 million, were frozen by the UK. It’s unclear if any of this reaches him directly, which is likely frustrating for the investigators who worked on the case for years.

The human cost that lies beneath the financial one is more difficult to overcome. The victims sent money to fictitious lovers they met through social media apps. Additionally, those who traveled to Cambodia in response to job advertisements promising call center work and ended up trapped inside a barbed wire facility with no obvious way out were also victims in a different, more direct way: the workers inside the compounds, who were intimidated and beaten into operating the scams. Coercion on both ends drove the entire business. The fact that the crime required victims to victimize other victims may be the most unsettling aspect of all.

The number of people still living in these compounds throughout Southeast Asia is still unknown. Tens of thousands of workers are employed by similar operations in Cambodia alone, according to UN estimates. Prince Group was never the only operation of its kind, even though it is currently the most well-known name in a highly publicized indictment. It seems like the world is just starting to realize how big this industry is and how many people, in how many countries, are still living inside those walls as we watch this unfold—the billions seized, the sanctions announced, the press conferences.