US and UK Sign Pact to Break Scam Compound Networks

The message that opens a pig butchering scam is boring on purpose. A wrong number text. A LinkedIn note from a recruiter. A friendly email about a crypto position that has been doing well. What sits behind it is a walled campus in Myanmar, Cambodia or Laos, staffed by people who answered a fake job ad and now cannot leave. On Thursday, September 3, 2026, American and British prosecutors signed the first agreement built specifically to take those campuses apart.

Key Takeaways

• The US Attorney's Office for the District of Columbia, the UK's National Crime Agency and the Crown Prosecution Service for England and Wales signed a memorandum of understanding on September 3, 2026, which the Justice Department calls the first of its kind for scam centre cooperation.
• The memorandum commits both sides to parallel investigations into shared targets, information sharing on the syndicates running the compounds, and joint decisions about which country prosecutes which case.
• The DOJ puts American losses to cyber enabled investment fraud run out of these centres at roughly $10 billion a year.
• At least 300,000 people work inside Southeast Asian scam compounds, many of them trafficked, and survivors have described torture, sexual violence and 19 hour shifts to UN investigators.
• A joint disruption event with private industry is scheduled for London in early October 2026.

What Did the US and UK Actually Sign?

A memorandum of understanding between prosecutors, not a treaty and not a funding bill. US Attorney Jeanine Ferris Pirro met senior officials from the National Crime Agency and the Crown Prosecution Service and signed a document binding four commitments, according to the Justice Department's announcement.

• Parallel investigations into common targets. Both sides work the same syndicate at the same time rather than discovering the overlap at charging.
• Information sharing on the organised crime groups. Wallet clusters, corporate shells and compound ownership move between the two jurisdictions without a formal legal assistance request each time.
• Joint decisions on where a case is brought. The two offices agree in advance which venue gets the prosecution, which matters when the victims, the servers and the money are on three different continents.
• Shared prioritisation. Both sides agree to treat this threat as a standing priority rather than a case that surfaces when a big victim complains.

The American half of this sits under the Scam Center Strike Force, which Pirro launched in November 2025 to go after Chinese organised crime syndicates running compounds in Southeast Asia. Pirro told reporters the objective was to disable those groups outright, and The Record reported the first joint in person disruption event with private industry partners lands in London in early October.

How Big Is the Scam Compound Industry?

Large enough that one recovery action against a single group exceeded what every American victim reported losing to cyber enabled fraud in a year.

The FBI's 2025 Internet Crime Report logged 1,008,597 complaints and $17.6 billion in cyber enabled fraud losses, which is 85 percent of everything reported to IC3 that year. Investment fraud alone accounted for $8.6 billion of it, the largest single category, and those are only the losses somebody bothered to report.

Now compare that to what came out of one case. In October 2025 the DOJ seized approximately 127,271 bitcoin, worth around $15 billion, in what it described as the largest forfeiture in its history, alongside an indictment of Prince Group chairman Chen Zhi for running forced labour scam compounds in Cambodia. One defendant. Roughly 85 percent of a full year of American reported fraud losses, sitting in wallets. That ratio is the argument for the memorandum in a single number.

Who Is Actually Inside the Compounds?

Mostly people who were trafficked there, and treating them as offenders is the fastest way to get this wrong.

A February 2026 report from the UN Human Rights Office, titled "A Wicked Problem: Seeking Human Rights-Based Solutions to Trafficking for Cyber-Scams", documented what survivors described inside these facilities: confinement in total darkness as punishment, sexual violence that has risen since 2024, forced shifts running up to 19 hours, wage theft, manufactured debt and ransom demands made to families back home. UN News summarised the findings, including estimates that the industry generates around $64 billion a year globally, with more than $43.8 billion of that in the Mekong region alone.

At least 300,000 people work in these operations. That is roughly the population of Pittsburgh, held behind barbed wire and made to send the messages. INTERPOL counted victims trafficked from 66 countries as of March 2025, with 74 percent of known cases taken into Southeast Asia, and it flagged West Africa as a possible new regional hub with additional centres appearing in the Middle East and Central America.

This is not an abstraction for anyone who has followed the enforcement record. When INTERPOL's Operation Ramz arrested 201 people across 13 MENA countries in May 2026, investigators found that some of the people staffing one scam centre were themselves trafficking victims being forced to work. The person on the other end of the chat is very often the second victim in the transaction.

Why Has Enforcement Been So Hard?

Because every layer of the operation sits in a different legal system, and the layers were designed that way.

Consider the geography of a single scam. The victim is in Ohio. The worker is a trafficked Kenyan national in Myanmar. The compound is leased from a politically connected landholder in a border zone where the national government has limited reach. The payment rails run through Cambodian and Hong Kong shell companies. The stolen data and the satellite gear came from a Chinese language marketplace. No single prosecutor has jurisdiction over more than one slice of that, and mutual legal assistance requests between countries routinely take months.

Sanctions have been the workaround. The US and UK acted together in October 2025 against the Prince Group network, and the UK's Foreign, Commonwealth and Development Office followed in 2026 with designations covering the Xinbi marketplace and operators of Cambodia's #8 Park compound, targeting the crypto services that sell stolen personal data and launder proceeds. Designations freeze assets and scare off banks. They do not put anyone in a dock, which is the specific gap the September memorandum tries to close. It is the same escalation visible in the US indictment of 17 Iranians over a $3.4 billion mailbox theft campaign in August: name defendants, then let extradition risk do the work of confinement.

What This Means for Your Inbox

These compounds are the origin point for a large share of the unsolicited approaches that reach personal email accounts, SMS and messaging apps, which is the part of this story that touches ordinary users directly.

The approach message rarely looks like a threat. There is no malicious attachment, no spoofed login page, nothing for a spam filter to score as dangerous. It is a stranger being pleasant, often over weeks, before any money is mentioned. That is why this category slips past defences tuned for malware and credential phishing, and why the losses are measured in life savings rather than in compromised accounts. The FBI's own casework shows the same pattern in adjacent fraud: in the crypto ATM scams that cost Texas and Florida victims $90 million, the contact that started it was usually an email or a phone call, not an exploit.

Three things are worth doing when one of these lands. Verify any investment platform independently, by typing the address yourself and checking registration with a regulator, never through a link the contact sent. Do not re engage to argue, test or troll, because a reply confirms the address is live and moves you to a higher priority list. Report it to IC3 even when no money moved, because the address, wallet and phone number are exactly the connective material a parallel US and UK investigation needs.

Looking Ahead

The October disruption event in London is the first real test, because it puts private industry in the room. Banks and exchanges hold the account records and wallet histories that make an indictment stick, and until now they have handed them over one subpoena at a time.

Watch for two things after that. The first is whether charges name compound operators and landlords rather than only laundering intermediaries, since the buildings and the leases are the durable asset. The second is displacement. INTERPOL has already recorded centres opening in West Africa, the Middle East and Central America, and pressure on the Mekong without a plan for those regions relocates the problem rather than ending it.

One thing this memorandum does not address at all is supply. Nothing in it changes the flow of people answering fake job ads, and as long as recruitment stays cheap, a seized compound is a lease that gets signed somewhere else next quarter.