Cybersecurity analysts and policy observers are warning that weak visa controls and relaxed monitoring of foreign visitors have made the island an attractive base for global scam syndicates.
In recent weeks, Sri Lanka has witnessed a wave of cybercrime cases reported from various parts of the country. Since January 1, 2026, Sri Lankan police have arrested 628 foreign nationals for illegal activities ranging from immigration violations to sophisticated cybercrimes.
These suspects, originating from countries including India, Vietnam, China, Myanmar, the Philippines, and Cambodia, were arrested during operations carried out in areas such as Cinnamon Gardens, Mount Lavinia, Chilaw, Rajagiriya, and Koswatte.
In just the first three months of 2026, arrests have already exceeded 50% of the total cases reported throughout 2025. If this trend continues, the annual figure could double compared to previous years, reflecting an emerging pattern where increased enforcement in countries such as Cambodia is pushing these criminal networks towards Sri Lanka.
The Sunday Times spoke to several cybersecurity analysts and policy observers regarding the sharp rise in online scam operations in Sri Lanka. They raised concerns over what they described as the government’s failure to properly regulate visa processes and laws governing foreign tourists.
“Now Sri Lanka has become a paradise for international scam syndicates. While other countries have tightened border controls and digital surveillance, Sri Lanka’s relatively lenient visa policies and simplified entry procedures introduced to boost tourism have unintentionally lowered the barriers for criminal networks to move people across borders quickly,” a senior law enforcement officer, who requested anonymity, told The Sunday Times.
He further added, “This lack of strict oversight is now being identified as a major reason for the sharp rise in cyber-related crimes and the movement of the scam economy from Southeast Asia to Sri Lanka.”
Another official, who frequently travels abroad and also requested anonymity, told The Sunday Times that Sri Lanka should introduce stronger biometric tracking systems for foreign visitors.
“In the region, neighbouring countries like India have stricter systems to monitor foreigners. Officials there have suggested implementing biometric identification methods such as fingerprint verification and other screening procedures to track foreign nationals. These systems prevent individuals from accessing services anonymously. For example, in Sri Lanka, foreigners can still easily obtain SIM cards using only a passport, whereas in India such services are more tightly regulated and connected to residency and identity verification,” he said.
One of the biggest recent operations took place in Colombo 07 on May 7, where police arrested 231 foreign nationals, mainly from China and Vietnam, during raids targeting suspected cyber scam centres.
The arrests followed several coordinated operations, including a raid in Kollupitiya where 74 Vietnamese nationals were detained over alleged financial fraud activities.
Police spokesperson ASP F.U. Wootler told The Sunday Times that many of the suspects had entered Sri Lanka on tourist visas but were later found to be illegally employed, while some had overstayed their visas.
“There is an increasing trend of foreign nationals misusing tourist visas to carry out online financial scams and other illegal activities,” he said.
Investigators suspect the arrested groups were involved in a range of online fraud activities, including cryptocurrency scams and fake online relationships used to deceive victims abroad.
Another major raid was carried out in Rajagiriya, where around 120 suspects from countries including Cambodia, China, Malaysia, Madagascar, the Philippines, Thailand, and Vietnam were arrested from a multi-storey apartment complex on Meda Welikada Road.
During the operation, police recovered laptops, mobile phones, and other electronic equipment believed to have been used for illegal money transfers and online scam operations.
As the Walana Central Anti-Vice Striking Force operation marked the first major breakthrough in the 2026 crackdown on cyber scam networks, The Sunday Times spoke with its Director, Assistant Superintendent of Police (ASP) Rohan Olugala, regarding the operation.
Director Olugala told The Sunday Times that Inspector General of Police Mr. Priyantha Weerasooriya had received intelligence information and instructed him to take immediate action. He said that after verifying the details, intelligence teams were first deployed to monitor suspicious activity in Colombo suburbs.
Once the presence of foreign-linked operations was confirmed, a special team led by OIC Chief Inspector (CI) Indika Weerasinghe and CI Ajith Shantha carried out a raid on a house in Talangama.
Accordingly, on May 2, police arrested 37 Chinese nationals (36 men and one woman) during the raid. The suspects were operating from a rented house in the Koswatta area of Talangama. Authorities seized 38 laptop computers, 34 tablets, 194 mobile phones, and 100 SIM cards.
Investigations revealed that some suspects were in Sri Lanka without valid visas or passports.
According to sources, the Walana Central Anti-Vice Striking Force operates directly under the Inspector General of Police. This structure enables the unit to conduct surprise raids across the country without prior notification to local police stations, thereby ensuring operational secrecy and reducing the risk of information leaks during investigations.
OIC Indika Weerasinghe said the group had even hired four Sinhalese women for cooking and cleaning, and one Muslim youth for transport, ensuring the foreigners rarely left the house and could operate in secrecy.
He also explained how these syndicates function, saying victims are often targeted through greed and trust. “People are blinded by the hope of easy money, and they quickly share personal details without thinking,” he said.
He added that modern scam networks now use advanced technology, including artificial intelligence, to imitate voices and pose as officials or trusted institutions to trick victims into transferring money. He also warned that data is often collected through social media or malicious links, allowing criminals to access personal information.
OIC Weerasinghe also criticised landlords who rent properties without proper checks, saying many ignore warning signs as long as they receive rent. He pointed out signs such as tenants who never leave the house, keep curtains closed all the time, and use large amounts of electronic equipment.
In another major operation in April, police arrested more than 150 foreign nationals in Chilaw during a raid on a seaside hotel allegedly used as a cyber scam centre. Officers recovered over 140 laptops and around 400 mobile phones.
Similar smaller-scale raids were also carried out in coastal and inland areas including Gandara, Thalalla, Katunayake, Negombo, Wattala, and Baddegama, where additional suspects were arrested over financial fraud and visa violations.
Earlier operations in March and April in Anuradhapura and Mihintale also uncovered guest houses being used as scam bases, with further arrests linked to organised cyber networks.
Separately, for the recent raids involving Chinese nationals, The Sunday Times forwarded a set of questions to Officer Xing Chaoyang at the Chinese Embassy in Colombo seeking clarification on the matter. The questions included how closely the Embassy is working with Sri Lankan law enforcement, what measures are being taken to prevent Chinese criminal networks operating abroad, recommendations for strengthening immigration and cybercrime controls in Sri Lanka, whether these incidents could affect the image of legitimate Chinese businesses and investments in the country, and a message to the Sri Lankan public regarding the issue. According to him, the Chinese Embassy will provide its official responses within the coming week.
