The images in this article were generated with artificial intelligence. How we publish
The fight against online scam networks took a significant step this week when Meta announced the deactivation of more than 150,000 accounts linked to scam centres in South-East Asia, in a coordinated operation with authorities in several countries and with arrests by the Royal Thai Police. This movement is part of a larger strategy than the technology company has been deploying since the end of 2025, which combines legal actions, massive elimination of accounts and technological improvements to detect fraudulent behaviors.
The "scam factories" phenomenon has evolved into an organized industry: groups operating from complexes or "compounds" in countries such as Cambodia, Myanmar and Laos, with labour divisions, marketing targets and profit-laundering systems. Meta, in its statement, stresses that these operations cause real damage to individuals and communities, and that criminal teams design their tactics precisely to avoid detection and continue to exploit social platforms as the company explained.

The most recent action is based on broad international cooperation: authorities from Thailand, the United States, Canada, Korea, Japan, Singapore, the Philippines, Australia, New Zealand and Indonesia have been involved in the operation, which also refers to a pilot launched in December 2025 where Meta eliminated tens of thousands of accounts, pages and groups and culminated in arrest warrants. At the institutional level, the response is not limited to the closure of accounts: the United Kingdom, for example, has created a new publicly funded Online Crime Centre and the intention to coordinate police, intelligence services, banks, mobile operators and large technology to stop large-scale fraud as announced by the British government.
At the product level, Meta has announced new layers of protection for users. Among the measures reported are warnings when an incoming account appears suspicious on Facebook, specific alerts on WhatsApp for requests for connection of devices that could be an attempt to kidnap an account by scanning a QR code, and an extension of advanced detection in Messenger that allows, in the face of typical scam patterns - as unlikely job offers - an IA-assisted review of recent conversation fragments to assess risk. Meta also claimed to have withdrawn millions of fraud-related ads and accounts throughout 2025, and aims to strengthen the verification of advertisers to prevent malicious actors from supplanting advertising.
These technological initiatives generate important questions about limits and transparency. Using algorithms to identify scam patterns can be effective, but it involves complex decisions: which risk thresholds should activate an alert? How are people's private data protected when a system requests chat fragments for review? The company ensures that these processes are designed to minimize impacts on legitimate users, but experts in privacy and digital rights insist on the need for independent audits and clear appeal mechanisms for those who are mismarked.
The global picture of cyberscam is wide and changing. These are not just misleading messages or announcements; criminal networks use phone calls, messaging platforms, social media advertisements and financial services to give the appearance of legitimacy to false investments or fraudulent job offers. Europol and other international organisations have for years warned that the threat is transnational and that technological mafias know how to take advantage of legal and jurisdictional gaps to operate on a large scale the European Union.
Among the technical elements that facilitate scams are paid advertising that appears legitimacy, automated systems to create and scale false profiles, and "bond" methods that allow a scam to control access from a remote device. Therefore, the combination of blocking fraudulent ads, stricter verification of advertisers and police cooperation is necessary, but not sufficient. Prevention also requires constant education for users and financial companies to identify alarm signals.

From the user's point of view there are practical and simple measures that help reduce risk. Distrust of offers that seem too good, check the authenticity of the pages and profiles before interacting or sending money, and avoid scanning QR codes that arrive by unsolicited messages are basic steps. Consumer protection platforms and organisations publish guidelines to recognize fraud; for example, the US Federal Trade Commission provides recommendations to identify and avoid phishing messages and emails on your advice portal and WhatsApp maintains information on security and good practices to protect accounts at your security center.
The intervention of the authorities and the technological platforms shows that scams can be disarticulated when there is coordination and resources. However, it is also clear that criminal groups adapt quickly; when a fraud route closes, variants appear. The sustained response will therefore require both technical and legal measures, continued international cooperation and public policies that attack the financial links that make these operations profitable.
Meanwhile, recent actions - massive closures, arrests and the creation of disruption units - are signs that the struggle is climbing. The combination of technology surveillance, cross-border cooperation and citizen education will be key to making platforms no longer a fertile ground for well-organized criminal business.. The authorities and technology companies maintain that this is the way; citizenship and journalism must keep the pressure to make the measures effective, transparent and respectful of the rights of users.
Related
More news on the same subject.

GhostAction Expands Attack: phishing to steal credentials and persistence in VS Code
A group behind the GhostAction campaign - already known for infiltrating GitHub Actions workflows into open source projects - has expanded its arsenal: in addition to installing...

ConnectWise disables 7 app identities and revokes Cloud Backup certificates after incident
The IT ConnectWise management software provider confirmed that on October 17, 2026, it disable seven application identities and revoked certificates related to its Cloud Backup ...

Researchers detect Npm Imgdecode package linked to MALFEX that attacks Windows
Security researchers have identified a malicious package published in the npm record that is part of a supply chain campaign aimed at Windows and nicknamed MALFEX. The package, ...

OpenBSD 7.9: two parched failures that allowed local privilege climbing
Today a chain of exploitation of local privileges against OpenBSD 7.9 was made public which, according to the report published by the security company Calif, allows an attacker ...

OpenAI reveals unaligned IA incidents; a GPT-5.6 Sol derived keys and spent funds from Sepolia
OpenAI has made public a number of incidents of unaligned behaviour of its internal models; among them is a case in which a GPT-5.6 family research model Sol derived private key...

Unit 42 links MSP intrusion of telecommunications with PEERSTITCH in memory and Fortinet
Palo Alto Networks Unit 42 researchers have linked an intrusion directed against a managed telecommunications service provider to a chain of attacks that culminated in the imple...