Sri Lanka is contending with a surge in illegal online fraud operations migrating from Southeast Asia, a development that poses a direct threat to the island’s nascent attempt to establish a regulated gambling industry.

Police spokesman Fredrick Wootler confirmed that more than 1,000 foreign nationals, primarily from China, Vietnam, and India, have been arrested for cybercrime involvement since January, more than double the 430 arrests recorded for the entirety of 2024. Raids have been extensive: a single overnight operation across the Galle and Matara districts netted 221 suspects, a sweep near Colombo yielded 280 arrests, and a March raid on one compound alone detained 135 Chinese nationals. Police say they are now receiving tip-offs on a daily basis.

The networks running these operations are well-known to the industry: pig butchering schemes, rigged betting platforms, and fake cryptocurrency investments, targeting victims across Asia in multiple languages. They are not building casinos, but they are building convincing facsimiles of gambling products, and doing it in a jurisdiction that is simultaneously trying to license the real thing.

The timing is acutely awkward. Sri Lanka passed the Gambling Regulatory Authority Act in 2025, legalising online betting and establishing a single regulator to oversee casinos, online platforms, and sports betting.

The GRA is targeting full operational status by June 30th, 2026, with a mandate that explicitly includes FATF-aligned AML and CTF compliance. City of Dreams Sri Lanka, the $1.2 billion Melco-John Keells integrated resort that opened in August 2025, has positioned the country as a premium gaming destination, with Melco Chairman Lawrence Ho floating the “India’s Macau” pitch. The country has been chasing half a million Indian tourist visits this year to underpin that ambition.

Into that picture walks a wave of criminal operators exploiting precisely the same infrastructure the legitimate industry is trying to monetize: easy-access tourist visas for nationals of more than 40 countries, reliable high-speed internet, and an affordable rental market where syndicates are setting up in coastal villas and Colombo office complexes alike.

China has publicly acknowledged the shift. Beijing’s embassy in Colombo noted the rise in illicit activity following crackdowns in Cambodia, Myanmar, and the UAE, and pledged closer cooperation with Sri Lankan law enforcement. A 2026 UN report estimated at least 300,000 people have been trafficked into scam compounds across Southeast Asia, the displaced tail-end of that network is now testing Sri Lankan soil.

Authorities are also investigating whether foreign syndicates were behind a recent cyberattack on the Sri Lankan treasury that caused approximately $2.5 million in losses, suggesting the groups now operating on the island are not limited to consumer fraud.

For operators and investors eyeing Sri Lanka as the next growth market in South Asian gaming, the message is uncomfortable but familiar: regulatory reform and criminal displacement tend to arrive simultaneously. The GRA has a June deadline to prove it can function as a credible licensor. Whether it can also keep the market clean enough to attract serious operators is a harder question, and one that the industry will be watching closely.