The Dubai Scam Bust

On Sunday 17 May 2026, China's state broadcaster CCTV reported that police from China, the United States and the United Arab Emirates had arrested 276 telecom fraud suspects in Dubai and "successfully destroyed nine fraud dens." The victims, it said, had been tricked into cryptocurrency investments that did not exist. The operation was described as the first of its kind between the three countries, and China's Ministry of Public Security pledged to "deepen pragmatic cooperation with more countries."¹ Reuters filed the story from Beijing that day and it ran around the world.²

Every number in the Chinese account is correct. The account is also eighteen days old.

Two announcements, one operation

On Wednesday 29 April 2026, the US Department of Justice, the FBI and IRS Criminal Investigation announced the same operation from San Diego, and Dubai Police announced it the same day through the Dubai Media Office under the codename Tri-Force Sentinel.^3,4 The figures match: 276 arrests, 275 of them made by Dubai Police and one, a fugitive, by the Royal Thai Police in Thailand; nine scam centres dismantled; three criminal syndicates. The US statement named the partners: Dubai Police under the UAE Ministry of Interior, the FBI's San Diego field office, the Royal Thai Police, China's Ministry of Public Security, and Meta, whose account data the FBI called critical.³

The Chinese version, published on 17 and 18 May by CCTV, Xinhua, the Ministry of Public Security and the State Council's information office, does not mention that Dubai and the FBI led it, does not mention Thailand or Meta, does not name a defendant, and gives no loss or seizure figures.¹ It describes the operation as a first for China, the US and the UAE working together. On the trilateral point that is accurate. On everything else, the fuller record is American and Emirati.

What the scam was

The nine centres ran what investigators call pig butchering: fraud that starts as friendship or romance on social media, moves to a fake cryptocurrency trading platform, and ends when the victim has borrowed to invest and the money has been laundered out. The DOJ tied the Dubai operation to three front companies, Ko Thet Company, Sanduo Group and Giant Company, and to the wider Southeast Asian scam-compound economy: the Tai Chang enterprise in Myanmar's Karen State and the Prince Group case in Cambodia, in which roughly US$15 billion in Bitcoin is subject to the largest forfeiture in the Justice Department's history.^3,6

Dubai Police said the suspects were "mainly from Southeast Asian countries."⁴ The six men charged in the US District Court for the Southern District of California are a Burmese national, Thet Min Nyi, 27, and three Indonesians, Wiliang Awang, 23, Andreas Chandra, 29, and Lisa Mariam, 29, with two co-accused still at large. The charges are conspiracy to commit wire fraud and conspiracy to launder money, each carrying up to twenty years.⁵ All are allegations; none has been tried.

US victims lost, in the DOJ's words, "millions of dollars."³ The larger figures circulating alongside the story belong to the wider American campaign rather than to the nine Dubai centres: more than US$701 million in cryptocurrency restrained by the Scam Center Strike Force in April, and almost 9,000 victims warned and an estimated US$562 million saved under the FBI's Operation Level Up since January 2024, on the DOJ's April figures. The FBI's own page for that program shows a smaller cumulative count.⁷ The Dubai dens' locations were not disclosed by any of the three governments.

The scale behind it is not in dispute. The UN's human rights office estimated in 2023 that at least 120,000 people in Myanmar and 100,000 in Cambodia were being held and forced to run online scams.⁸ A UN estimate cited in February 2026 put the regional figure at 300,000 people from 66 countries.⁹ China's own repatriations from Myanmar's Myawaddy compounds passed 7,600 by late 2025, and the KK Park compound was demolished building by building.¹⁰

Dubai's position

The UAE presents itself as the enforcer in this story, and in Tri-Force Sentinel it was. It has not addressed why nine scam centres were operating inside its borders, or where. Independent reporting in 2025 documented at least seven investment "boiler rooms" in Dubai office towers, each with 50 to 200 agents, and Khaleej Times found one in Business Bay cold-calling residents with guaranteed returns.¹¹ In the same period Dubai licensed a virtual-asset regulator and announced a Crypto Tower in its free zone. The emirate is both the place the scammers were arrested and one of the places the industry they serve chooses to operate.

Australia

There is no Australian thread to this operation. The Australian Federal Police was not a partner, and no Australian victim or arrest has been publicly tied to a Dubai-based scam centre. That absence is worth stating plainly, because the vocabulary of the story, Dubai, cryptocurrency, investment fraud, invites a reader to assume a connection that the record does not contain.

What the record does contain is the size of the same industry's Australian trade. The National Anti-Scam Centre's report for 2025, published in March 2026, put reported losses at $2.18 billion across 481,523 reports, up 7.8 per cent on the year before. Investment scams were the largest category at $837.7 million. Older Australians, 17 per cent of the population, accounted for 26.5 per cent of the losses.¹²

The Australian enforcement effort points to Southeast Asia, not the Gulf. The AFP's Operation Firestorm, launched in August 2024, had by June 2026 supported five offshore investigations producing 560 arrests and the disruption of fifteen scam centres in Thailand, the Philippines, Malaysia and Cambodia.¹³ One Cambodian compound at O'Smach contained a mock-up of an AFP office, with the force's logos and Australian flags, used to convince victims they were dealing with police; about 300 Australians were identified from it and warned by text in February 2026.¹⁴

At home, AUSTRAC has gone after the machines the money moves through. In June 2025 it capped crypto ATM transactions at $5,000 and imposed scam warnings after its data showed people over 50 accounted for 72 per cent of ATM transaction value.¹⁵ In August 2026 it suspended one operator and took 96 machines offline.¹⁶ On 7 September 2026 it said it had cancelled, suspended or refused 45 crypto and remittance registrations in a year, including an exchange it said had been exploited by organised cryptocurrency investment scams.¹⁷

The nine dens in Dubai sold a product. The buyers, on the Australian numbers, are here.