UNODC: $88B Lost to Asia-Pacific Scams as Gangs Use AI & Franchising

For cybersecurity professionals, the UNODC's latest report isn't just about staggering financial losses—it's a blueprint of how organized cybercrime is industrializing. With gangs using artificial intelligence to automate fraud and a franchise-style structure that mirrors legitimate enterprise, defenders must rethink detection and response strategies.

The United Nations Office on Drugs and Crime (UNODC) has delivered a staggering wake-up call to the world: scam gangs operating across the Asia-Pacific region defrauded victims of an estimated $88.3 billion to $114.1 billion in 2025 alone. Released on July 21, 2026, the report underscores how transnational cybercriminal enterprises, primarily based in Southeast Asia and run by syndicates of Chinese origin, have rapidly professionalized their operations, adopting artificial intelligence and corporate-style franchising models to scale their illicit profits. The losses—which exceed the total economic output of several countries in the region—reveal an underground economy that has outpaced law enforcement and exploited systemic vulnerabilities. For cybersecurity professionals, this is not just a crime statistic; it is a stark illustration of how organized cybercrime has matured into a resilient, collaborative, and technologically sophisticated threat ecosystem.

“

The United Nations Office on Drugs and Crime (UNODC) has delivered a staggering wake-up call to the world: scam gangs operating across the Asia-Pacific region defrauded victims of an estimated $88.3 billion to $114.1 billion in 2025 alone.

At the heart of this transformation is the deliberate weaponization of artificial intelligence. The UNODC report highlights that criminal networks are harnessing AI to automate phishing campaigns, generate synthetic media for impersonation, and analyze victim data at unprecedented scale. This has lowered the barrier to entry for complex fraud schemes while dramatically increasing their effectiveness. AI-driven chatbots can conduct thousands of conversations simultaneously, mimicking trusted contacts or authority figures, while deepfake technology is used to fabricate video calls that coerce victims into transferring funds. The result is a threat landscape where volume and personalization converge, making traditional signature-based defenses and user awareness training insufficient. The report’s emphasis on the speed at which these groups change methods—"quickly changing their methods to stay ahead of law enforcement"—confirms that cybercriminals are operating with an agility that rivals legitimate tech startups.

Equally alarming is the organizational model described by Delphine Schantz, UNODC Regional Representative for Southeast Asia and the Pacific, who likened the syndicates to corporate franchises. These networks have compartmentalized their illicit operations into specialized departments: money laundering, human trafficking, data collection, and scam execution, all connected through a shared service network. This structure mirrors legitimate multinational corporations, complete with outsourcing, performance metrics, and continuous innovation. Such compartmentalization not only enhances operational efficiency but also frustrates law enforcement by distributing illegal activities across multiple jurisdictions and insulating core leadership. The report notes that recruitment networks spanning Asia, the Middle East, and Africa bring foreign workers—many trafficked—into scam compounds, where at least 80 nationalities have been identified. This globalized human supply chain feeds the industry with cheap, coerced labor, further blurring the line between cybercrime and human rights abuse.

The implications for cybersecurity are profound. Traditional perimeter defenses and reactive threat detection are ill-equipped to counter an adversary that operates as a multinational service organization. The use of AI for offensive purposes demands a parallel investment in AI-driven defense—from behavior-based anomaly detection to real-time threat intelligence sharing across borders. Yet the report also highlights the corruption that enables these operations to flourish, suggesting that technology alone cannot solve the problem. Governments and corporations must collaborate on regulatory frameworks that compel platform accountability, disrupt money flows through cryptocurrency and traditional banking channels, and address the root causes of victim vulnerability.