The Factory Behind Your Scam Texts Just Got Raided

The Factory Behind Your Scam Texts Just Got Raided

It's 8:23 on a Tuesday morning. You get a text from an unknown number. "Hi, sorry to bother you—I think I texted the wrong number. I meant to reach my cousin Jason." The person seems friendly. Apologetic. Curious about where you live. Over the next few days they keep responding, warm and consistent. Never pushy. Just there.

That message was almost certainly sent by someone sitting in a warehouse in Cambodia or Myanmar who had their passport confiscated at the airport. Their job, under threat of violence: run a fake persona until you trust them enough to invest your money in a platform that doesn't exist.

On May 28, the FBI walked into those warehouses.

What Operation Blackout Actually Dismantled

Operation Blackout is the FBI's umbrella name for a coordinated international crackdown involving the FBI, Dubai Police, the Chinese Ministry of Public Security, and the Scam Center Strike Force—a joint unit the DOJ, FBI, and Secret Service created specifically to go after these organizations.

The numbers are hard to sit with:

• 127,000+ bitcoin seized from Chen Zhi, CEO of the Prince Holding Group in Cambodia. That's somewhere between $8 billion and $15 billion at current value—officials are calling it the largest asset forfeiture in U.S. government history
• 276 arrests across multiple countries
• 9 scam compound facilities shut down
• 503 fake investment websites taken offline
• $701 million in cryptocurrency restrained across related actions
• A Telegram channel with 6,000+ followers seized—that channel was used to recruit trafficked workers into the compounds

Operation Blackout wasn't one investigation. It ran at least four sub-operations simultaneously:

• Operation Zephyr Exodus — Prince Holding Group, Cambodia (Chen Zhi's network)
• Operation Sand Dollar — compounds operating in the UAE
• Operation Haochen — the Tai Chang compound in Kyaukhat, Myanmar
• Broader Scam Center Strike Force actions coordinated out of the FBI's San Diego field office

Chen Zhi now faces federal charges of wire fraud and money laundering conspiracy. The DOJ unsealed complaints against two additional compound managers—Huang Xingshan and Jiang Wen Jie—for running the Shunda compound in Myanmar, where one of their workers defrauded a single American out of $3 million using a fake investment platform. That theft was celebrated internally as a "paradigm of success."

Let that one land for a second.

Let Me Tell You What These Compounds Actually Are

Before the red flags, you need to understand the infrastructure. It changes how you read every suspicious text.

Scam compounds are fraud factories. Industrial operations, mostly in Cambodia, Myanmar, Laos, and parts of the UAE, set up in special economic zones where local law enforcement either can't reach or has reportedly been purchased. They look like office parks from the outside. Inside, workers run hundreds of fake identities simultaneously from rows of computers.

The workers usually don't choose to be there. A recruiter posts a Facebook or LinkedIn ad: data entry role, customer service, good pay, Southeast Asia. Someone takes the job. They're flown in. Their passport is confiscated at the airport. From that moment, they work until they meet quota or someone pays a ransom for their release. The FBI seized a Telegram channel this week that was being used to recruit more workers exactly this way.

I want to be direct about something: the people sending those texts are victims too. The people who should be in handcuffs are the executives running the operations—people like Chen Zhi, who allegedly built a billion-dollar criminal empire on the suffering of two groups of people: trafficked workers and defrauded Americans.

What This Looks Like on Your Phone

The compounds specialize in pig butchering (romance + fake investment), tech support impersonation, government impersonation, and fake job offers. Pig butchering is the most financially devastating, so here's the honest sequence in plain terms.

1. You get an unsolicited contact. A "wrong number" text. A LinkedIn connection request with a plausible professional profile. A Facebook friend request. A dating app match.

2. Contact moves to WhatsApp or Telegram quickly. Daily messages build a relationship. The scammer is interested in your life, consistent, never pushy. At some point—weeks or months in—they mention, casually, that they've done well investing in crypto.

3. They share a trading platform. You make a small test investment. The returns are impressive, almost immediately.

4. You put in more. The dashboard shows growing profits. You're encouraged to let it compound. Then one day you try to withdraw.

5. There's a fee. Then a tax hold. Then an account lock. Then the scammer disappears. The platform was a fake interface controlled by the compound. The money went directly to their wallets the moment you deposited it.

Our pig butchering deep dive covers the emotional mechanics and victim stories in full detail—the psychology these operations are built on is specific and worth understanding. For the mechanics of fake platforms specifically, this breakdown of fraudulent crypto trading sites walks through what the fake dashboards look like.

The Red Flags These Operations Can't Fully Hide

These compounds are sophisticated. They're not perfect.

1. The "wrong number" opening. Documented extensively as a compound outreach tactic. The message is friendly, non-threatening, easy to dismiss as a genuine mistake. Real misdirected texts don't spark days-long conversations with strangers.

2. They're suspiciously consistent for a new contact. Compound workers are running scripts for their job. Real new acquaintances have irregular response times, forget details from last week, have off-days. A new online contact who is unfailingly attentive and never seems tired is not behaving like a normal person.

3. The investment platform isn't a real exchange. Coinbase, Kraken, Gemini—registered, auditable, allow withdrawals without arbitrary fees. "RexTrade," "ProfitNexus," "TrustWallet Pro" (not the actual TrustWallet)—fake. The tell: you were referred to it by someone you've never met in person, and it's showing you returns that would make a hedge fund manager suspicious.

4. Withdrawals hit a wall. Every attempt to get your money out surfaces a new requirement: a processing fee, a tax clearance payment, a regulatory hold. Real platforms don't hold your own money hostage. That fee structure exists to extract one more payment before the scam closes.

5. They can never appear on video in real time. There's always a reason—bad connection, work travel, camera broken. Some personas run for months without ever appearing on a live call. If they do appear on video, check the lip sync carefully on hard consonant sounds. Deepfake video is in active use by compound operations.

6. You can't verify anything independently. The company they work for doesn't exist. The investment platform has no regulatory registration. The trading history they share can't be verified on any public exchange. Real financial activity leaves a paper trail.

If This Already Happened to You

Stop all communication. You don't owe anyone a goodbye. There is no person on the other end who will be hurt by your silence—not in the way you're imagining.

Don't send anything else. Not a fee, not a tax payment, not a "final withdrawal request." Every additional payment goes to the same place.

Contact your bank immediately. Wire transfers have a recall window that closes fast—the faster you call, the better the odds of recovery. If you sent cryptocurrency, recovery is harder but not impossible. Operation Blackout's $700M+ seizure exists as proof that law enforcement can claw back funds. File your report now and add to the paper trail.

Report to the FBI's Internet Crime Complaint Center at ic3.gov{:target="_blank"} and to the FTC at ReportFraud.ftc.gov{:target="_blank"}. The Scam Center Strike Force uses IC3 reports to build forfeitures. 276 arrests happened because people filed reports.

For the specific recovery steps—wires, crypto, peer-to-peer transfers—read what to do after sending money to a scammer. The windows and procedures are different depending on how you sent it.

What This Bust Actually Means

Here's the realistic view: Operation Blackout is genuinely historic. The Prince Holding Group seizure is the largest forfeiture in U.S. government history. The three-country law enforcement coordination—FBI, Chinese Ministry of Public Security, Dubai Police—is unprecedented. Chen Zhi is in custody.

It also won't end pig butchering as an industry. Compounds shut down and new ones open. The FBI's own Operation Level Up, which proactively contacts people being actively scammed before they lose everything, had identified and notified 8,935 victims as of March 2026. 77% of those people didn't know they were being scammed at the time of contact. That's the scale of the operational capacity that still exists.

The number that stays with me from the DOJ filings: 93 victims referred to an FBI victim specialist for suicide intervention because of pig butchering losses. People lost their retirement, their children's inheritance, their ability to see the point. And the compound executives who caused that knew exactly what they were doing.

The people getting these texts are not naive. They're targeted. Systematically, at scale, by a well-resourced criminal industry that has been running for nearly a decade. That's not a reflection on anyone who got caught in it. It's a reflection on the people running the factories—the ones who are, right now, finally facing federal charges.

---

FAQs

What is a scam compound? A scam compound is an industrial-scale fraud operation, primarily based in Southeast Asia and the Middle East, where workers—often trafficked or coerced—run hundreds of fake identities to defraud people worldwide. They specialize in pig butchering, fake investment platforms, government impersonation, and romance scams. Operation Blackout shut down nine of these facilities in May 2026.

What is Operation Blackout? Operation Blackout is the FBI's umbrella operation for a coordinated May 2026 international crackdown on scam compound networks. It included at least four sub-operations and resulted in 276+ arrests, the seizure of 127,000+ bitcoin (valued at $8–15 billion—the largest asset forfeiture in U.S. government history), the shutdown of nine scam facilities, and the takedown of 503 fake investment websites.

What is the "wrong number" text scam? The "wrong number" text is a documented opening move used by pig butchering compound workers. The goal is to establish friendly contact without triggering fraud awareness. After days or weeks of relationship-building, victims are guided toward fake crypto investment platforms. The initial message looks like a genuine mistake. It isn't.

Can I get my money back if I was scammed by a compound? Possibly, depending on how you paid and how quickly you reported it. Wire transfers have a recall window—contact your bank immediately. Cryptocurrency recovery is harder but documented: Operation Blackout's seizures demonstrate that law enforcement recovers and returns assets. File with ic3.gov and ReportFraud.ftc.gov regardless of the amount. The Scam Center Strike Force uses these reports to build the case for forfeiture actions.

Why are scam compounds mostly in Southeast Asia? Primarily because of weak enforcement in certain special economic zones, documented government corruption in some regions, and geographic distance from the countries whose citizens are targeted. Cambodia's Sihanoukville, Myanmar's Myawaddy and Kyaukhat regions, and parts of Laos have been documented hubs. The 276 arrests in Operation Blackout demonstrate that this is changing—international enforcement cooperation is accelerating.

How do I verify whether a crypto trading platform is real? Real exchanges are registered with regulators (FinCEN in the U.S., FCA in the UK), have a verifiable history, and allow withdrawals without arbitrary fees or tax-clearance requirements. A platform you were introduced to by a new online contact, that shows extraordinary returns quickly, and that blocks withdrawals pending mysterious fees is almost certainly fake. Run the domain through Cautellus before you deposit anything—we cross-reference against 770,000+ confirmed malicious domains and flag platforms that have appeared in scam reports.

---

Sources: U.S. Department of Justice Office of Public Affairs (Scam Center Strike Force), FBI Internet Crime Complaint Center (IC3) / Operation Level Up, Fox News (Operation Blackout reporting), The Hacker News, FBI San Diego Field Office press release, FTC Consumer Sentinel Network 2025 Data Book