By Ato Lekinawa Costa
The promise of a US$800 monthly salary lured Indonesian workers to Timor-Leste. Within weeks, police had dismantled alleged scam compounds, detained hundreds of foreign nationals, and exposed how Southeast Asia’s transnational fraud networks may be testing one of the region’s newest states.
When Ayu clicked on a job advertisement circulating on Instagram and Facebook, it looked like an opportunity to escape the economic uncertainty she faced in Indonesia.
The recruiter promised a monthly salary of US$800, a wage far beyond what she could expect without a university degree. The company paid for her travel from Sumatra through Malaysia before flying her to Timor-Leste. Like dozens of others, she believed she had secured legitimate office employment abroad.
Instead, she says she found herself in a country she barely knew, linked to what she later understood to be an online gambling operation. Before she had even unpacked her luggage or taken a shower, police arrived and escorted her and other recruits to a police station. Her passport and mobile phone were taken, leaving her unable to contact her family or return home. She admitted she had not told her parents she was in Timor-Leste, instead saying she remained in Malaysia because she feared worrying them.
“I feel stressed because I don’t know when I can return,” she told reporters, adding that she had no money to buy a ticket home. Local residents eventually provided food and basic necessities while the investigation continued.
Ayu’s experience illustrates more than an individual tragedy. It reflects a growing regional phenomenon in which organised criminal networks recruit workers through social media with promises of high salaries before drawing them into fraudulent online operations. Across Southeast Asia, authorities have linked such schemes to scam compounds, online gambling, human trafficking, cryptocurrency laundering and transnational organised crime.
Now, evidence suggests Timor-Leste is becoming the region’s newest battleground.
A Rapidly Expanding Crackdown
During the past year, Timor-Leste has experienced an unprecedented series of police operations targeting alleged online scam and illegal call-centre networks.
Government figures compiled from recent operations indicate that authorities have detained hundreds of suspects across multiple locations, including Tibar, Hera, Manleuana, Metiaut, Ulmera and Komoro. The operations involved the National Police of Timor-Leste’s Investigation Department(PNTL), the Ministry of Justice’s Criminal Scientific Investigation Police (PCIC), immigration authorities and specialised intelligence units.
One operation in Hera led investigators to dismantle an alleged network operating from residential premises, where police seized computers, electronic equipment and communications technology believed to have been used in online scam activities. Eleven additional Chinese nationals were detained during follow-up operations, adding to earlier arrests in the same area.
According to government spokesperson Expedito “Loro” Dias Ximenes, the operations demonstrate Timor-Leste’s determination not to allow its territory to become a base for transnational organised crime. He described online scamming, illegal call centres and related activities as threats not only to public security but also to the country’s economy and international reputation.
Prime Minister Xanana Gusmão has adopted similar language, declaring a policy of “zero tolerance” toward online gambling and cybercrime. He announced that the government is preparing comprehensive cybercrime legislation while strengthening cooperation with ASEAN partners to combat increasingly sophisticated criminal networks.
The government has also cancelled licences for online gambling operators, halted pending licence applications and moved to prohibit new licences while reviewing the country’s regulatory framework.
For a country that restored its independence only in 2002, the scale and speed of the response reflects the seriousness with which authorities now view the threat.
Why Timor-Leste?
The emergence of alleged scam operations in Timor-Leste cannot be understood in isolation.
Over the past several years, Southeast Asia has witnessed the explosive growth of industrial-scale scam compounds operating from Cambodia, Myanmar, Laos and parts of the Philippines. These criminal enterprises have generated billions of dollars through investment fraud, romance scams, cryptocurrency schemes and fake employment offers while trafficking thousands of workers across borders.
According to recent assessments by the United Nations Office on Drugs and Crime (UNODC), intensified law-enforcement operations in several countries have not eliminated these networks. Instead, they have encouraged criminal groups to relocate into jurisdictions with newer regulatory systems, developing digital infrastructure and comparatively limited enforcement capacity.
UNODC has specifically warned that Timor-Leste faces risks associated with what it describes as “criminal foreign direct investment“, the strategic use of apparently legitimate investments, companies and business projects to establish long-term criminal operations.
The Fundasaun Mahein report, Ghosts in Dili: Aviation Gaps, Scam Networks and a Test of Timor-Leste’s Sovereignty, reaches a similar conclusion. It argues that organised criminal groups increasingly exploit institutional weaknesses rather than relying solely on violence or corruption. Instead, they manipulate administrative procedures, regulatory gaps and fragmented government systems.
The report highlights concerns ranging from proposed digital investment projects and aviation oversight to border management and information sharing between government institutions. While it does not conclude that every case is directly connected, it argues that the operational patterns resemble those documented elsewhere in Southeast Asia.
For Timor-Leste, this represents a new security challenge. Rather than confronting conventional organised crime alone, authorities must address sophisticated transnational networks capable of exploiting technology, financial systems and international mobility.
Beyond the Scam Centres
One of the most striking episodes occurred in July when a privately chartered aircraft arrived in Dili under documentation stating it carried VIP guests of President José Ramos-Horta.
Subsequent reporting raised questions about the flight’s true purpose and whether it was connected to individuals under investigation in relation to alleged scam-centre operations. President Ramos-Horta publicly denied authorising the flight and called for investigations into the misuse of his name, while Fundasaun Mahein argued the episode exposed weaknesses in aviation governance, institutional coordination and document verification.
The organisation’s report describes the incident as a test of Timor-Leste’s sovereignty rather than merely an aviation irregularity. It argues that no single institution possessed a complete operational picture because responsibilities were fragmented among aviation authorities, immigration officials and security agencies.
Whether or not future investigations establish direct links between the aircraft and organised criminal activity, the case has become symbolic of broader institutional vulnerabilities.
Prime Minister Gusmão has repeatedly called on security and intelligence agencies to strengthen surveillance while improving transparency so that the public understands the measures being taken against organised cybercrime.
A Race Between Criminal Networks and State Institutions
For Timor-Leste, the current moment represents more than a policing challenge.
The country is simultaneously pursuing economic development, attracting foreign investment and expanding digital infrastructure. Those ambitions are essential for national development. Yet the same openness can also create opportunities for criminal organisations seeking new jurisdictions from which to operate.
The government’s recent actions, including cancelling online gambling licences, drafting cybercrime legislation and expanding cooperation with regional partners, indicate growing recognition of these risks.
Equally important is the human dimension.
Many of those recruited into alleged scam operations appear to have travelled believing they were accepting legitimate employment. Ayu’s account demonstrates how deceptive online recruitment can leave workers stranded far from home, separated from their families and uncertain about their legal status.
As police continue dismantling suspected scam compounds, investigators face the difficult task of distinguishing between organisers, facilitators and individuals who may themselves have been deceived or exploited.
That distinction will be critical if Timor-Leste hopes to respond effectively while upholding the rule of law and human rights.
A Defining Test
The rise of scam-centre investigations comes at a defining moment for Timor-Leste.
The country has demonstrated a willingness to act decisively through coordinated police operations, proposed legislative reforms and increasingly firm political leadership. Prime Minister Xanana Gusmão’s declaration of “zero tolerance” reflects a recognition that online fraud threatens not only public security but also the nation’s international credibility.
Yet arrests alone will not determine success.
As both UNODC and Fundasaun Mahein argue, the deeper challenge lies in strengthening institutions before transnational criminal networks become entrenched. That means improving intelligence sharing, tightening border controls, modernising cybercrime legislation, strengthening financial investigations and ensuring that aviation, immigration and law-enforcement agencies operate as a coordinated system rather than isolated institutions.
The story that began with a young Indonesian woman clicking on a Facebook advertisement has therefore become a story about an entire nation confronting one of the defining security threats of the digital age.
For Timor-Leste, the question is no longer whether international scam networks have noticed the country.
The question is whether the country’s institutions can evolve quickly enough to ensure that the promise of economic openness does not become an opportunity for organised crime.