Skip to content
Cyber Attacks

Cross-border cable siphoning data to Myanmar scam hub busted by Thai police

Authorities intercepted a fibre optic link routing terabytes of bandwidth from Thailand to illicit operations in Myanmar.

Illustration: A thick black fiber optic cable snakes across a concrete floor, its severed end revealing a bundle of colorful glass strands.
AI-generated illustration: Cipher Insider

Key points

  • A 350-metre cable was found running from a Thai village into Myanmar.
  • The connection provided six terabytes of daily data to a scam compound.
  • Police identified the target as an illegal casino and suspected fraud centre.

The short version

  • Thai police seized a cross-border fibre optic cable in Kanchanaburi province.
  • The infrastructure was feeding an illegal casino and scam center in Myanmar.
  • Daily data usage on the link reached six terabytes, far exceeding normal limits.

The details

Thai authorities have disrupted a criminal operation involving a physical fibre optic cable that crossed from Thailand into Myanmar. According to Tom's Hardware, officers responded to reports of unusual internet activity in Nong Lu, a village in the Kanchanaburi border province. Investigators discovered that two rural homes were consuming bandwidth levels typically associated with an entire village. This anomaly led to the discovery of a 48-core cable, heavily shielded and strung along pylons, stretching 350 meters across the international border. The infrastructure was actively siphoning connectivity from Thailand to support illicit activities in Myanmar.

Trairat Viriyasirikul, acting secretary general of the National Broadcasting and Telecommunications Commission, stated that the cable was transmitting approximately six terabytes of data every day. He noted this volume was sufficient to serve between 300 and 400 people. However, the connection was illegally routed to keep a suspected scam compound online. The facility reportedly housed an illegal border casino and a dedicated scam center. An unidentified suspect was paid 700 baht per day to allow the cable to pass through his property, implying direct support from a criminal gang.

The context

This incident highlights broader regional trends in cybercrime infrastructure. Tom's Hardware reports that Myanmar has become a central hub for global scam operations, a role previously held by Cambodia. Criminal groups are allegedly shifting from large factory-style compounds to decentralized operations in smaller accommodations. The Three Pagodas Pass, where the cable was intercepted, is reportedly protected by ethnic armed militias that shelter these criminals. Non-governmental organisations claim that hundreds or thousands of individuals are trafficked and forced to work in these operations.

Defender's checklist

Network operators should monitor for abnormal bandwidth spikes that do not correlate with legitimate user traffic. Physical security audits of infrastructure endpoints are essential to detect unauthorized tapping or connections. Organizations must verify that all cross-border data flows have explicit authorization and documented business justification. Any unexplained high-volume data transfers should trigger immediate investigation to rule out physical compromise or illicit routing.

If your data is involved

Users should review their recent internet bills for unexplained increases in data consumption, which may indicate unauthorized usage. Check for unknown devices connected to your home network, as criminals may exploit residential infrastructure. Be wary of unsolicited communications claiming to be from local authorities or telecom providers regarding this incident, as scammers often exploit such news. Change passwords for any accounts accessed from the affected premises and enable multi-factor authentication where possible.

What to do and how to stay safe: Myanmar

  • Monitor your monthly data usage for sudden, unexplained spikes that deviate from your normal patterns.
  • Inspect your physical network equipment and cabling for unauthorized connections or unusual hardware additions.
  • Verify the identity of any caller or sender claiming to be from law enforcement or your internet service provider.
  • Review connected devices on your local network to ensure no unknown entities are consuming bandwidth.

Step-by-step guide: Phishing vs Spear Phishing: Targeting Mechanics and Defence

General security guidance from the Cipher Insider newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How much data was the cable transmitting daily?

The cable was transmitting approximately six terabytes of data per day, according to the National Broadcasting and Telecommunications Commission.

Where was the cable discovered?

It was found in Nong Lu, a village in Thailand's Kanchanaburi province, stretching across the border into Myanmar.

What was the cable used for?

It was used to provide internet connectivity to an illegal border casino and a suspected scam center in Myanmar.

Sources

  1. Tom's Hardware
MyanmarThailandfibre opticscam center

Related stories