In a midnight operation at Sri Lanka’s main international airport, 85 Chinese nationals convicted of various crimes, primarily cybercrime, were deported on a special SriLankan Airlines flight to Guangzhou.
The mass deportation, conducted under tight security on Friday (June 20), is the latest in a series of international crackdowns on Chinese-operated cybercrime networks operating abroad.
Why were these Chinese nationals deported from Sri Lanka?
The individuals had been arrested by Sri Lankan security forces, prosecuted in local courts, and then held at the Welisara Detention Center under the Department of Immigration and Emigration. Their crimes included a range of cyber-related offenses, although specific charges have not been officially disclosed.
Following legal proceedings, the group was transported to Katunayake Airport in five buses and placed on a special flight (UL-880) bound for China. The flight departed at 1:20 am on June 20, under the supervision of 85 local police officers, immigration officials, and 172 SriLankan Airlines security personnel, according to a report by Sri Lankan news outlet Daily News.
How does this relate to the trend of Chinese nationals involved in cybercrime abroad?
This case is not isolated. Over the past decade, Chinese nationals have been implicated in hundreds of cybercrime cases globally—particularly in Southeast Asia, Africa, and parts of Europe. The offences range from telecom fraud and phishing to illegal online gambling and data theft.
There is a longstanding pattern of deporting Chinese and Taiwanese nationals accused of running online scam operations, with at least 600 Taiwanese citizens accused of scamming in Cambodia, Kenya, and Spain deported to China since 2016
Key trends include:
- Telecom fraud and online scams: Many groups operate illegal call centers abroad using VoIP and spoofing tech to impersonate authorities or bank representatives.
- Illegal gambling: Some Chinese nationals set up illicit online gambling platforms targeting users in China and elsewhere.
- Phishing and identity theft: These operations often use malware and social engineering to gather sensitive data for financial exploitation.
- Ransomware and malware: More sophisticated outfits, often with suspected links to state actors, conduct malware campaigns for geopolitical or financial gain.
Why do these cybercrime groups operate abroad, and how is China responding?
Chinese cybercriminals frequently relocate operations to foreign countries to avoid China’s tough domestic crackdowns. By operating overseas, they exploit:
- Weaker law enforcement capacity in host countries
- Legal grey zones in telecom and online fraud regulation
- Cross-border complexity that hinders prosecution
China, in response, has stepped up its international cooperation efforts, often coordinating directly with local authorities to repatriate suspects. Once returned, the individuals are tried under Chinese law, sometimes facing stiff sentences. Beijing has conducted joint operations in recent years across Southeast Asia, Africa, and Latin America to crack down on these transnational networks.
At the same time, China is said to exert diplomatic pressure on host countries to suppress these groups and may offer technical or investigative assistance in complex cases.
What are the implications for host countries like Sri Lanka?
Hosting cybercriminal groups poses several challenges and risks:
- Strain on resources: Language barriers and legal complexities can overwhelm local law enforcement.
- Security concerns: Hosting cybercrime hubs can tarnish a country’s global reputation.
- Diplomatic friction: High-profile arrests can create tensions, especially if issues of due process or human rights are raised.
- Public perception: Local populations may develop negative sentiments toward Chinese migrants, potentially affecting tourism and foreign investment.
In Sri Lanka’s case, the decision to swiftly deport the 85 individuals may reflect both the seriousness of the crimes and a desire to avoid prolonged diplomatic or security complications.
What’s next in the fight against transnational Chinese cybercrime?
As enforcement tightens in Southeast Asia, cybercriminal groups are beginning to shift their operations to less monitored regions like South Asia, Africa, and parts of Latin America.
Experts also warn of increasing sophistication:
- Encrypted communications
- Cryptocurrency transactions
- Cloud-based operations
Going forward, expect greater international collaboration, more rapid deportation protocols, and possibly joint task forces to tackle what is now clearly a global menace.