A recent police raid in Port Moresby, Papua New Guinea, uncovered a troubling reality behind modern online fraud. Authorities rescued nearly 40 Indonesian nationals who were allegedly held against their will inside a residential property and forced to operate online scam campaigns using computers in the living room. Law enforcement officials reported that these individuals were recruited through social media platforms under false pretences before having their freedom restricted by an international syndicate.
While this incident highlights a severe human rights issue, it also reveals an unexpected truth about human nature and the cybercrime industry.
Why Cybercriminal Syndicates Resort to Forced Labour
It is easy to assume that the digital landscape is filled with individuals who actively choose to deceive others for financial gain. However, the reliance of transnational syndicates on human trafficking indicates a very different reality. The overwhelming majority of people are inherently good and unwilling to participate in stealing from innocent individuals.
Because scam businesses cannot find enough willing bad actors to grow their operations, criminal networks are resorting to human trafficking and forced labour. To scale phishing campaigns, investment fraud, and fake customer support operations, syndicates lure jobseekers with promises of legitimate employment. Once these individuals arrive, their documents are confiscated, and they are forced into digital servitude.
This phenomenon suggests that the business of scamming is struggling against basic human ethics. The growth of these illicit operations relies not on a surplus of willing criminals, but on coercion and modern slavery.
What to Do When You Receive a Scam Communication
Recognising that the person sending a fraudulent message may be a victim of forced labour changes how we view scam interactions. While protecting your own personal and financial security must always be the priority, there are responsible steps you can consider if you suspect the sender is being held against their will.
- Maintain Calm and Professional Communication: Do not respond with abuse or aggression. The individual sending the message may be working under physical threat or severe duress.
- Ask Discrete Safety Questions: If you are using a secure messaging platform where your personal identity is protected, you might consider asking simple questions. For example, you could ask if they are safe, if they are being held against their will, or if they require assistance.
- Gather Useful Details: If the individual indicates that they are being forced to work, try to obtain relevant information that could help authorities, such as their location, the name of the organisation holding them, or contact details for their family.
- Report Immediately to Authorities: Keep a record of all phone numbers, account names, messaging platform handles, and location details. Provide this information to local law enforcement and relevant cybersecurity reporting bodies.
Protecting Your Organisation from Social Engineering
The rise of forced scam operations means that organisations will continue to face high volumes of phishing and social engineering attempts. Implementing strong cybersecurity practices can help reduce the risk of falling victim to these attacks.
- Provide Cyber Security Awareness Training: Regular training can help employees identify common indicators of social engineering, suspicious emails, and unusual requests.
- Implement Multi-Factor Authentication: Enforcing multi-factor authentication across all business applications can prevent unauthorised access even if login credentials are compromised.
- Deploy Email and Web Protection: Utilising advanced email filtering tools can assist in blocking fraudulent communications before they reach user inboxes.
- Establish Clear Reporting Procedures: Having a straightforward process for staff to report suspicious messages ensures that your security team can respond quickly.
How Vertex Cyber Security Can Support Your Business
At Vertex Cyber Security, we believe that effective cyber defence relies on a combination of strong technical controls, continuous monitoring, and well trained staff. While cybercrime operations continue to adapt, implementing structured security measures can help protect your organisation against evolving threats.
If you would like to assess your security posture, implement employee security training, or conduct penetration testing, please contact the expert team at Vertex Cyber Security or visit the Vertex website to learn more.