Financial Integrity Monitor
Sign in

Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Cambodia KH

Domains covered
8 of 8
Sources
158
Role actions
8
Horizon <90d
2
Jurisdiction profile
FATF status: Largely Compliant Tier: B Risk direction: Increasing Enablement vs enforcement: Permissive

Cambodia operates under the 2020 AML/CFT Law and 2021 CDD Directive, supervised by CAFIU (FIU), the National Bank of Cambodia, and the Ministry of Economy and Finance.

MoreDelisted from the FATF grey list in February 2023, but casino, real estate, DNFBP and virtual-asset supervision remain weak amid a cash-based, dollarized economy that enables large-scale scam-compound and crypto-laundering infrastructure operating with apparent elite protection.

Key deficiencies
  • Limited regulation and oversight of casino, real estate and financial sectors exploited for laundering scam proceeds
  • No comprehensive public beneficial ownership registry; shell-company layering (100+ entities in the Prince Group case) obscures true ownership
  • Weak fit-and-proper and risk-based supervision of DNFBPs per successive APG follow-up reports
  • Elite/political protection of scam-compound operators (senators, oknha, family ties to senior officials) undermining domestic prosecution
  • No dedicated virtual asset service provider (VASP) licensing/supervision regime commensurate with the scale of crypto-enabled fraud
Recent developments (18m)
  • October 14, 2025: coordinated OFAC/OFSI/DOJ/FinCEN action - Prince Group TCO designation (146 targets), Chen Zhi indictment, $15bn bitcoin forfeiture, Huione Group Section 311 final rule
  • January 2026: Chen Zhi arrested in Cambodia and extradited to China rather than the United States
  • April 23, 2026: OFAC designation of Cambodian Senator Kok An and 28 individuals/entities including Heng Feng Cambodia Bank
  • June 2026: UK widened sanctions on additional Prince Group-linked individuals and London properties; OFAC added further Prince Group TCO designations and issued an OFAC-OFSI comparative guidance overview
Brief

Lead signal

Lead Signal

Cambodia remains the focal point of a widening, but legally divergent, sanctions campaign against the Prince Group and associated Jin Bei Group network. On 23 June 2026 the US Treasury's Office of Foreign Assets Control expanded its transnational-criminal-organisation designation of the Prince Group, adding nine individuals and twenty-six entities and naming Hu Xiaowei as the networks second-in-command, with a parallel FinCEN Section 311 action reported alongside it. The European Union moved separately, designating Prince Holding Group and its chairman Chen Zhi under the EU Global Human Rights Sanctions Regime on 31 July 2026, citing at least ten scam compounds built and operated throughout Cambodia, with a further listing reported in early August adding the Jin Bei Group, an associated individual, and an armed group operating in the border region. The two actions rest on different legal bases, run on different timetables, and have not yet been reconciled into a single multilateral designation list, which is itself the structurally significant fact: enforcement pressure on Cambodia's scam-compound economy is intensifying, but through parallel unilateral tracks rather than a coordinated international framework.

Read full brief

Lead Signal

Cambodia remains the focal point of a widening, but legally divergent, sanctions campaign against the Prince Group and associated Jin Bei Group network. On 23 June 2026 the US Treasury's Office of Foreign Assets Control expanded its transnational-criminal-organisation designation of the Prince Group, adding nine individuals and twenty-six entities and naming Hu Xiaowei as the networks second-in-command, with a parallel FinCEN Section 311 action reported alongside it. The European Union moved separately, designating Prince Holding Group and its chairman Chen Zhi under the EU Global Human Rights Sanctions Regime on 31 July 2026, citing at least ten scam compounds built and operated throughout Cambodia, with a further listing reported in early August adding the Jin Bei Group, an associated individual, and an armed group operating in the border region. The two actions rest on different legal bases, run on different timetables, and have not yet been reconciled into a single multilateral designation list, which is itself the structurally significant fact: enforcement pressure on Cambodia's scam-compound economy is intensifying, but through parallel unilateral tracks rather than a coordinated international framework.

This matters because the underlying conduct, the operation of scam compounds under cover of Cambodian corporate and casino licensing, sits precisely at the intersection of sanctions architecture and the enabler-jurisdiction weaknesses that Cambodia has struggled to close. The divergence between the US and EU legal bases for action against what appears to be an overlapping set of principals and entities is worth tracking as its own pattern, since it shapes how financial institutions build sanctions-screening logic when authoritative lists do not converge.

Other Developments

Domestic licence enforcement continues alongside foreign sanctions pressure. Cambodia's Commercial Gambling Management Commission revoked Casino Licence No. 248 held by Casino YING HUANG in Preah Sihanouk province, after finding links to online-scam activity and the illegal possession of weapons and narcotics. This is a confirmed, primary-sourced action by the domestic regulator and sits alongside the foreign designations as part of the same broader enforcement picture, even though it proceeds under wholly separate domestic legal authority.

FATF follow-up findings remain unresolved even as Cambodia reports efforts to avoid re-listing. Cambodia exited the FATF grey list in February 2023, having been listed twice previously, and is a member of the Asia/Pacific Group on Money Laundering. A FATF follow-up report from August 2023 continued to find weaknesses in fit-and-proper testing of casinos, lawyers and accountants, the professional and sectoral gatekeepers most exposed to the scam-compound economy. Trade press reporting characterises Cambodia as intensifying enforcement ahead of a further evaluation cycle specifically to avoid a third grey-list placement, but FATF itself has not yet re-assessed the jurisdiction on this point, so the enforcement-intensity narrative and the formal compliance record have not yet converged.

A sole operative crypto-AML gateway persists while a broader digital asset law is drafted. The National Bank of Cambodia's Prakas B7-024-735 remains the only functioning crypto-asset AML gateway for bank and payment-service-provider channel activity, under which authorised firms become financial-intelligence-unit reporting entities. Trade press reporting indicates a comprehensive Digital Asset Law is targeted for a final draft in November 2026, with legislative approval anticipated by the end of 2026, which would extend regulatory perimeter beyond the current bank/PSP-channel Prakas gateway to a wider range of digital-asset activity.

Cross-Monitor Connections

The Prince Group and Jin Bei Group designations connect directly to conflict-finance and state-capture concerns tracked elsewhere in the fleet: the scam-compound economy operates in border areas with reported links to an armed group, placing financial-integrity findings here adjacent to territorial-control and extractive-economy signals followed by sibling monitors. The sanctions divergence between Washington and Brussels is also a useful case study for any monitor tracking multilateral-versus-unilateral enforcement architecture, since the same underlying conduct is being addressed through non-aligned legal instruments on non-aligned timetables. Separately, the prospective Digital Asset Law sits at a natural seam with payment-infrastructure tracking, since a widened crypto perimeter in Cambodia would affect how payment and banking channels interact with digital-asset activity going forward, though that connection is noted here only as a structural adjacency, not a finding in its own right.

Outlook

The sanctions picture is likely to keep escalating on parallel tracks: further OFAC and EU Council actions against the Prince Group/Jin Bei Group network should be expected given the pattern established across 2025 and 2026, without assurance that the two regimes will align on scope or named entities. Cambodia's domestic casino-licence revocation campaign is probable to continue as the visible enforcement response to FATF-identified weaknesses, but whether this satisfies FATF's own re-assessment criteria will not be clear until FATF conducts its next evaluation; the gap between enforcement activity and formal compliance recognition is the element to watch. On the crypto side, the targeted November 2026 final draft of the Digital Asset Law, with legislative approval anticipated by the end of 2026, as scheduled, would mark a material extension of Cambodia's regulatory perimeter beyond the existing bank/PSP Prakas gateway; confirmation of enactment would be the next material trigger for this domain.

Earlier periodic briefs (6)
3 Nov 2026 · fim-2026-11-03

Lead Signal

Cambodia's sanctions exposure escalated materially on two separate tracks that share a common target set but no common legal basis. The United States Treasurys Office of Foreign Assets Control, on 23 June 2026, expanded its October 2025 Prince Group Transnational Criminal Organization designation by adding nine individuals and twenty-six entities, including Hu Xiaowei, described in the designation as second-in-command of the network. OFAC grounded the action in Executive Order 13581 as amended by Executive Order 13863. Separately, the EU Council designated Prince Holding Group and its chairman Chen Zhi under its Global Human Rights Sanctions Regime on 31 July 2026, with a related designation of Jin Bei Group and Zhu Zhongbiao following in early August 2026; the supporting reporting describes at least ten scam compounds operated throughout Cambodia. The two actions target overlapping networks on different legal footing and on different timetables, which is itself the structurally significant finding: two major sanctioning authorities converging independently on the same Cambodia-based scam-compound architecture is a stronger signal of structural entrenchment than either action alone, and the divergence in bases and dates is a standing feature of how cross-bloc sanctions architecture currently treats this target set rather than a one-off coincidence.

The EU action rests on secondary reporting tiered below the OFAC press release itself: no Official Journal primary instrument was retrieved, so the EU designation is carried as probable rather than confirmed, while the OFAC designation is directly evidenced by Treasurys own release and stands as confirmed.

Other Developments

Overlapping target sets, divergent legal bases. The practical consequence of the US and EU proceeding on separate instruments against the same Cambodia-linked scam-compound networks is that obliged entities screening against sanctions lists face two distinct designation records, with different effective dates and different underlying predicate conduct descriptions, for what is substantively the same underlying illicit-finance architecture.

Cross-Monitor Connections

The scam-compound sanctions activity sits squarely at the intersection of financial-crime enforcement and the physical and human-trafficking infrastructure that generates the proceeds being laundered; the designations themselves cite human-trafficking and scam-operation conduct as the predicate, which is a conflict-finance and state-capture-adjacent pattern that a conflict-finance-focused monitor would track on the compound-operator side even though the sanctions action itself is the financial-integrity signal here. The overlapping-but-divergent US/EU designation pattern is also relevant to any payments-focused reading of Cambodia, insofar as the entities named sit within or adjacent to the same commercial and banking environment that payment-system developments in Cambodia operate in, though no payments-specific finding is drawn from this sanctions substrate here.

Outlook

The near-term signal to watch is whether the EU designation is followed by a retrievable Official Journal instrument, which would allow the current probable-confidence EU finding to be confirmed on a primary-source basis. Given that OFAC has already expanded its designation once since the original October 2025 action, a further expansion naming additional individuals or entities tied to the same network, as scam-compound operations in Cambodia remain under active scrutiny from multiple sanctioning authorities, is a plausible continuation of the pattern rather than a certainty.

25 Oct 2026 · fim-2026-10-25

Lead Signal

Cambodian courts have frozen close to US$1 billion in assets linked to Prince Group, issued thirty-two arrest warrants, and sought INTERPOL assistance against twenty-nine ringleaders who have fled overseas. This domestic action follows, rather than leads, a sequence of US Treasury sanctions action: OFAC had already imposed sweeping sanctions on 146 targets within the Prince Group Transnational Criminal Organization, with related designations continuing into 2026. The sequencing is itself the finding: Cambodia's largest domestic asset-freeze and arrest-warrant action of the period arrived only after sustained foreign sanctions pressure on the same network, a pattern consistent with a reactive rather than self-initiated enforcement posture toward transnational scam-finance operations based on its territory.

Other Developments

A virtual-asset licensing framework emerges alongside the enforcement push. The National Bank of Cambodia and the Securities and Exchange Regulator of Cambodia are reported to have launched a joint oversight framework, in effect from late September 2026, under which NBC-supervised banks require central-bank approval to provide virtual-asset services, other firms require a SERC licence, and authorised firms become reporting entities to Cambodia's Financial Intelligence Unit. This finding rests on a single secondary source, and the underlying prakas or circular establishing the framework has not been independently retrieved, so its precise legal form and scope remain to be confirmed.

Cambodia's standing position outside the FATF list of jurisdictions under increased monitoring continues. As of the FATF statement published 19 June 2026, the list of jurisdictions under increased monitoring contains 22 countries, and Cambodia is not among them, continuing its status since removal from that list in February 2023. Cambodia remains a member of the Asia/Pacific Group on Money Laundering. Separately, casinos and other gambling institutions are understood to be designated reporting entities under Article 5 of the 2020 AML/CFT Law, a standing feature of the regime rather than a new development.

Cross-Monitor Connections

The Prince Group asset-freeze action connects directly to gambling-sector enforcement activity in Cambodia this period, where casino inspections and online-gambling prohibitions are being enforced in parallel with the scam-network asset freeze, suggesting overlapping jurisdiction between gambling regulators and financial-crime enforcement bodies. The emerging virtual-asset licensing framework also connects to payments-sector developments, where the central bank has separately tightened oversight of non-bank e-money issuers; together these signal a single regulatory posture tightening across gambling, payments, and crypto sectors at once, each reinforcing the others' enforcement rationale.

Outlook

The FATF's October 2026 plenary outcome for Cambodia postdates the list consulted for this brief and should be checked for any change to Cambodia's monitoring status. The draft Law on the Management of Virtual Assets and Digital Assets, reported as targeted for a final draft in the fourth quarter of 2026, would also materially affect the digital-asset architecture described above if it supersedes the current prakas-based approach. Absent a Cambodian national risk assessment citation and absent independent verification of the underlying virtual-asset prakas, both the sanctions-enforcement narrative and the crypto-licensing narrative should be read as provisional pending further primary-source confirmation.

19 Oct 2026 · fim-2026-10-19

Lead Signal

Cambodia's financial-integrity profile this cycle is defined by a widening gap between external sanctions and enforcement architecture and the pace of domestic Cambodian action. On 23 June 2026, OFAC expanded sanctions on the Prince Group Transnational Criminal Organization, designating nine individuals, including Hu Xiaowei as alleged second-in-command, and 26 entities spanning the UK, BVI, Hong Kong, Singapore and Thailand, under Executive Order 13581 as amended by Executive Order 13863. This expanded tranche builds on earlier designations and signals that the US and UK regard Prince Group's international financial-services footprint as a continuing target. Domestically, Cambodia's National Bank revoked the payment service provider licence of Tian Xu International Technology Plc, known commercially as CoolCash, on 3 August 2026, a licence that had been issued only in May 2024. The revocation follows the UK's March 2026 sanctioning of the company over its alleged links to the Prince Group and its alleged provision of financial services to the group, a sequence that places the Cambodian regulator's domestic licence action roughly five months behind the triggering UK sanctions action.

Other Developments

Casino-sector AML/CFT enforcement invoked directly. A 7 October 2026 Cambodian government press statement explicitly names the Anti-Money Laundering and Counter-Financing of Terrorism Law, alongside the Law on Anti-Online Scams, as the legal basis for a nationwide multi-agency casino inspection sweep across 16 provinces, framing unregulated online gambling as itself a form of technology-enabled scamming. This is a Confirmed, Tier 1 government statement and formally brings licensed casinos within AML/CFT reporting-entity enforcement focus.

Long Bay allegations test enforcement completeness. An Al Jazeera investigative broadcast on 10 October 2026 alleges continuing online fraud, coercion, trafficking and drug activity at the Long Bay resort in Dara Sakor, Koh Kong, with alleged official protection, despite the stated October crackdown. This is probable-tier reporting from a single investigative broadcast, not yet corroborated by a Cambodian government document addressing the specific allegations, and it sits alongside continued independent reporting, including from Amnesty International, disputing the completeness of prior crackdown claims.

Virtual-asset oversight brought within the AML/CFT perimeter. The National Bank of Cambodia and the Securities and Exchange Regulator of Cambodia published a joint virtual-asset oversight framework around 23-25 September 2026, splitting licensing between NBC (for banks) and SERC (for non-bank crypto-asset service providers) and bringing licensed entities within AML/CFT reporting-entity status to the Cambodia Financial Intelligence Unit. A draft Law on the Management of Virtual Assets and Digital Assets is targeted for a final draft in November 2026, stated to align with FATF VASP expectations.

FATF posture stable but watched. Cambodia was removed from the FATF increased-monitoring list in February 2023 and remains off it as at this cycle. The Cambodia Financial Intelligence Unit's 2026 operational plan, dated 5 February 2026, reportedly seeks direct financial-sanctions tooling and expanded cooperation hotlines with China, Singapore and Mekong states ahead of FATF's fifth-round mutual evaluation scheduled for 2028, though this rests on a single Tier 3 secondary source without a located primary FIU document.

Cross-Monitor Connections

The casino-sector enforcement sweep and its explicit AML/CFT legal basis connect directly to world-payments' tracking of the National Bank of Cambodia's parallel tightening of the non-bank payments perimeter, including the Tian Xu licence revocation and the closed-loop e-money notification regime, both of which touch the same institutions now facing heightened AML/CFT scrutiny. The virtual-asset oversight framework likewise overlaps with world-payments' and crypto's tracking of the NBC/SERC split licensing announcement, read here specifically through the lens of the AML/CFT reporting-entity obligations that licensure creates. The advennt monitor's parallel tracking of the casino inspection sweep and the Long Bay allegations shares the same underlying factual basis as this brief's enabler-jurisdiction assessment, though advennt frames it through gambling-regulatory consequences rather than financial-crime architecture.

Outlook

The principal item to watch is whether Cambodian domestic enforcement action against Prince Group-linked entities accelerates to narrow the gap with US and UK sanctions designations, or whether the pattern of lagged domestic response, illustrated by the five-month gap between UK sanctions and the Tian Xu licence revocation, persists. The scope-defining virtual-asset regulatory release promised by NBC and SERC, and the targeted November 2026 final draft of the comprehensive virtual-asset law, will determine how quickly the new AML/CFT reporting perimeter for crypto-asset service providers becomes operationally meaningful. Cambodia's preparation for FATF's fifth-round mutual evaluation, scheduled for 2028, provides a structural deadline against which this cycle's casino-sector and virtual-asset developments should be read.

11 Oct 2026 · fim-2026-10-11

Lead Signal

Cambodia's financial-integrity picture this cycle is defined by a widening gap between the architecture of its anti-money-laundering reporting system and its enforcement follow-through, set against an escalating foreign sanctions track targeting a Cambodia-based conglomerate. The Cambodia Financial Intelligence Unit, CAFIU, disseminates fraud-related financial intelligence that accounts for roughly 20 to 25 percent of its total disseminations, yet few of these spontaneous disclosures result in investigations, according to IMF-linked reporting. This structural pattern, where financial intelligence is generated but not consistently converted into enforcement action, is the more analytically significant finding this cycle than any single case outcome, because it describes how the system as a whole is functioning rather than one event within it.

Running in parallel, the US Office of Foreign Assets Control expanded its sanctions against the Prince Group transnational criminal organisation on 23 June 2026, designating nine individuals and 26 entities and unmasking Hu Xiaowei as a key figure. This expands an October 2025 designation and sits alongside independent sanctions actions taken by the United Kingdom and South Korea against figures connected to the same network, indicating a broadening, multi-jurisdictional sanctions architecture responding to a single Cambodia-linked conglomerate.

Other Developments

CAFIU dissemination-to-investigation gap. IMF-linked reporting finds that fraud-related disclosures made up approximately 20 to 25 percent of CAFIU's total disseminations in recent years, but that few spontaneous disclosures resulted in investigations. The recommendation accompanying this finding calls for closer integration of Cambodia's AML strategy with its national anti-scam strategy, including greater use of FIU-to-FIU channels. The underlying IMF staff report itself was not independently retrieved this cycle; the finding rests on secondary press reporting of the IMF's assessment.

FATF grey-list status unchanged. Cambodia remains off the FATF grey list, a status it has held since February 2023. The FATF/APG fifth-round mutual evaluation calendar places a possible onsite visit around November 2028 with plenary discussion potentially in July 2029, meaning no near-term FATF mutual-evaluation action is scheduled for Cambodia.

Sanctions regime divergence. The United States, the United Kingdom and South Korea have each independently sanctioned individuals or entities connected to Prince Group, while Thailand, Taiwan and Singapore are separately pursuing domestic enforcement action. This pattern of parallel, uncoordinated national responses to a single network is itself a structural signal about the current state of international sanctions coordination on Cambodia-linked financial crime.

Cross-Monitor Connections

The Prince Group sanctions expansion connects directly to gambling-sector and crypto-sector monitoring: Prince Group's designation as a transnational criminal organisation has been separately linked to Cambodia-based casino and gambling-adjacent operations, and to a Cambodian bank, Prince Bank PLC, whose liquidation was ordered by the National Bank of Cambodia in January 2026 following related US indictments. The CAFIU enforcement-follow-through gap also bears on gambling-sector oversight, since the scam-centre activity generating the fraud disclosures CAFIU receives substantially overlaps with casino-linked enforcement actions being tracked separately.

Outlook

The principal indicator to watch is whether Cambodia's new Law on Combating Technology-Enabled Scams, which creates a dedicated scam-related money-laundering offence, produces a measurable increase in the proportion of CAFIU fraud disclosures that convert into investigations, which would address the IMF's core finding. On the sanctions track, further coordinated or independent designations from the US, UK, South Korea or other jurisdictions against Prince Group-linked individuals or entities would extend the current pattern of sanctions regime divergence rather than resolve it, absent a formal multilateral coordination mechanism.

4 Oct 2026 · fim-2026-10-04

Lead Signal

Cambodia's casino-scam enforcement architecture moved from targeted licence action to confirmed sector-wide compliance this cycle. The Royal Government, acting through the CCOS Secretariat under Royal Government Order No. 01 BB (14 July 2025), revoked 18 casino licences and suspended 9 further licences pending investigation for links to online scam activity. In parallel, the CCTC Secretariat confirmed that 24 casinos across Preah Sihanouk, Banteay Meanchey and Svay Rieng provinces had ceased online and live-streamed casino betting, football betting, digital lotteries and virtual-cockfighting products following a 30 September 2026 deadline. Read as architecture rather than incident, this represents a structural escalation in enforcement capacity against the casino-enabled money-laundering channel, though the underlying scam-compound financial infrastructure that the casino sector has serviced remains only partially dismantled by these actions alone.

Other Developments

A parallel supervisory build-out in digital assets arrived alongside the casino enforcement. The National Bank of Cambodia and the Securities and Exchange Regulator of Cambodia issued a joint statement, dated 23 September 2026, establishing a dual-gateway supervisory intent for virtual-asset activity: NBC-licensed banks require NBC prior approval for crypto-asset services, while non-bank entities will require an SERC licence. The statement explicitly cites money-laundering risk as a driver, and is positioned ahead of a comprehensive Law on the Management of Virtual Assets and Digital Assets targeted for completion by end-2026. This sits on top of the existing interim Prakas B7-024-735 regime rather than replacing it outright, and marks a material build-out of the virtual-asset supervisory perimeter.

Payment-sector supervision also tightened. The National Bank of Cambodia revoked the payment-institution licence of Tian Xu International Technology Plc (CoolCash Cambodia), the sixth such payment-institution licence revocation in nine months. Although resting on a single secondary-press source, this pattern of repeated revocations is consistent with, and plausibly connected to, the broader enforcement push against financial channels enabling the casino-scam nexus.

Cross-Monitor Connections

The casino licence revocations and online-betting cessation connect directly to the gambling-regulatory monitor's enforcement and payments findings, where the same CCOS and CCTC actions are read through a market-entry and licence-revocation-risk lens rather than an illicit-finance lens. The NBC-SERC joint statement on virtual assets connects to the crypto monitor's licensing coverage, where the same dual-gateway supervisory intent is read as a licensing-framework development rather than a money-laundering-risk driver. The payments monitor separately tracks the Tian Xu/CoolCash licence revocation as a payments-regulatory event; here it is read as one data point in a sustained enforcement pattern against financial channels serving illicit flows.

Outlook

Watch for whether the CCOS and CCTC enforcement actions extend beyond the 24 confirmed casinos and 18 revoked licences to additional venues, and whether any published CCOS/CCTC/CGMC gazette notice emerges to corroborate the press-reported enforcement narrative with a primary instrument. On the digital-asset side, the comprehensive Law on the Management of Virtual Assets and Digital Assets targeted for completion by end-2026 will determine whether the NBC-SERC dual-gateway intent becomes a binding statutory licensing perimeter or remains an interim supervisory posture layered on Prakas B7-024-735.

5 Sep 2026 · fim-2026-08-21

Lead Signal

The United States Treasury has moved in two escalating tranches against the Prince Group transnational criminal organization headquartered in Cambodia, sanctioning 146 targets in October 2025 and expanding the designation on 23 June 2026 to nine individuals and 26 entities beneath principal Chen Zhi, including Hu Xiaowei. In parallel, FinCEN finalized a Section 311 rule severing Huione Group from the US financial system. Read together, this is not an isolated enforcement action but the systematic dismantling of a layered corporate architecture that used scam-compound proceeds to build a multinational financial footprint, and it anchors this cycle's material-change assessment for Cambodia's sanctions exposure. Both actions are assessed at high confidence, resting on primary Treasury press releases rather than secondary reporting.

Other Developments

A second-tranche designation exposes the offshore layering structure. OFAC's 23 June 2026 action named Hu Xiaowei as controller of BVI holding companies and a Hong Kong-based financial cluster used, per Treasury's designation, to route scam-victim proceeds beneath Chen Zhi's network, illustrating how the Prince Group architecture depended on enabler-jurisdiction opacity in the British Virgin Islands and Hong Kong rather than concealment within Cambodia itself. Cambodia's central bank has moved to contain crypto-enabled laundering channels. The National Bank of Cambodia's Prakas B7-024-735 channels licensed cryptoasset activity through two authorised platforms, while Cambodia's telecommunications regulator has blocked domestic access to Binance, Coinbase, and OKX, an infrastructure-level containment strategy assessed at high confidence as responsive to the virtual-asset laundering typologies associated with Huione Group. The containment strategy reflects a deliberate policy choice to restrict access to unlicensed offshore venues rather than to build out a comprehensive on-chain supervisory regime, a distinction that matters for how durable the containment proves against future circumvention. A reported liquidation order against Prince Bank remains only lightly sourced. Reporting attributes to the National Bank of Cambodia an order liquidating and suspending Prince Bank's operations following Chen Zhi's indictment; this rests on a single lower-tier source and should be treated as assessed rather than confirmed pending primary regulator confirmation.

Cross-Monitor Connections

The crypto-containment strategy documented here, Prakas-based licensing paired with exchange-access blocking, sits directly adjacent to the World Payments Monitor's coverage of Cambodia's evolving virtual-asset and e-wallet oversight, and to the Crypto monitor's tracking of the same Prakas licensing regime from a digital-asset-market perspective; both should be read as complementary lenses on a single regulatory event rather than independent developments. The underlying scam-compound network that generated the proceeds now subject to sanction also intersects with the Advennt gambling-regulatory monitor's coverage of Cambodia's casino-sector enforcement wave, where licensed and unlicensed venues alike have faced closure amid the same anti-scam crackdown; the sanctions and casino-enforcement tracks are best read as two faces of the same underlying network rather than unrelated developments.

Outlook

The pace of this cycle's designations, two tranches within roughly eight months, moving from the top-level organization to second-tier BVI and Hong Kong facilitators, suggests further downstream designations targeting remaining layering vehicles are plausible, though not yet evidenced. Cambodia's crypto-containment posture, built on infrastructure blocking rather than a comprehensive licensing statute, carries structural durability risk: exchange-access blocking is more easily circumvented than a codified licensing prohibition, and watch for whether the two-platform sandbox model expands or hardens into fuller statutory form. The unresolved sourcing gap around the Prince Bank liquidation is the most consequential single item to confirm next cycle, given its implications for the domestic banking sector's exposure to the same network.

Domain intelligence (D1–D8)

D1 Sanctions

escalatingmaterial_change

Sanctions

Cambodia sits at the centre of an escalating but structurally divergent sanctions campaign targeting the Prince Group and the associated Jin Bei Group network. The US Treasury's Office of Foreign Assets Control, acting on 23 June 2026, expanded its October 2025 transnational-criminal-organisation designation of the Prince Group by adding nine individuals and twenty-six entities, and for the first time named Hu Xiaowei as the networks second-in-command. A parallel FinCEN Section 311 action was reported alongside the OFAC move, indicating coordinated action within the US government even where the two agencies rely on different statutory tools. On the European side, the EU Council designated Prince Holding Group and its chairman Chen Zhi under the EU Global Human Rights Sanctions Regime on 31 July 2026, with the designation record citing at least ten scam compounds built and operated throughout Cambodia. A further listing, reported in early August, added the Jin Bei Group, an associated individual named Zhu Zhongbiao, and the Democratic Karen Benevolent Army, an armed group operating in Cambodia's border region.

Continue reading

The analytically significant feature of this picture is not any single designation but the fact that the US and EU actions proceed on wholly separate legal bases, under separate statutory regimes, and on non-aligned timetables, targeting an overlapping but not identical set of entities and individuals. The US basis is rooted in transnational organised crime and fraud; the EU basis is rooted in human rights violations connected to trafficking and forced criminality within the scam compounds themselves. This is a sanctions-regime-divergence pattern worth tracking in its own right: institutions building sanctions-screening logic against Cambodia-linked counterparties cannot rely on a single consolidated list, and the absence of a unified multilateral instrument means screening gaps are likely to persist even as both tracks continue to add names.

Domestically, Cambodia's own licence-enforcement apparatus has continued to move against the casino sector that underpins much of this activity. The Commercial Gambling Management Commission revoked Casino Licence No. 248 held by Casino YING HUANG in Preah Sihanouk province, citing links to online-scam activity and the illegal possession of weapons and narcotics. This is a confirmed domestic enforcement action, operating under separate domestic legal authority from either the US or EU sanctions tracks, but addressing the same underlying scam-compound economy that both foreign sanctions programmes target. Read together, the domestic licence-revocation campaign and the dual foreign sanctions tracks describe a jurisdiction under sustained, multi-pronged external and internal pressure on the same commercial architecture, without yet showing convergence into a single enforcement framework.

Outlook

Further additions to both the OFAC and EU Council designation lists against the Prince Group/Jin Bei Group network should be expected, consistent with the pattern of incremental expansion already observed across 2025 and 2026 on each respective track. There is no indication that the US and EU intend to formally align their designation lists or legal bases, so institutions should expect the divergence itself to persist rather than resolve. Cambodia's domestic casino-licence revocation campaign is likely to continue as the visible enforcement response to the same scam-compound economy, and further revocations beyond Casino YING HUANG are a reasonable expectation given the pattern already established, though confirmation of any additional action will depend on future reporting from the Commercial Gambling Management Commission.

Judgment: US and EU sanctions architecture against the Cambodia-based Prince Group / Jin Bei Group network continues to expand on separate legal bases and timetables (OFAC TCO/fraud basis; EU Global Human Rights Sanctions Regime), indicating sustained multilateral pressure on Cambodia's scam-compound economy. Probable
Cumulative analysis

Sanctions Architecture and Evasion — Cumulative Analysis

This is the first cycle in which Cambodia has been assessed as a structured jurisdiction within the FIM pipeline, and the sanctions-architecture picture that emerges is already dense enough to read as an integrated whole rather than a single incident. The anchor event remains the coordinated action taken on 14 October 2025, in which OFAC, DOJ and FinCEN designated 146 targets tied to the Prince Group Transnational Criminal Organization and its chairman Chen Zhi, forfeited 127,271 Bitcoin worth approximately 15 billion dollars, the largest civil forfeiture in US history, and severed Huione Group from the US financial system via a Section 311 special measure after finding that the group had processed over 98 billion dollars in crypto inflows, including at least 4 billion dollars in illicit proceeds and 37 million dollars in DPRK cyber-heist proceeds. The UK acted in parallel that same day, listing Prince Group entities under the Global Human Rights Sanctions Regulations 2020 and freezing a 12 million pound London mansion, establishing from the outset that the underlying laundering architecture reached into UK real estate as a destination for proceeds sourced in Cambodia.

Over the eight months that followed, this architecture continued to develop rather than resolve. In April 2026, OFAC designated sitting Senator Kok An, the K99 Group, and Heng Feng Cambodia Bank together with 26 further targets, evidencing direct senatorial ownership of a domestic bank used to launder at least 73 million dollars from US victims, a finding that moves the architecture assessment from a scam-compound network with political tolerance toward a scam-compound network with direct elite ownership of formal financial infrastructure. The UK widened its listing again in June 2026, adding individuals including Hu Xiaowei and Wang Xiaoyan and freezing a further 9 million pound London penthouse, confirming that the UK property nexus identified in October 2025 was not a single asset but an ongoing pattern.

Running through this entire eighteen-month window is a persistent divergence in the posture of the European Union: no autonomous designation of any Prince Group or Huione-linked entity has been issued, with reliance instead placed on the FATF-tracking high-risk third-country delegated-regulation mechanism, on which Cambodia does not appear as of the December 2025 update. This is not a lag likely to close quickly through a future EU decision alone, since the delegated-regulation mechanism is structurally tied to FATF list status rather than to an autonomous EU assessment of Cambodia-specific risk, and Cambodia itself remains off the FATF Increased Monitoring list, having been delisted in February 2023 and not renominated as of the June 2026 plenary despite the scale of enforcement documented since October 2025. The result is a three-way divergence in instrument design, US/UK autonomous Magnitsky-style designation, EU FATF-linked delegated regulation, and the FATF list-status mechanism itself, that together shape how differently exposed financial institutions in each jurisdiction currently are to Cambodia-linked scam-network risk, independent of the underlying conduct being identical across all three.

The disposition of Chen Zhi himself threads through this architecture as a single data point illustrating its practical limits: arrested in Cambodia in January 2026 despite the outstanding US indictment and OFAC designation, he was extradited to China rather than to the United States, which continues its prosecution in absentia. This demonstrates that even a coordinated, high-profile, Tier 1 designation and indictment does not guarantee control over the disposition of the designated individual once physical custody rests with a third state exercising its own preferences.

The obligation-framework references anchoring this domain, OFAC Executive Order 13694/14390 Global Magnitsky and TCO sanctions authority, and the UK Global Human Rights Sanctions Regulations 2020, remain, on current evidence, fully covered from a designated-list perspective for banks, crypto-asset operators and payment companies; the uncovered exposure is not a screening gap on the US/UK side but the absence of an equivalent EU-side trigger, which is the structural finding this cumulative record keeps returning to.

Outlook

Looking across the cumulative record, the near-term trajectory of this domain turns on two independent horizon events: the October 2026 FATF Plenary, the next point at which the scam-compound and crypto-laundering exposure documented in Cambodia could prompt a renewed Increased Monitoring nomination, and the next periodic high-risk third-country list update by the European Commission, which would reassess the non-listed status of Cambodia against updated FATF outputs. Neither event is coupled to the other, and neither is coupled to further US or UK autonomous designation activity, meaning the three-way instrument divergence documented across this cycle is likely to persist as a structural feature of the sanctions landscape regardless of how either horizon event resolves.

domain_sub_briefs · D1 · Cumulative analysis
Standing baseline position

US (E.O. 13581 TCO basis) and EU (Global Human Rights Sanctions Regime basis) sanctions architecture against the Cambodia-based Prince Group / Jin Bei Group network continues to expand on separate legal bases and timetables.

Periodic updates (6)
3 Nov 2026 · fim-2026-11-03

Sanctions

The sanctions architecture surrounding Cambodia-based scam-compound networks escalated on two independent tracks. On 23 June 2026 the United States Treasurys Office of Foreign Assets Control expanded its Prince Group Transnational Criminal Organization designation, originally made in October 2025, by adding nine individuals and twenty-six entities. Hu Xiaowei was named in the expanded designation as second-in-command of the network. OFAC grounded the action in Executive Order 13581, as amended by Executive Order 13863, a direct and confirmed finding taken from Treasurys own press release.

Separately, and on a distinct legal basis, the EU Council designated Prince Holding Group and its chairman Chen Zhi under its Global Human Rights Sanctions Regime on 31 July 2026. A further related designation naming Jin Bei Group and its principal Zhu Zhongbiao, alongside a reference to the Democratic Karen Benevolent Army, followed in early August 2026. Secondary reporting describing the EU action states that the designated networks built and operated at least ten scam compounds throughout Cambodia. This EU finding is held at probable rather than confirmed confidence, because the supporting sources available are secondary commentary rather than a retrieved EU Official Journal primary instrument.

The structurally significant reading of these two actions is not either designation in isolation but their relationship to each other: two separate sanctioning authorities, proceeding under two entirely different legal instruments and on two different timetables, converged on overlapping Cambodia-based networks engaged in scam-compound operations. That convergence, absent coordination, is itself evidence that the underlying illicit-finance architecture in Cambodia has become salient enough to draw independent attention from multiple major sanctioning jurisdictions within a matter of weeks of each other. This is an architecture-level finding rather than an incident-level one: it describes a persistent divergence in how different sanctioning blocs legally characterise and act against the same underlying conduct, a divergence that obliged entities conducting sanctions screening must navigate as two separate designation records rather than one harmonised list entry.

The practical consequence for screening and due-diligence functions is that the same underlying network now carries two distinct designation footprints, with different effective dates, different naming conventions for associated individuals and entities, and different textual descriptions of the predicate conduct. A screening programme relying on only one list, or treating the two designations as duplicative rather than additive, would misstate the scope of the exposure.

Outlook

Whether the EU designation can be upgraded from probable to confirmed confidence depends on a retrievable Official Journal instrument becoming available; that is a sourcing question rather than a substantive one, since the underlying designation itself is not in doubt. On the US side, the pattern of incremental expansion, this being the second action against the Prince Group network since October 2025, suggests that further additions naming individuals or entities connected to the same network are a plausible continuation given that scam-compound operations in Cambodia remain under active scrutiny from multiple sanctioning authorities, though whether or when any such expansion occurs cannot be stated with confidence at this point.

25 Oct 2026 · fim-2026-10-25

Sanctions

Cambodia's domestic action against Prince Group illustrates the layered architecture now visible between US sanctions designations and local enforcement follow-through. OFAC designated 146 targets within the Prince Group Transnational Criminal Organization pursuant to its sanctions authorities, and this designation sequence preceded Cambodia's own domestic response: Cambodian courts froze close to US$1 billion in assets, issued thirty-two arrest warrants, and sought INTERPOL assistance against twenty-nine ringleaders who have fled overseas. Read architecturally rather than as an isolated incident, this sequencing demonstrates that a comprehensive-sanctions-style foreign designation against a transnational scam network based in Cambodia can function as the proximate trigger for Cambodian domestic asset-freeze and warrant action, rather than Cambodia initiating enforcement independently. This is itself a signal worth separating from the headline figures: enablement, in the form of a domestic enforcement gap that persisted until the external designation applied pressure, is as analytically significant here as the eventual enforcement action.

The scale of the Cambodian response, once triggered, is notable: a near-US$1 billion freeze and thirty-two warrants represents one of the largest domestic sanctions-adjacent enforcement actions evidenced for Cambodia in this record. The INTERPOL assistance request extends the reach of the domestic action beyond Cambodia's borders, targeting ringleaders who have already fled, which is consistent with the broader pattern of transnational scam-finance networks relying on geographic dispersal of leadership to evade enforcement even where the underlying operational infrastructure is territorially concentrated. No Cambodian government primary notice of the asset freeze has been located; the finding rests on secondary reporting of court action, a sourcing gap that should temper precision on the exact figures even as the broad direction is well corroborated by the preceding OFAC designation record.

Outlook

The relevant forward marker is whether Cambodia's domestic enforcement posture shifts from reactive to self-initiated in future sanctions-adjacent cases, or whether this pattern of trailing foreign designations persists. The FATF's October 2026 plenary outcome for Cambodia, which postdates the list consulted for this period, is a near-term marker worth monitoring for any change to Cambodia's standing outside the list of jurisdictions under increased monitoring.

19 Oct 2026 · fim-2026-10-19

Sanctions

The architectural picture for Cambodia's sanctions exposure this cycle is one of expanding US action against the Prince Group Transnational Criminal Organization running ahead of corresponding Cambodian domestic enforcement. On 23 June 2026, the US Treasury's Office of Foreign Assets Control imposed sanctions on nine individuals, including Hu Xiaowei, described as second-in-command of the organization, and 26 entities under Executive Order 13581 as amended by Executive Order 13863. The designated entities span the United Kingdom, the British Virgin Islands, Hong Kong, Singapore and Thailand, illustrating the geographic breadth of Prince Group's alleged financial-services network well beyond Cambodia's own borders. This is a Comprehensive-sanctions-type designation under OFAC's framework, targeting a transnational criminal organization rather than a state.

The UK had separately sanctioned a Prince Group-linked company in March 2026 over its alleged provision of financial services to the group. Cambodia's own domestic action followed materially later: the National Bank of Cambodia revoked the payment service provider licence of Tian Xu International Technology Plc, trading as CoolCash, on 3 August 2026, roughly five months after the UK's sanctions action and more than two years after the licence had originally been issued in May 2024. This sequencing, UK designation in March, Cambodian domestic licence revocation in August, is the clearest architectural signal of sanctions-regime divergence visible in this cycle's evidence: Cambodia's financial-sector supervisor is acting, but materially behind the designating jurisdictions.

Absence of enforcement is itself a signal worth naming directly: no Cambodian government statement reviewed this cycle disclosed a parallel domestic sanctions designation, asset freeze, or criminal referral against the OFAC-designated individuals or entities themselves, as distinct from the payment-licence action taken against a linked company. Whether Cambodian authorities intend to take direct action against the sanctioned individuals, as opposed to companies providing them financial services, is not established in the material available this cycle.

Outlook

The sanctions-architecture item to watch is whether the gap between US/UK designation and Cambodian domestic enforcement narrows or persists. A further OFAC or UK tranche naming additional Cambodia-based or Cambodia-linked entities would be the clearest signal of continued divergence; conversely, a Cambodian action against a sanctioned individual directly, rather than against a linked company's licence, would mark a structural shift in enforcement posture.

11 Oct 2026 · fim-2026-10-11

Sanctions Architecture and Evasion

The US Office of Foreign Assets Control expanded its sanctions against Prince Group on 23 June 2026, designating nine individuals and 26 entities and unmasking Hu Xiaowei as a figure within the network. This action expands an October 2025 designation of Prince Group as a transnational criminal organisation, deepening rather than initiating the US sanctions architecture directed at this Cambodia-linked network. The underlying legal basis for the designation traces to Executive Order 13581 as amended by Executive Order 13863, instruments targeting transnational criminal organisations specifically.

This sanctions expansion does not stand alone internationally. The United Kingdom and South Korea have each pursued independent, parallel designations against figures connected to Prince Group, while Thailand, Taiwan and Singapore are separately reported to be pursuing their own domestic enforcement action against the same network. The resulting pattern is one of sanctions regime divergence: multiple jurisdictions acting against a single network through separate national instruments rather than through a coordinated multilateral sanctions mechanism. From an architecture-over-incident perspective, this divergence is itself the more durable signal, since it indicates an absence of a unified international sanctions-coordination channel for Cambodia-linked financial crime networks, even as individual national designations accumulate.

The Prince Group network's reach extends into Cambodia's domestic banking sector. The National Bank of Cambodia ordered the liquidation of Prince Bank PLC and suspended its operations on 8 January 2026, after the bank's majority owner, Chen Bo, and Prince Group leader Chen Zhi were implicated in US fraud and money-laundering indictments. This domestic regulatory action and the US sanctions expansion target overlapping individuals and corporate structures, though they proceed under separate legal authorities: one a domestic banking-supervision action by Cambodia's central bank, the other a US Treasury sanctions designation. The evidentiary basis for the Prince Bank liquidation detail rests on secondary (Wikipedia-sourced) reporting of contemporaneous coverage, and the underlying primary NBC notice was not independently retrieved this cycle, so this element should be read with that sourcing limitation in mind.

For institutions with any Cambodia nexus, the practical sanctions-exposure question is not whether a single designation captures all relevant counterparties, but whether the accumulating, uncoordinated designations across the US, UK and South Korea, combined with domestic Cambodian banking-supervision action against the same network, together constitute sufficient screening coverage. A counterparty cleared against one jurisdiction's list may still carry exposure through a different jurisdiction's independent designation of the same underlying network.

Outlook

The trajectory here is escalating rather than settling. Further independent designations from the US, UK, South Korea, or from Thailand, Taiwan or Singapore acting domestically, would extend the current pattern of parallel but uncoordinated national responses to Prince Group. Absent a formal multilateral coordination mechanism being established, institutions with Cambodia exposure should expect continued jurisdiction-by-jurisdiction designation activity rather than a single consolidated international sanctions action against this network.

4 Oct 2026 · fim-2026-10-04

Sanctions Architecture and Evasion

Cambodia sits at the centre of a sustained multilateral sanctions escalation this cycle. OFAC's original October 2025 designation of the Prince Group as a transnational criminal organisation, covering 146 targets, was expanded on 23 June 2026 to add 9 individuals and 26 entities, with the network's second-in-command, Hu Xiaowei, publicly unmasked for the first time. In parallel, FinCEN finalized a rule under Section 311 of the USA PATRIOT Act severing Huione Group, a Cambodia-based financial conglomerate, from the US financial system for laundering virtual-currency scam and heist proceeds. The UK's Foreign, Commonwealth and Development Office took coordinated or complementary action alongside these US measures.

The architecture here is instructive for compliance functions well beyond Cambodia's borders. The Section 311 mechanism against Huione Group is a systemic, correspondent-banking-level severance rather than a targeted asset freeze against named individuals, meaning any institution with correspondent or nested relationships touching Huione Group faces a hard cutoff rather than a due-diligence judgment call. The Prince Group designation, by contrast, operates through the more familiar named-party listing mechanism under Executive Order 13581 as amended by Executive Order 13863, requiring screening against specific individuals and entities. Firms with exposure through correspondent banking, high-net-worth client relationships, or fund structures connected to Cambodia-domiciled counterparties should treat both mechanisms as live and cumulative, not alternative.

What makes this cycle's development architecturally significant rather than merely incidental is the divergence in how different jurisdictions have responded to the same underlying network. The US and UK have issued overlapping but not identical target lists. Singapore, Thailand, Taiwan and Hong Kong have pursued separate domestic enforcement actions rather than formal designations of their own. This divergence means that sanctions screening calibrated only to OFAC's list will miss enforcement-driven exposure in Southeast Asian jurisdictions where the same underlying conduct is being addressed through different legal instruments entirely. A compliance programme that treats OFAC's list as the sole screening reference for Cambodia-linked exposure is working from an incomplete architecture.

Outlook

The open question is whether this represents a peak of multilateral pressure or an early stage of a longer campaign. Historical designation patterns against transnational scam-compound networks suggest further expansions are plausible if new corporate vehicles or facilitators are identified. Firms with any Cambodia-linked correspondent or counterparty exposure should not treat the current designation list as final; the June 2026 expansion pattern indicates OFAC is actively working an open investigation rather than closing a file.

5 Sep 2026 · fim-2026-08-21

Sanctions Architecture and Evasion

Cambodia sits at the center of the most significant sanctions action against a transnational criminal organization to touch the jurisdiction this cycle. The US Treasury's Office of Foreign Assets Control designated the Cambodia-headquartered Prince Group a Transnational Criminal Organization and sanctioned 146 targets in October 2025, an action assessed at high confidence and anchored in a primary Treasury press release. FinCEN moved in parallel, finalizing a Section 311 special measures rule that severs Huione Group, a Prince Group-linked financial conglomerate, from the US financial system entirely. This combination of OFAC designation and FinCEN Section 311 action represents the two principal instruments in the US sanctions-architecture toolkit deployed together against a single network, an escalation pattern more commonly associated with state-level adversaries than with a single corporate criminal group.

The architecture did not stop at the initial designation. On 23 June 2026, OFAC expanded its action to nine individuals and 26 entities beneath Chen Zhi, the Prince Group's principal, at high confidence. This second tranche specifically targeted Hu Xiaowei, whose position beneath Chen Zhi controlled a set of British Virgin Islands holding companies and a Hong Kong financial cluster. The architectural reading of this second tranche is significant: rather than treating the October 2025 action as terminal, Treasury has continued to map and dismantle the layering structure beneath the initial designee, moving methodically down the corporate hierarchy. This is the hallmark of an architecture-over-incident enforcement posture, a sustained campaign against a structure, not a single punitive act.

A further, less certain data point concerns Cambodia's domestic banking sector. Reporting, resting on a single lower-tier source and therefore assessed rather than confirmed, indicates the National Bank of Cambodia ordered the liquidation of Prince Bank and suspended its operations following Chen Zhi's indictment. If accurate, this would represent a significant escalation from designation of an offshore criminal network to direct supervisory action against a domestically licensed bank, and would materially change the sanctions-evasion risk calculus for any institution that maintained correspondent or counterparty relationships with Prince Bank. Given the single-source basis for this claim, it should be treated as a watch item pending primary National Bank of Cambodia confirmation rather than an established fact.

Three-pillar balance is worth noting explicitly here: the enforcement action to date is overwhelmingly an AML-pillar action, asset freezes, designation, and financial-system exclusion, rather than a CTF or CPF-specific measure. This is consistent with the underlying predicate, which is proceeds-generating scam-compound activity rather than terrorism or proliferation financing, but institutions assessing exposure should not read the AML framing as exhaustive; the same network's use of layered corporate vehicles carries structuring characteristics relevant to broader financial-crime risk typologies beyond the sanctions list itself.

For institutions with any Cambodia, BVI, or Hong Kong nexus, the practical sanctions-screening implication is immediate: 146 initial targets plus 35 additional targets in the second tranche constitute a substantial sanctions list that touches multiple jurisdictions and corporate structures, and screening programs calibrated only to the entity named at initial designation risk missing the downstream layering vehicles named in the expansion.

Outlook

The velocity of this designation campaign, a second tranche within roughly eight months of the first, moving methodically from the top-level entity to named second-tier controllers and their offshore vehicles, suggests the sanctions architecture against Prince Group is not yet complete. Continued downstream designations targeting remaining BVI, Hong Kong, or other enabler-jurisdiction vehicles are plausible over the coming cycles, though not yet evidenced. The unresolved question of Prince Bank's liquidation status is the most consequential single item to watch, given its implications for domestic banking-sector exposure to the sanctioned network; confirmation from the National Bank of Cambodia, rather than continued reliance on secondary reporting, should be treated as the threshold event that would upgrade this item's confidence.

D2 Beneficial Ownership

no_changeno_changestanding position

Beneficial Ownership and Corporate Transparency

Cambodia sits outside the European Union AML architecture altogether: it is not an EU or EEA member state, so the directly applicable AML Regulation, the transposed sixth AML Directive, and the AMLA Regulation supervisory perimeter do not apply to Cambodian entities. The directly relevant beneficial-ownership development for Cambodia this cycle is domestic: the use by Prince Group of a network of more than 100 shell companies to layer laundering flows, exploiting the absence in Cambodia of a comprehensive public beneficial-ownership registry. The 2020 AML/CFT Law and the 2021 Customer Due Diligence Directive in Cambodia impose beneficial-ownership identification duties on financial institutions and designated non-financial businesses and professions, but no comprehensive public registry exists, and successive Asia/Pacific Group follow-up reports have flagged persistent legal-entity-transparency deficiencies as a standing weakness in the Cambodian AML/CFT framework. This registry gap, not the Prince Group case in isolation, is the structural finding: it is the enabling condition that permits large-scale shell-company layering regardless of which specific criminal network exploits it.

Continue reading

Compounding the registry gap is the economic-citizenship, or payment-for-passports, scheme operated in Cambodia, which allowed Chinese-born scam-network figures to acquire Cambodian nationality and, with it, an additional layer of obscured beneficial-ownership trails. Following 2023 scrutiny of the scheme, the government stopped publishing new-citizen names in the royal gazette, a decision that deepened rather than resolved the underlying transparency deficit. Read alongside the shell-company finding, this evidences a state-administered mechanism intersecting with beneficial-ownership opacity, suggestive of state institutions facilitating rather than merely failing to prevent concealment.

Globally, the EU AML Package sets the structural direction for beneficial-ownership and corporate-transparency reform, and it is worth stating as durable backdrop against which the registry gap in Cambodia is read. The Package comprises three distinct instruments: the AML Regulation, Regulation (EU) 2024/1624, which is directly applicable across Member States without national transposition; the sixth AML Directive, which each Member State transposes into domestic law; and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes the Anti-Money Laundering Authority and a hybrid EU-level supervisory perimeter under which AMLA will directly supervise a defined set of high-risk cross-border obliged entities while indirectly supervising the remainder through national authorities, shifting AML/CFT supervision away from a purely national model. The only structural link between Cambodia and this architecture remains the European Commission high-risk third-country delegated-regulation mechanism, Regulation 2016/1675 as amended by 2026/46 and 2026/83, in force from December 2025, on which Cambodia does not currently appear, notwithstanding the scale of Prince Group and Huione enforcement action documented since October 2025.

A further development bears on the compliance consequence of any future change in the international standing of Cambodia: the Money Laundering and Terrorist Financing (Amendment) Regulations 2026 in the UK, in force from 30 June 2026, narrowed the statutory definition of high-risk third country under Regulation 33 of the Money Laundering Regulations 2017 to the FATF Call for Action (blacklist) list only, removing the broader Increased Monitoring (grey list) tier from the automatic enhanced-due-diligence trigger. This is structurally significant for Cambodia specifically: should Cambodia return to the FATF grey list at a future plenary, this narrowed UK definition would no longer automatically trigger EDD obligations that would previously have applied, reducing the practical compliance consequence of any renewed grey-listing decision for UK-regulated firms.

The active-scheme inventory characterises the combined citizenship-for-sale and shell-layering configuration as a discrete scheme of preliminary high severity, spanning this domain and the enabler-jurisdiction domain, with a documented red-flag indicator, layered use of over 100 shell companies to obscure beneficial ownership of laundering proceeds, most observable at onboarding for fund-structure and corporate customer typologies. The standing beneficial-ownership-register tracker for Cambodia is assessed as worsening, reflecting the compounding effect of the registry gap itself and the loss of citizenship-grant transparency, rather than any single new event this cycle. Firm-type exposure under this domain spans banks and cross-sector obliged entities, with customer-typology exposure concentrated in high-net-worth individuals, corporate structures and fund structures, precisely the typologies through which shell-company layering and citizenship-acquisition opacity operate.

Outlook

The most consequential near-term horizon event for this domain is not a Cambodia-specific instrument but the already-in-force narrowed UK high-risk-third-country definition, which will condition how any future FATF re-listing decision translates into UK EDD obligations. The next periodic high-risk third-country list update by the European Commission remains a second, slower-moving horizon event, structurally decoupled from Cambodia-specific enforcement given the continued reliance of the EU on the FATF-tracking delegated-regulation mechanism rather than an autonomous listing tool.

Judgment: No KH-specific beneficial-ownership register development located this cycle. Uncertain
Cumulative analysis

Beneficial Ownership and Corporate Transparency — Cumulative Analysis

This is the first cycle assessing Cambodia within the FIM beneficial-ownership and corporate-transparency domain, and the picture that emerges is structural rather than event-driven. Cambodia sits outside the European Union AML architecture: it is not an EU or EEA member, so the direct applicability of the AML Regulation, the transposed sixth AML Directive, and the AMLA Regulation supervisory perimeter do not reach Cambodian entities. The domestically relevant finding is the exposure, in the Prince Group case, of more than 100 shell companies used to layer laundering flows, made possible by the absence in Cambodia of a comprehensive public beneficial-ownership registry. The 2020 AML/CFT Law and 2021 Customer Due Diligence Directive in Cambodia impose beneficial-ownership identification duties on financial institutions and DNFBPs, but no public registry exists, and successive Asia/Pacific Group follow-up reports have flagged legal-entity-transparency deficiencies as a persistent weakness rather than a newly discovered one; this cycle evidence from the Prince Group case corroborates a pre-existing structural condition rather than introducing a new one.

Layered onto the registry gap is the economic-citizenship scheme operated in Cambodia, which allowed Chinese-born scam-network figures to acquire Cambodian nationality, and the 2023 decision to stop publishing new-citizen names in the royal gazette following scrutiny of that scheme, a decision that has compounded rather than resolved the transparency deficit around who holds Cambodian nationality and, through it, corporate and property interests.

Globally, the EU AML Package remains the durable structural backdrop against which any beneficial-ownership or transparency finding is read, comprising three distinct instruments: the directly applicable AML Regulation, Regulation (EU) 2024/1624; the sixth AML Directive, transposed per Member State; and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes a hybrid EU-level supervisory perimeter under which AMLA directly supervises a defined set of high-risk cross-border obliged entities while national authorities retain indirect supervision of the remainder. The only structural link between Cambodia and this architecture remains the European Commission high-risk third-country delegated-regulation mechanism, on which Cambodia does not appear as of the December 2025 update, notwithstanding the scale of enforcement action against infrastructure hosted in Cambodia since October 2025.

A parallel development, procedurally unconnected to Cambodia specifically but structurally significant for how any future change in the international standing of Cambodia would be felt, is the narrowing by the UK of its statutory high-risk-third-country definition to the FATF Call for Action list only, in force from 30 June 2026, removing the broader Increased Monitoring (grey list) tier from the automatic enhanced-due-diligence trigger under Regulation 33 of the Money Laundering Regulations 2017. Should Cambodia return to the FATF grey list at a future plenary, this narrower UK definition would no longer automatically trigger the EDD obligations that previously applied, reducing rather than increasing the practical compliance consequence of any renewed grey-listing decision.

Read cumulatively, the beneficial-ownership registry gap in Cambodia and the loss of citizenship-grant transparency are durable structural conditions rather than developments likely to be resolved by any single enforcement episode against Prince Group-linked entities; the active-scheme inventory characterises the combined citizenship-for-sale and shell-layering configuration as a high-severity, ongoing scheme spanning this domain and the enabler-jurisdiction domain, with a documented red-flag indicator, layered use of over 100 shell companies, most observable at onboarding for fund-structure and corporate customer typologies.

Outlook

The most consequential near-term horizon event for this domain is not a Cambodia-specific instrument but the already-in-force narrowed UK high-risk-third-country definition, which will condition how any future FATF re-listing decision translates into UK EDD obligations. The next periodic high-risk third-country list update by the European Commission remains a second, slower-moving, and structurally decoupled horizon event, given the continued reliance of the EU on the FATF-tracking delegated-regulation mechanism rather than an autonomous listing tool for Cambodia-specific risk.

domain_sub_briefs · D2 · Cumulative analysis

D3 Enabler Jurisdictions

watchmaterial_change

Enabler Jurisdictions

Cambodia's standing as an enabler jurisdiction continues to rest on an unresolved gap between domestic enforcement activity and the formal compliance assessment conducted by the Financial Action Task Force. Cambodia exited the FATF grey list in February 2023, after two prior grey-list periods running from 2011 to 2015 and from 2019 to 2023, and the jurisdiction remains a member of the Asia/Pacific Group on Money Laundering, the FATF-style regional body responsible for mutual evaluation in the region. That listing history is well established and not in dispute. What remains open is the substance of the follow-up assessment conducted after Cambodia's 2023 exit: a FATF follow-up report from August 2023 continued to find weaknesses specifically in the fit-and-proper testing applied to casinos, lawyers and accountants, the professional gatekeeper categories most directly implicated in the facilitation of the scam-compound economy documented under the sanctions track covered elsewhere in this brief.

Continue reading

Trade press reporting characterises Cambodia as actively intensifying enforcement in order to avoid a third grey-list placement ahead of a further evaluation cycle in 2026, framing the domestic licence-revocation campaign, including the Commercial Gambling Management Commission's revocation of Casino YING HUANG's licence, as part of a deliberate effort to close the fit-and-proper gaps that FATF previously identified. This is a reasonable inference but it is not yet a FATF finding: FATF itself has not published a new assessment this cycle confirming that the identified weaknesses have been remediated. The distinction matters because enforcement intensity and formal compliance recognition are not the same thing, and a jurisdiction can visibly step up domestic action without that action yet registering in the next mutual-evaluation or follow-up cycle. The architecturally significant point for an enabler-jurisdiction assessment is therefore that Cambodia's gatekeeper-sector weaknesses, specifically around casino, legal, and accountancy fit-and-proper testing, remain the identified structural vulnerability, and the domestic response to date has not yet been externally validated as sufficient to close it.

This gatekeeper-sector weakness is also the structural link between Cambodia's enabler-jurisdiction profile and the sanctions architecture covered elsewhere: the scam compounds targeted by US and EU sanctions action operate through corporate and casino structures that depend precisely on the kind of fit-and-proper gaps FATF has flagged. An enabler jurisdiction is, in this framing, not simply one that under-enforces, but one whose structural gatekeeper weaknesses create the permissive conditions that a separately-sanctioned criminal network can exploit.

Outlook

The next material development to watch is any formal FATF or APG reassessment of Cambodia's casino, legal, and accountancy fit-and-proper regime, which would either validate or contradict the trade-press narrative of successful remediation ahead of the 2026 evaluation cycle. Until such an assessment is published, the domestic licence-revocation campaign should be read as enforcement activity rather than confirmed structural remediation. A third grey-list placement remains a live possibility if the identified weaknesses are found to persist at the next evaluation point, and this is the single most consequential open question in Cambodia's enabler-jurisdiction profile going into the remainder of 2026.

Judgment: FATF's August 2023 follow-up report continues to find weaknesses in fit-and-proper testing of casinos, lawyers and accountants; Cambodia is reported intensifying enforcement ahead of a further 2026 evaluation cycle to avoid a third grey-list placement. Probable
Cumulative analysis

Enabler Jurisdictions and Professional Facilitators — Cumulative Analysis

This is the first cycle assessing Cambodia within the FIM enabler-jurisdiction domain, and the classification rests on a pattern rather than any single event: an enforcement asymmetry between mass action against low-level, often trafficked or coerced foreign labour and near-total absence of domestic prosecution of the Cambodian political-business elite who own and operate the underlying scam-compound infrastructure. The crackdown in Cambodia has deported more than 48,000 foreign workers while producing minimal domestic money-laundering prosecutions of senior network figures, an asymmetry reinforced this cycle by the finding that a sitting senator, Kok An, directly controlled a domestic bank, Heng Feng Cambodia Bank, used within the same laundering infrastructure that the deportation campaign targeted only at its lowest level.

The clearest single illustration of the capacity of Cambodia, and by extension China, to control high-value outcomes independent of foreign sanctioning authorities is the disposition of Chen Zhi. Arrested in Cambodia in January 2026 despite an outstanding US indictment and OFAC designation from the coordinated action taken in October 2025, he was extradited to China rather than to the United States, which continues its prosecution in absentia. This is not merely an isolated diplomatic decision; read against the enforcement-asymmetry pattern, it confirms that the institutional posture of Cambodia toward the underlying scam-compound economy is one of selective, politically directed enforcement rather than systemic incapacity.

The supervisory architecture of Cambodia supports this reading. CAFIU and the National Bank of Cambodia supervise AML/CFT compliance, but casino, real estate, DNFBP and virtual-asset supervision remain weak within a cash-based, dollarised economy that has proven hospitable to large-scale scam-compound and crypto-laundering infrastructure operating with apparent elite protection. The February 2023 delisting of Cambodia from the FATF Increased Monitoring list, and its continued absence from that list as of the June 2026 plenary despite the international enforcement scale documented since October 2025, is itself a standing feature of this domain: formal FATF status and demonstrated real-world enabler-jurisdiction risk remain misaligned pending the October 2026 plenary.

An evidentiary limitation should be carried forward with this domain rather than resolved by inference: domestic Cambodian prosecution and conviction data for senior scam-network financiers is largely absent from the current research window, meaning the enforcement-asymmetry judgment rests on documented deportation statistics and the absence of published domestic prosecution data, rather than on direct evidence that prosecutions were deliberately withheld. Read together with the sanctions-architecture and beneficial-ownership domains, the enabler-jurisdiction profile of Cambodia recurs across multiple structurally distinct findings, bank ownership by a sitting senator, shell-company facilitation, extractive-industry patronage, suggesting a single underlying institutional condition, the fusion of state office and private enrichment, rather than three unrelated phenomena.

Outlook

The enabler-jurisdiction classification is assessed with confidence given the consistency of the pattern across the sanctions-architecture, beneficial-ownership and extractive-industry domains, but its future trajectory depends heavily on the October 2026 FATF Plenary, the next scheduled point at which the international scale of documented exposure could prompt renewed Increased Monitoring consideration. Absent that nomination, the enabler-jurisdiction classification of Cambodia will likely continue to rest on bilateral US and UK enforcement action rather than a multilateral mechanism.

domain_sub_briefs · D3 · Cumulative analysis
Standing baseline position

Cambodia's casino-scam enforcement has escalated to sector-wide administrative action: 18 casino licences revoked, 9 suspended under Royal Government Order No. 01 BB, and a confirmed 30 September 2026 deadline after which 24 named casinos ceased online/proxy betting and related products.

Periodic updates (6)
4 Nov 2026 · fim-2026-11-01

Enabler Jurisdictions

Cambodia's standing as an enabler jurisdiction continues to rest on an unresolved gap between domestic enforcement activity and the formal compliance assessment conducted by the Financial Action Task Force. Cambodia exited the FATF grey list in February 2023, after two prior grey-list periods running from 2011 to 2015 and from 2019 to 2023, and the jurisdiction remains a member of the Asia/Pacific Group on Money Laundering, the FATF-style regional body responsible for mutual evaluation in the region. That listing history is well established and not in dispute. What remains open is the substance of the follow-up assessment conducted after Cambodia's 2023 exit: a FATF follow-up report from August 2023 continued to find weaknesses specifically in the fit-and-proper testing applied to casinos, lawyers and accountants, the professional gatekeeper categories most directly implicated in the facilitation of the scam-compound economy documented under the sanctions track covered elsewhere in this brief.

Trade press reporting characterises Cambodia as actively intensifying enforcement in order to avoid a third grey-list placement ahead of a further evaluation cycle in 2026, framing the domestic licence-revocation campaign, including the Commercial Gambling Management Commission's revocation of Casino YING HUANG's licence, as part of a deliberate effort to close the fit-and-proper gaps that FATF previously identified. This is a reasonable inference but it is not yet a FATF finding: FATF itself has not published a new assessment confirming that the identified weaknesses have been remediated. The distinction matters because enforcement intensity and formal compliance recognition are not the same thing, and a jurisdiction can visibly step up domestic action without that action yet registering in the next mutual-evaluation or follow-up cycle. The architecturally significant point for an enabler-jurisdiction assessment is therefore that Cambodia's gatekeeper-sector weaknesses, specifically around casino, legal, and accountancy fit-and-proper testing, remain the identified structural vulnerability, and the domestic response to date has not yet been externally validated as sufficient to close it.

This gatekeeper-sector weakness is also the structural link between Cambodia's enabler-jurisdiction profile and the sanctions architecture covered elsewhere: the scam compounds targeted by US and EU sanctions action operate through corporate and casino structures that depend precisely on the kind of fit-and-proper gaps FATF has flagged. An enabler jurisdiction is, in this framing, not simply one that under-enforces, but one whose structural gatekeeper weaknesses create the permissive conditions that a separately-sanctioned criminal network can exploit.

Outlook

The next material development to watch is any formal FATF or APG reassessment of Cambodia's casino, legal, and accountancy fit-and-proper regime, which would either validate or contradict the trade-press narrative of successful remediation ahead of the 2026 evaluation cycle. Until such an assessment is published, the domestic licence-revocation campaign should be read as enforcement activity rather than confirmed structural remediation. A third grey-list placement remains a live possibility if the identified weaknesses are found to persist at the next evaluation point, and this is the single most consequential open question in Cambodia's enabler-jurisdiction profile going into the remainder of 2026.

25 Oct 2026 · fim-2026-10-25

Enabler Jurisdictions

Cambodia continues to function in this period as the physical and operational base for the Prince Group network, whose corporate and financial architecture is understood to sit substantially offshore. The Cambodian domestic enforcement action, a near-US$1 billion asset freeze, thirty-two arrest warrants, and an INTERPOL assistance request against twenty-nine fled ringleaders, demonstrates both the scale of operations that had been permitted to develop on Cambodian territory and the structural pattern in which the territorial base of operations and the corporate-financial structure of a scam-finance network diverge, with Cambodia serving the former function while leadership and asset-holding structures extend elsewhere. The sequencing point from the sanctions domain applies equally here: this action followed rather than preceded prior OFAC designations against the Prince Group Transnational Criminal Organization, reinforcing the reading that Cambodia's role as an enabling jurisdiction persisted for a period before external pressure converted into domestic enforcement.

The emerging virtual-asset licensing framework, under which NBC-supervised banks and SERC-licensed entities would become CAFIU reporting entities, is relevant to the enabler-jurisdiction picture as a potential future mitigant: a functioning licensing and reporting perimeter for virtual-asset activity, if properly implemented and enforced, would reduce the structural permissiveness that has characterised Cambodia's position in this network's operations to date. However, this framework rests on a single secondary source and has not been independently verified as a published instrument, so its practical effect on enabler-jurisdiction dynamics cannot yet be assessed with confidence.

Outlook

Whether the draft Law on the Management of Virtual Assets and Digital Assets, targeted for a final draft in the fourth quarter of 2026, meaningfully tightens Cambodia's enabler-jurisdiction exposure will depend on both its eventual content and the consistency of its enforcement, which cannot be assessed from this period's evidence alone.

19 Oct 2026 · fim-2026-10-19

Enabler Jurisdictions and Professional Facilitators

Cambodia's enabler-jurisdiction profile this cycle is shaped by two developments pulling in different directions: a formal, government-led enforcement escalation, and continuing independent reporting that questions how complete that enforcement actually is. On the enforcement side, a 7 October 2026 Cambodian government press statement explicitly invoked both the Law on Anti-Online Scams and the Anti-Money Laundering and Counter-Financing of Terrorism Law as the legal basis for a coordinated, multi-agency casino inspection sweep across 16 provinces, framing unregulated online gambling as itself a form of technology-enabled scamming. This is a Confirmed, Tier 1 government statement and represents a structural claim about how Cambodian authorities intend to characterise and prosecute casino-linked illicit finance going forward, not merely a single enforcement incident.

Set against this is an Al Jazeera investigative broadcast on 10 October 2026 alleging that the Long Bay resort in Dara Sakor, Koh Kong, continues to harbour online fraud, coercion, human trafficking and drug activity despite the stated crackdown, with allegations that officials are protecting the operation. This is Probable-tier reporting of a single investigative broadcast and has not yet been corroborated by a Cambodian government document addressing the specific allegations. It should be read alongside continuing scrutiny of the government's own public narrative: reporting in mid-October 2026 noted that the Prime Minister's earlier declaration that scam compounds "no longer exist" in Cambodia has been contradicted by continued independent monitoring, including a September 2026 report from Amnesty International-adjacent sources disputing the completeness of the crackdown.

The analytically significant pattern for an enabler-jurisdiction assessment is the coexistence of genuine enforcement architecture (the inspection sweep, the explicit AML/CFT legal basis, the prior-cycle revocation of 20 casino licences and suspension of 29 more) with persistent, unresolved allegations that specific sites continue to operate with alleged official protection. Architecture-over-incident framing cautions against treating either the enforcement statistics or the Al Jazeera allegations in isolation: the former demonstrates state capacity and intent to act, the latter demonstrates that capacity has not yet translated into complete coverage, at least as alleged by external reporting that the state has not yet specifically rebutted.

Outlook

The item to watch is whether the Cambodian government issues a specific response to the Long Bay allegations, which would be the clearest signal of how seriously the state is treating gaps in its own crackdown narrative. The outcome of the October inspection sweep, including any further licence revocations or suspensions beyond the prior-cycle count of 20 revoked and 29 suspended, will be the next measurable data point for Cambodia's enabler-jurisdiction trajectory.

11 Oct 2026 · fim-2026-10-11

Enabler Jurisdictions and Professional Facilitators

Cambodia's standing as a jurisdiction requiring close enabler-risk monitoring is maintained this cycle by an IMF-linked finding on the functional gap between financial intelligence generation and investigative follow-through. Fraud-related disclosures account for approximately 20 to 25 percent of the Cambodia Financial Intelligence Unit's (CAFIU) total disseminations in recent years, yet few of these spontaneous disclosures result in investigations. This is an architecture-level finding, not an incident-level one: it describes how the financial-intelligence pipeline as a whole is functioning, and the finding is that intelligence is being generated at a meaningful volume but not being converted into investigative action at a proportionate rate.

The IMF's accompanying recommendation is for Cambodia to integrate its AML strategy more closely with its national anti-scam strategy, and to make greater use of FIU-to-FIU channels, which would allow fraud-related intelligence generated domestically to be shared with, and acted upon by, foreign counterpart units where the proceeds or beneficiaries are located abroad. The clear implication is that the current follow-through gap is not simply a domestic law-enforcement capacity question but also an international-cooperation one: intelligence that CAFIU holds may not be reaching the investigative bodies, domestic or foreign, best positioned to act on it.

This finding should be read alongside, rather than in isolation from, the broader institutional picture: the AML Law anchors CAFIU's designation under Article 19 and places it under National Bank of Cambodia administrative control under Article 21, with sector coordination addressed under Article 23. The statutory architecture for financial-intelligence collection and dissemination therefore exists; what the IMF-linked finding identifies is a gap between that architecture's intake function and its downstream enforcement conversion, not an absence of the underlying legal framework.

It is also notable that this follow-through gap exists in parallel with an active legislative response: the Law on Combating Technology-Enabled Scams, which came into force in April 2026, creates a dedicated scam-related money-laundering offence alongside four other new criminal offences targeting technology-enabled fraud conduct. Whether this new legal framework will close the CAFIU dissemination-to-investigation gap identified by the IMF, by providing prosecutors and investigators with a clearer dedicated offence to build cases around, is the key open question rather than a settled fact; the evidence available this cycle does not establish a causal link between the two, only their co-existence in the same period.

Cambodia's enabler-jurisdiction risk profile is therefore best characterised as one of partial architecture: the institutional and now legislative pieces for addressing scam-related financial crime are substantially in place, but the IMF's own data point indicates that the conversion from financial intelligence to investigative action remains the weak link in the chain as of this cycle.

Outlook

The indicator to watch is whether the proportion of CAFIU fraud disclosures that convert into actual investigations rises in subsequent reporting periods, which would be the clearest signal that either the new technology-enabled-scams law, the IMF's recommended FIU-to-FIU channel usage, or both, are having a measurable effect. Absent such a rise, Cambodia's enabler-jurisdiction risk profile on this specific dimension should be read as structurally unchanged notwithstanding the new legislative framework.

4 Oct 2026 · fim-2026-10-04

Enabler Jurisdictions and Professional Facilitators

Cambodia's casino sector has functioned as a node in the broader regional scam-compound financial infrastructure, and this cycle's enforcement activity is the clearest sign yet of state capacity being brought to bear on that enabler function. Under Royal Government Order No. 01 BB (14 July 2025), the CCOS Secretariat revoked 18 casino licences and suspended 9 further licences pending investigation for links to online scam activity. This is not an isolated case-by-case action: it is a batch revocation targeting a named cohort of facilitators, which is the structural signature of an enabler-jurisdiction correction rather than routine licensing housekeeping.

The second enforcement thread reinforces this reading. The CCTC Secretariat, working with the CGMC, confirmed that 24 casinos across Preah Sihanouk (12), Banteay Meanchey (7) and Svay Rieng (5) had ceased online and live-streamed casino betting, football betting, digital lotteries and virtual-cockfighting products by a 30 September 2026 deadline. The specific products targeted — online and proxy-streamed betting channels rather than land-based gambling for foreign patrons — are precisely the product forms most associated with cross-border money flows of unclear origin, the kind of flow that an enabler jurisdiction's casino sector is positioned to launder or obscure. Officials' framing of the driver as difficulty monitoring money of unclear origin is itself a structural admission: the online/proxy channel had outpaced the state's monitoring capacity, and the response has been prohibition rather than enhanced monitoring.

A third, adjacent signal strengthens the enabler-correction reading further. The National Bank of Cambodia revoked the payment-institution licence of Tian Xu International Technology Plc (CoolCash Cambodia), the sixth such revocation in nine months. Payment institutions are a frequent secondary facilitator layer in enabler-jurisdiction architectures, moving funds between casino, gambling-adjacent, and scam-compound actors. A sustained pattern of six revocations in nine months — rather than a single action — indicates this is a supervisory policy shift, not an isolated enforcement event.

The enablement-as-signal principle cuts in Cambodia's favour here: the absence of continued permissiveness is itself the finding. Where enforcement does not occur, that absence is analytically significant; here, enforcement has occurred at scale, across three provinces, against 24 venues and 27 licences (18 revoked, 9 suspended), which is itself the signal that the enabler-correction thesis should be taken seriously rather than dismissed as performative. That said, the underlying scam-compound financial infrastructure that the casino sector has served is unlikely to be fully dismantled by casino-side licence action and an online-betting prohibition alone; displacement to unlicensed or cross-border channels remains a live possibility that this cycle's evidence cannot rule out.

Outlook

The binding constraint going forward is less likely to be policy will and more likely to be enforcement capacity and displacement risk. Watch for whether a primary CCOS, CCTC or CGMC gazette notice is published to corroborate the press-reported enforcement narrative with an actual instrument text, and whether the 18 revoked and 9 suspended licences are followed by further revocations as investigations conclude. Also watch whether the sixth payment-institution licence revocation in nine months is followed by a seventh, which would confirm a sustained supervisory policy rather than a cluster of unrelated actions.

5 Sep 2026 · fim-2026-08-21

Enabler Jurisdictions and Professional Facilitators

This cycle's sanctions action against the Prince Group network is, from an enabler-jurisdiction perspective, as much a story about the British Virgin Islands and Hong Kong as it is about Cambodia. OFAC's 23 June 2026 expansion of its Prince Group designation named Hu Xiaowei, positioned beneath principal Chen Zhi, as controller of a set of BVI holding companies and a Hong Kong-based financial cluster used, per Treasury's designation, to route proceeds generated by Cambodia-based scam-compound operations. This is assessed at high confidence, resting on a primary Treasury press release, and it is the clearest evidence available this cycle that the Prince Group's financial architecture depended structurally on enabler-jurisdiction opacity rather than on concealment within Cambodia itself.

The BVI's role here follows a familiar enabler-jurisdiction pattern: corporate registration secrecy and light beneficial-ownership disclosure requirements make holding-company structures an efficient layering tool for proceeds that originate elsewhere. Hong Kong's role is distinct and arguably more significant from a financial-integrity perspective, a financial cluster embedded in a major international banking centre implies that proceeds moved through correspondent and commercial banking relationships with access to the broader international financial system, rather than remaining confined to informal or shadow-banking channels. The juxtaposition of a light-touch corporate registry in the BVI with a full-service financial centre in Hong Kong in a single layering structure illustrates how enabler jurisdictions function complementarily rather than in isolation: one jurisdiction supplies the opaque corporate vehicle, the other supplies access to the regulated financial system that vehicle needs to move value internationally.

This cycle's evidence does not extend to naming any specific bank, trust company, or professional facilitator within Hong Kong or the BVI that processed or structured these arrangements; the designation names the sanctioned entities and their controller, but the professional-facilitator layer beneath them remains undocumented in the sources available this cycle. This is a genuine evidentiary gap rather than an absence of such facilitation, given the scale of the structure described.

The parallel FinCEN Section 311 action against Huione Group is relevant to the enabler-jurisdiction picture in a different way: it severs a Prince Group-linked financial conglomerate from the US financial system directly, which, combined with the BVI and Hong Kong designations, suggests Treasury is treating the enabling financial infrastructure, not merely the Cambodia-based predicate criminality, as the primary target of this enforcement campaign. Architecturally, this is the more durable approach: designating the criminal principal alone leaves the layering infrastructure intact for reuse by successor actors, whereas targeting the enabling jurisdictions' financial and corporate vehicles directly degrades the infrastructure itself.

More broadly, this designation reinforces a now-familiar typology in Southeast Asian scam-compound financial architecture: proceeds generated onshore in a jurisdiction with weaker enforcement capacity are routed through a light-disclosure corporate registry before accessing the formal financial system via a well-regulated banking centre. Cambodia supplies the predicate criminality; the BVI supplies the legal wrapper; Hong Kong supplies the financial-system access. Institutions assessing correspondent, trade-finance, or private-banking exposure in Hong Kong should treat BVI-incorporated counterparties with limited beneficial-ownership transparency as a heightened-risk configuration, particularly where the underlying business rationale for the corporate structure is not readily apparent.

Outlook

Watch for whether the BVI or Hong Kong authorities take independent regulatory or law-enforcement action in response to the US designations, which would indicate the enabler jurisdictions themselves are treating this as a compliance failure requiring remediation rather than a purely US-driven action with no domestic consequence. Equally significant will be any further designations naming professional facilitators, lawyers, corporate service providers, or bank relationship managers, who structured or serviced the BVI holding companies or the Hong Kong financial cluster, which would move the picture from corporate-vehicle sanctions to facilitator-level accountability.

D4 Conflict Finance

no_changeno_changestanding position

Conflict Finance and Extractive-Industry Integrity

Applying the F4 conflict-finance trace, source, channel, deployment, to this cycle findings for Cambodia identifies a durable elite patronage network rather than a single transaction or scheme. The source is state-issued natural-resource concessions: forestry, land and riverine or coastal sand-dredging rights granted to politically connected individuals. The channel is a small group of Cambodian senators and oknha tycoons, including Mong Reththy, Ly Yong Phat, Lao Meng Khin, Try Pheap, and Kun Kim, who use political protection across forestry, military, police and customs agencies to run illegal logging operations, sand-dredging exports, notably to the Singapore market, and land-concession grabs. The deployment is personal enrichment that in turn bankrolls the ruling patronage system, converting state natural-resource assets into a durable funding mechanism for political power rather than a one-off enrichment event.

Continue reading

This is not a new phenomenon this cycle so much as a persistent architecture that prior enforcement action has only partially addressed. Try Pheap and Kun Kim were previously designated under the US Global Magnitsky programme, evidencing that the United States has identified individual network figures as sanctionable, but the broader patronage network, spanning multiple senators and oknha tycoons across multiple extractive sectors, remains active and largely undisturbed by that partial action. This is consistent with an F1 state-capture read: state agencies, forestry, military, police, customs, function as instruments of the extractive activity of the network rather than as independent regulators of it, an architecture finding that a designation targeting one or two individuals cannot by itself resolve.

The customer-typology and firm-type exposure for this domain centres on politically exposed persons, high-net-worth individuals and corporate structures, reflecting the fact that the mechanism operates through formally licit corporate and export vehicles, land concessions, logging permits, sand-export licences, rather than through overtly illicit financial instruments. This is precisely the pattern that makes extractive-industry corruption difficult to distinguish from licit commercial activity using transaction-monitoring alone; the relevant red-flag indicator is state-issued land or forestry concessions converted into export revenue flowing to politically connected corporate vehicles, an indicator most observable in trade documentation rather than in financial-transaction data.

This domain intersects directly with the enabler-jurisdiction finding elsewhere in this brief and with the state-capture flag raised for WDM: the same political-business elite structure that permits scam-compound operators like Kok An to control a domestic bank also permits senators and oknha tycoons to convert state natural-resource concessions into personal and party wealth, suggesting a single underlying institutional condition, the fusion of state office and private enrichment, expressed across financial-crime, extractive-industry and banking-control channels rather than three unrelated phenomena. No obligation-reference framework applies directly to the extractive-industry conduct itself in the current research window, since export-licensing and land-concession decisions occur at the level of Cambodian domestic administrative law rather than international AML/CFT instrument; the two prior Global Magnitsky designations remain the only sanctions-based obligation reference tied to this network.

Outlook

No regulatory-horizon event targeting this network was identified this cycle, and the trajectory of this domain is assessed as stable rather than deteriorating or improving, reflecting a persistent rather than actively worsening or actively resolving architecture. The partial nature of prior US Global Magnitsky action against only two of the network figures suggests that further designation activity, should it occur, would need to address the structural breadth of the network, multiple senators and oknha tycoons operating across multiple extractive sectors, rather than further individual designations, to have a materially different effect on the underlying patronage architecture.

Judgment: No conflict-finance development located for KH this cycle. Uncertain
Cumulative analysis

Conflict Finance and Extractive-Industry Integrity — Cumulative Analysis

This is the first cycle assessing Cambodia within the FIM conflict-finance and extractive-industry domain, and the finding is a persistent architecture rather than a new event. Applying the source-channel-deployment trace: the source is state-issued natural-resource concessions across forestry, land and sand-dredging rights; the channel is a small group of senators and oknha tycoons, Mong Reththy, Ly Yong Phat, Lao Meng Khin, Try Pheap, and Kun Kim, who use political protection across forestry, military, police and customs agencies to run illegal logging, sand-dredging exports, notably to Singapore, and land-concession grabs; and the deployment is personal enrichment that bankrolls the ruling patronage system.

This is not newly discovered this cycle; it is a durable architecture that prior, partial enforcement action has not disturbed. Try Pheap and Kun Kim were previously designated under the US Global Magnitsky programme, evidencing that individual network figures have been identified as sanctionable, but the broader network, spanning multiple senators and tycoons across multiple extractive sectors, remains active. This is consistent with a state-capture reading: state agencies function as instruments of the extractive activity of the network rather than as independent regulators of it, and a designation targeting one or two individuals has not, on current evidence, resolved the underlying architecture.

The mechanism operates through formally licit corporate and export vehicles, land concessions, logging permits, sand-export licences, rather than overtly illicit financial instruments, which is precisely what makes it difficult to distinguish from licit commercial activity using transaction-monitoring alone; the relevant red-flag indicator, state-issued concessions converted into export revenue flowing to politically connected corporate vehicles, is most observable in trade documentation rather than financial-transaction data.

Read cumulatively alongside the enabler-jurisdiction and sanctions-architecture domains, this network reinforces rather than duplicates the broader finding that the political-business elite structure in Cambodia fuses state office with private enrichment across multiple channels, bank ownership, extractive-industry concessions, and shell-company facilitation, rather than presenting three independently arising phenomena. Firm-type and customer-typology exposure remains concentrated in politically exposed persons, high-net-worth individuals and corporate vehicles, with no obligation-framework reference beyond the two prior Global Magnitsky designations identified this cycle, underscoring that the primary compliance relevance of this domain for regulated firms lies in PEP and beneficial-ownership screening around Cambodian extractive-industry and land-concession corporate structures, rather than in a transaction-monitoring red flag alone.

Outlook

No regulatory-horizon event targeting this network was identified this cycle, and the trajectory of this domain is assessed as stable, reflecting persistence rather than active deterioration or resolution. Should further sanctions action occur, its likely effectiveness will depend on whether it addresses the structural breadth of the network across multiple senators, tycoons and extractive sectors, rather than repeating the partial, individual-designation approach represented by the prior Try Pheap and Kun Kim listings.

domain_sub_briefs · D4 · Cumulative analysis

D5 Crypto / Digital Assets / Financial Innovation

watchmaterial_change

Crypto / Digital Assets / Financial Innovation

Cambodia's digital-asset regulatory architecture currently rests on a single operative instrument: the National Bank of Cambodia's Prakas B7-024-735, which functions as the sole crypto-AML gateway for activity channelled through banks and payment service providers. Under this Prakas, firms authorised to conduct Group 1 crypto-asset activity through the bank/PSP channel become reporting entities to Cambodia's financial intelligence unit, placing them inside the standard AML reporting perimeter that applies to regulated financial institutions more broadly. This is a narrow but functioning gateway: it covers bank- and PSP-channel activity specifically, and does not purport to be a comprehensive digital-asset regulatory framework covering the full range of crypto-asset activity that may occur outside that channel.

Continue reading

That gap is the context for the most significant development this cycle: trade press reporting indicates that a comprehensive Digital Asset Law is being drafted, with a final draft targeted for November 2026 and legislative approval anticipated by the end of 2026, as scheduled. If enacted on that timetable, this would represent a material extension of Cambodia's crypto-asset regulatory perimeter beyond the current Prakas gateway, bringing a wider range of digital-asset activity, potentially including activity outside the bank/PSP channel, within a dedicated statutory framework for the first time. This is a structural development rather than an incremental one: a single sector-specific Prakas applicable only to the regulated banking and payments channel is a materially different regulatory posture from a comprehensive cross-sectoral digital-asset statute, and the shift from one to the other would be a defining feature of Cambodia's financial-innovation regulatory landscape going into 2027.

It is important to be precise about the confidence level attached to this development: the existence and substance of the Prakas is corroborated by commentary citing the instrument, and the Digital Asset Law timeline rests on trade-press reporting of a targeted drafting and approval schedule, rather than on a published bill text or an NBC or government confirmation reviewed directly this cycle. The direction of travel, from a narrow bank/PSP crypto-AML gateway toward a comprehensive digital-asset statute, is consistent with regional trends and with Cambodia's own stated interest in developing its digital-asset sector, but the November 2026 and year-end 2026 dates should be treated as reported targets rather than confirmed statutory milestones until the draft itself is published or passed.

Outlook

The clearest marker to watch is whether the targeted November 2026 final draft of the Digital Asset Law materialises, and whether the drafting timetable holds through to the anticipated year-end 2026 legislative approval, as scheduled. Should the law pass broadly on this timetable, the next material question becomes how it interacts with the existing Prakas B7-024-735 gateway, whether it supersedes, supplements, or formally incorporates the bank/PSP-channel reporting-entity regime that currently governs Group 1 crypto-asset activity. Firms and counterparties with Cambodia-linked digital-asset exposure should treat the current Prakas-based gateway as the operative regime until any new statute is confirmed, while anticipating that the regulatory perimeter is likely to widen materially before the end of 2026 if the reported drafting timetable holds.

Judgment: NBC's Group1/Group2 Prakas remains the sole operative crypto-AML gateway; a comprehensive Digital Asset Law is reported targeted for a final draft in November 2026 with legislative approval expected by year-end. Probable
Cumulative analysis

Crypto, Digital Assets, and Financial Innovation — Cumulative Analysis

This is the first cycle assessing Cambodia within the FIM crypto and digital-asset domain, and the record is already substantial: Huione Group, comprising Huione Pay, Huione Crypto and Haowang or Huione Guarantee, processed over 98 billion dollars in crypto inflows between 2021 and 2025, including at least 4 billion dollars in illicit proceeds and 37 million dollars in DPRK cyber-heist proceeds. A finding by FinCEN that the group presented a primary money-laundering concern led to a Section 311 special measure, finalised in October 2025, severing Huione from US correspondent banking access in an architecture-over-incident action targeting the infrastructure hub itself. In the same coordinated action, the Bitcoin holdings of Prince Group, 127,271 BTC worth approximately 15 billion dollars, fed the record US civil forfeiture, confirming crypto as the single highest-severity illicit-finance channel in Cambodia.

Cambodia continues to lack a comprehensive virtual-asset-service-provider licensing and supervision regime commensurate with this scale of exposure, a standing structural gap rather than a new finding this cycle. Globally, the FATF virtual-asset standards and the EU Markets in Crypto-Assets Regulation set the direction for crypto-asset regulation, but neither currently reaches the domestic supervisory gap in Cambodia; the entire operative pressure on the crypto architecture in Cambodia across this cumulative record has come from US enforcement action, Section 311, OFAC designations, and parallel UK sanctions action, not from a global standard-setting body or a domestic Cambodian regulatory initiative.

The most significant development threading through this cumulative record is the apparent durability of the underlying business model against node-level disruption: single-vendor blockchain-analytics reporting indicates that Huione Guarantee-linked marketplace activity persists under rebrand despite the Section 311 designation and platform shutdown, prompting FinCEN to propose a further rule targeting successor entities, including H-Pay Service PLC, expected in the fourth quarter of 2026. This is not yet independently corroborated by a second analytics provider or a regulator statement, a confidence limitation carried forward rather than resolved this cycle, but it is consistent with a broader pattern in which a Tier 1 enforcement action against a primary entity does not eliminate the underlying guarantee-marketplace model, only displaces it toward successor branding.

Outlook

The FinCEN H-Pay rulemaking, expected in the fourth quarter of 2026, is the most consequential near-term horizon event for this domain; if finalised, it would close the successor-entity rebrand gap, though its ultimate effectiveness will depend on whether successor infrastructure can be identified and severed as comprehensively as the original entities were. Absent a dedicated VASP licensing and supervision regime in Cambodia, and absent independent corroboration of continued successor-entity activity, the medium-term trajectory of this domain remains dependent primarily on further US enforcement action rather than domestic Cambodian regulatory development.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

NBC/SERC joint virtual-asset oversight framework (Sept 2026) splits licensing between NBC (banks) and SERC (non-bank CASPs), bringing licensed entities within the AML/CFT reporting perimeter; a comprehensive draft Law on the Management of Virtual Assets and Digital Assets targets a final draft November 2026.

Periodic updates (5)
4 Nov 2026 · fim-2026-11-01

Crypto / Digital Assets / Financial Innovation

Cambodia's digital-asset regulatory architecture currently rests on a single operative instrument: the National Bank of Cambodia's Prakas B7-024-735, which functions as the sole crypto-AML gateway for activity channelled through banks and payment service providers. Under this Prakas, firms authorised to conduct Group 1 crypto-asset activity through the bank/PSP channel become reporting entities to Cambodia's financial intelligence unit, placing them inside the standard AML reporting perimeter that applies to regulated financial institutions more broadly. This is a narrow but functioning gateway: it covers bank- and PSP-channel activity specifically, and does not purport to be a comprehensive digital-asset regulatory framework covering the full range of crypto-asset activity that may occur outside that channel.

That gap is the context for the most significant development: trade press reporting indicates that a comprehensive Digital Asset Law is being drafted, with a final draft targeted for November 2026 and legislative approval anticipated by the end of 2026, as scheduled. If enacted on that timetable, this would represent a material extension of Cambodia's crypto-asset regulatory perimeter beyond the current Prakas gateway, bringing a wider range of digital-asset activity, potentially including activity outside the bank/PSP channel, within a dedicated statutory framework for the first time. This is a structural development rather than an incremental one: a single sector-specific Prakas applicable only to the regulated banking and payments channel is a materially different regulatory posture from a comprehensive cross-sectoral digital-asset statute, and the shift from one to the other would be a defining feature of Cambodia's financial-innovation regulatory landscape going into 2027.

It is important to be precise about the confidence level attached to this development: the existence and substance of the Prakas is corroborated by commentary citing the instrument, and the Digital Asset Law timeline rests on trade-press reporting of a targeted drafting and approval schedule, rather than on a published bill text or an NBC or government confirmation reviewed directly. The direction of travel, from a narrow bank/PSP crypto-AML gateway toward a comprehensive digital-asset statute, is consistent with regional trends and with Cambodia's own stated interest in developing its digital-asset sector, but the November 2026 and year-end 2026 dates should be treated as reported targets rather than confirmed statutory milestones until the draft itself is published or passed.

Outlook

The clearest marker to watch is whether the targeted November 2026 final draft of the Digital Asset Law materialises, and whether the drafting timetable holds through to the anticipated year-end 2026 legislative approval, as scheduled. Should the law pass broadly on this timetable, the next material question becomes how it interacts with the existing Prakas B7-024-735 gateway, whether it supersedes, supplements, or formally incorporates the bank/PSP-channel reporting-entity regime that currently governs Group 1 crypto-asset activity. Firms and counterparties with Cambodia-linked digital-asset exposure should treat the current Prakas-based gateway as the operative regime until any new statute is confirmed, while anticipating that the regulatory perimeter is likely to widen materially before the end of 2026 if the reported drafting timetable holds.

25 Oct 2026 · fim-2026-10-25

Crypto / Digital Assets / Financial Innovation

In Cambodia specifically, the most directly relevant development this period is the reported joint oversight framework launched by the National Bank of Cambodia and the Securities and Exchange Regulator of Cambodia in late September 2026, under which NBC-supervised banks require central-bank approval for virtual-asset services, other entities require a SERC licence, and authorised firms become reporting entities to Cambodia's Financial Intelligence Unit (CAFIU). This represents the first reported step toward a formalised virtual-asset reporting perimeter directly tied to Cambodia's domestic AML/CFT architecture, though the finding rests on a single secondary source and the underlying prakas or circular has not been independently retrieved, so its exact legal form and scope remain unconfirmed.

A draft comprehensive Law on the Management of Virtual Assets and Digital Assets is separately reported as targeted for a final draft in the fourth quarter of 2026. If finalised, this statute would replace or formalise the current ad hoc Prakas-based crypto perimeter with a dedicated legal framework, which would in turn determine the durability and enforceability of the CAFIU reporting-entity status described above. Globally, broader structural developments such as evolving FATF virtual-asset standards form context for this domestic picture, but the directly relevant exposure for Cambodia is this emerging domestic licensing-and-reporting architecture, not the global standard-setting process itself.

Outlook

The fourth-quarter-2026 timeline for the draft virtual-assets law, positioned ahead of the Black Swan Summit Cambodia in mid-November, is the key date to track. Until the underlying joint NBC-SERC framework is independently confirmed and the draft law's final content is known, Cambodia's virtual-asset AML/CFT exposure should be treated as a developing rather than settled architecture.

19 Oct 2026 · fim-2026-10-19

Crypto, Digital Assets, and Financial Innovation

Cambodia's virtual-asset oversight architecture took a structurally significant step this cycle. Around 23-25 September 2026, the National Bank of Cambodia and the Securities and Exchange Regulator of Cambodia jointly published a virtual-asset oversight framework that splits licensing responsibility: NBC-licensed commercial banks require central bank approval to offer virtual-asset services, while other, non-bank entities must secure a licence from SERC. The most consequential feature of this framework from an AML/CFT architecture perspective is that entities becoming licensed or authorised under either track also become AML/CFT reporting entities subject to the Cambodia Financial Intelligence Unit, bringing crypto-asset service providers within the formal reporting perimeter for the first time in a structured way.

This builds on an existing but narrower instrument: a National Bank of Cambodia Prakas governing transactions related to cryptoassets has been in force since its issuance, and already required prior NBC approval for certain categories of cryptoasset dealing by banks and payment institutions. The September 2026 joint framework widens this considerably by bringing non-bank crypto-asset service providers formally within SERC's licensing and, by extension, the AML/CFT reporting perimeter, where previously the dedicated non-bank track had not existed in the same structured form.

Layered on top of this is a forward-looking legislative project: an inter-ministerial working group is drafting a comprehensive Law on the Management of Virtual Assets and Digital Assets, targeting a final draft in November 2026 with legislative approval expected by end-2026. This draft is explicitly stated to be designed to match FATF's virtual-asset-service-provider expectations, which, if realised, would represent Cambodia's most FATF-aligned financial-innovation instrument to date. This is Probable-tier forward-looking material drawn from a single Tier 3 secondary source; the draft has not been enacted and carries no present legal effect.

The three-pillar balance principle is directly relevant here: the AML/CFT reporting-entity status attaching to virtual-asset licensees is the CTF/AML-relevant feature of this cycle's development, but no CPF-specific provision was identified in the material reviewed, a gap worth naming rather than assuming filled.

Outlook

The scope-defining regulatory release that NBC and SERC have signalled will follow the September 2026 joint framework is the most consequential near-term item to watch, since it will determine the practical boundaries of the new licensing and reporting perimeter. The targeted November 2026 final draft of the comprehensive virtual-asset law, and whether its enforcement and AML/CFT pillars are completed on the stated fourth-week-of-September 2026 internal timeline, will determine how quickly Cambodia's crypto-asset sector moves from a fragmented, partial permission structure to a comprehensive statutory regime.

4 Oct 2026 · fim-2026-10-04

Crypto, Digital Assets, and Financial Innovation

Cambodia's virtual-asset supervisory architecture is undergoing its most material shift since the 2024 interim Prakas. The National Bank of Cambodia and the Securities and Exchange Regulator of Cambodia issued a joint statement, dated 23 September 2026, establishing a dual-gateway supervisory intent: NBC-licensed banks require NBC prior approval for crypto-asset activity, while non-bank entities offering virtual-asset services will require a separate SERC licence. This is a structural finding, not an incident — it signals an institutional re-allocation of supervisory authority between the banking regulator and the securities regulator, ahead of a comprehensive Law on the Management of Virtual Assets and Digital Assets targeted for completion by end-2026.

The joint statement explicitly cites money-laundering risk as a driver for the forthcoming framework, which is a notable instance of CTF/CPF-adjacent reasoning being foregrounded in a licensing-architecture announcement rather than appearing only after an enforcement incident. This correction for the usual AML-volume bias is worth naming explicitly: regulators frequently cite money-laundering risk reactively, after a scandal; here it is being cited proactively, as a design principle for a dual-licensing gateway that does not yet exist in binding form.

The practical effect, until the comprehensive law is enacted, is an extension of the existing interim regime under Prakas B7-024-735 rather than its replacement. That Prakas already requires non-bank entities providing crypto-asset services to hold an NBC licence; the 23 September joint statement signals that this licensing function may migrate toward SERC for non-bank entities specifically, while banks remain under NBC's direct approval process. This bifurcation — bank-channel crypto exposure supervised by the banking regulator, non-bank CASP activity supervised by the securities regulator — is architecturally significant for compliance teams mapping counterparty risk: a Cambodia-facing crypto counterparty's regulatory status now depends on which regulator will ultimately hold its licence, a question the joint statement raises but does not yet resolve.

This development also sits adjacent to the casino-sector enforcement activity described elsewhere this cycle. Online gambling products and virtual-asset activity can share overlapping payment and settlement rails, and a tightening of the virtual-asset licensing perimeter at the same time as a crackdown on online casino betting products is consistent with a broader supervisory push against unmonitored money flows generally, rather than two unrelated policy tracks.

Outlook

The comprehensive Law on the Management of Virtual Assets and Digital Assets, targeted for completion by end-2026, is the development to watch. Its content will determine whether the dual-gateway supervisory intent in the 23 September joint statement becomes binding statute, whether existing Prakas B7-024-735 licensees are grandfathered or required to re-apply under the new framework, and whether the money-laundering-risk rationale cited in the joint statement translates into specific CASP due-diligence or reporting obligations. Compliance functions with Cambodia-facing virtual-asset exposure should treat the current period as transitional and avoid assuming the existing NBC-only licensing gateway will persist unchanged.

5 Sep 2026 · fim-2026-08-21

Crypto, Digital Assets, and Financial Innovation

Cambodia's crypto-integrity posture tightened materially this cycle through the convergence of a US enforcement action and a domestic containment strategy. FinCEN's Section 311 rule against Huione Group, a Prince Group-linked financial conglomerate assessed to have facilitated virtual-asset-enabled laundering, severs the group from the US financial system, at high confidence based on a primary Treasury source. This is the clearest evidence this cycle that the crypto dimension of the Prince Group network was not incidental to its financial architecture but a structural component of how proceeds were laundered and moved.

Domestically, the National Bank of Cambodia has pursued a parallel but distinct containment strategy. Its Prakas B7-024-735 channels licensed cryptoasset activity through two authorised platforms, a narrow, sandbox-style permission structure rather than an open licensing regime, while Cambodia's Telecommunication Regulator has blocked domestic access to three of the largest offshore exchanges: Binance, Coinbase, and OKX. This is assessed at high confidence, and framed explicitly as an AML/CFT-driven containment strategy targeting the virtual-asset flows associated with Huione Group's laundering typologies, rather than a general consumer-protection or market-development measure.

The architectural significance of this containment strategy is that it operates through infrastructure blocking, restricting access to unauthorised venues, rather than through a comprehensive statutory licensing and supervisory regime for virtual-asset activity generally. This is a materially less durable control than a codified licensing prohibition: infrastructure-level blocking of specific named exchanges can be circumvented through VPNs, peer-to-peer channels, or the emergence of substitute unlicensed venues, whereas a statutory licensing requirement backed by criminal or administrative penalty attaches to the underlying activity regardless of which specific platform is used. Institutions and compliance functions assessing Cambodia-linked virtual-asset exposure should treat the current containment measures as a floor, not a ceiling, on the jurisdiction's crypto-integrity risk.

The three-pillar balance point is instructive here as well: the FinCEN action against Huione Group is explicitly an AML measure targeting a financial conglomerate, while the NBC/TRC containment strategy is framed by the source material as AML/CFT-driven, meaning the containment strategy's authors have judged crypto-enabled terrorist-financing risk, not merely money-laundering risk, sufficiently material to warrant blocking major exchange access. This is a more explicit CTF-pillar acknowledgment than is typical in crypto-containment measures elsewhere, and it should not be read down to a pure AML story.

The absence, in the material available this cycle, of any parallel travel-rule instrument or virtual-asset-service-provider registration requirement beyond the two-platform sandbox is itself a notable finding: Cambodia's crypto-integrity architecture currently rests on exactly two levers, a narrow platform authorization and a blocking list, with no evidenced intermediate layer of registered-but-not-fully-licensed VASPs subject to ongoing supervision. This bimodal structure is unusual relative to more developed VASP regulatory regimes and may itself be a source of durability risk, since it offers no regulated middle tier into which currently blocked users might be channeled.

For financial institutions maintaining correspondent or custodial relationships touching Cambodia-linked virtual-asset flows, the practical implication is that screening against the Huione Group designation and its associated addresses should be treated as necessary but not sufficient; the broader containment architecture suggests Cambodian authorities themselves judge the offshore-exchange-access vector for laundering to remain material, a useful independent confirmation of underlying risk.

Outlook

The key structural question for the coming cycle is whether Cambodia's containment approach, sandbox licensing for two platforms plus exchange-access blocking, hardens into a comprehensive statutory virtual-asset framework, or remains an ad-hoc infrastructure response. Given the demonstrated circumvention risk inherent in blocking-based containment, continued reliance on this model without a parallel move toward codified licensing and supervision would leave a durable gap in Cambodia's crypto-integrity architecture, even as headline enforcement actions against named entities like Huione Group continue.

D6 Compliance Technology & Active Defence

no_changeno_changestanding position

Compliance Technology and Active Defence

No RegTech, AI or ML compliance-technology, or perpetual-KYC development specific to Cambodia was identified in this cycle research window. This is a null finding for the domain rather than an oversight: the crypto-enabled fraud exposure documented at scale under the crypto and digital-asset domain continues to be met with an absence of a dedicated virtual-asset-service-provider licensing and supervision regime in Cambodia, a standing structural gap rather than a new development. Under the enablement-as-signal principle, this absence is itself analytically relevant: a jurisdiction hosting infrastructure that processed over 98 billion dollars in crypto inflows, including at least 4 billion dollars in illicit proceeds, without a commensurate domestic compliance-technology or supervisory-technology build-out represents a persistent rather than resolving condition. No enforcement action, regulatory instrument, or industry compliance-technology initiative targeting the supervisory capacity of Cambodia in this domain was identified this cycle. This gap register limitation is noted honestly rather than filled with invented content: absent a published Cambodia National Risk Assessment or a CAFIU-issued virtual-asset sector risk assessment, any characterisation of domestic RegTech or supervisory-technology capacity beyond the licensing-regime absence itself would exceed what the evidence this cycle supports.

Continue reading

Outlook

No Cambodia-specific regulatory-horizon event applicable to compliance technology or active defence was identified this cycle. The trajectory of this domain is assessed as stable, reflecting the persistence of the underlying supervisory gap rather than any new deterioration or improvement; this stability should be read against, not independently of, the deteriorating trajectory documented in the crypto and digital-asset domain, since the absence of compliance-technology development is a structural condition that permits the crypto-integrity risk documented elsewhere in this brief to continue unaddressed at the domestic supervisory level. Should any RegTech, transaction-monitoring-technology, or VASP-supervisory-technology development emerge for Cambodia in a future cycle, it would represent a genuinely new datapoint against this currently empty baseline, rather than an incremental extension of an existing standing development.

Judgment: No RegTech/AI compliance-technology development located for KH this cycle. Uncertain
Cumulative analysis

Compliance Technology and Active Defence — Cumulative Analysis

This is the first cycle assessing Cambodia within the FIM compliance-technology and active-defence domain, and no RegTech, AI or ML compliance-technology, or perpetual-KYC development specific to Cambodia has yet been identified. This is a standing null finding rather than an oversight: the crypto-enabled fraud exposure in Cambodia, documented at critical severity under the crypto and digital-asset domain, continues to be met with an absence of a dedicated virtual-asset-service-provider licensing and supervision regime, a persistent structural gap rather than a new development this cycle. Under the enablement-as-signal principle, this absence carries analytical weight in its own right: a jurisdiction hosting infrastructure that processed over 98 billion dollars in crypto inflows, including at least 4 billion dollars in illicit proceeds, without a commensurate domestic compliance-technology or supervisory-technology build-out represents a durable condition rather than a resolving one. No published Cambodia National Risk Assessment or CAFIU-issued virtual-asset sector risk assessment has been identified to date, a gap that limits any further characterisation of domestic RegTech or supervisory-technology capacity beyond the licensing-regime absence itself; this limitation is carried forward honestly rather than filled with invented content.

Outlook

No Cambodia-specific regulatory-horizon event applicable to compliance technology or active defence has been identified. The trajectory of this domain remains stable, reflecting persistence of the underlying supervisory gap; this should continue to be read against, not independently of, the deteriorating trajectory documented in the crypto and digital-asset domain, since the absence of compliance-technology development is a structural condition permitting the crypto-integrity risk documented elsewhere to continue unaddressed at the domestic supervisory level. Should any RegTech, transaction-monitoring-technology, or VASP-supervisory-technology development emerge for Cambodia in a future cycle, it would represent a genuinely new datapoint against this currently empty baseline.

domain_sub_briefs · D6 · Cumulative analysis

D7 AML/CTF Regime

stableactive

IMF reports fraud-related disclosures account for ~20-25% of CAFIU's total disseminations but few lead to investigations; recommends tighter CAFIU-police cooperation and integration of AML/anti-scam strategy.

Judgment: Cambodia is an APG member and exited the FATF grey list in February 2023 after two prior listings (2011-2015, 2019-2023); the standing AML/CTF regime record is unchanged this cycle. Probable

D8 Commercial Activity

no_changeno_change
Judgment: No commercial transaction among integrity-infrastructure firms or de-risking event located for KH this cycle. Uncertain
Regulatory horizon
Consultation2026-Q4 · ±half_year

NBC CASP-licensing and bank crypto-exposure implementing regulations

Formal licence conditions and procedures for Crypto Asset Service Providers, and explicit bank cryptoasset-exposure limits, are expected to be published.
National Bank of Cambodia Source
Proposed2029-Q3 · ±multi_year

FATF/APG 5th-round Mutual Evaluation of Cambodia

A new onsite evaluation is scheduled for around November 2028 with possible plenary discussion in July 2029
APG (FATF-style regional body) Source
3 dated · 3 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

Parallel US and EU sanctions tracks against the Prince Group/Jin Bei Group network continue to expand on non-aligned legal bases.

Screening systems calibrated against either list alone risk missing names captured only on the other track; the absence of a single consolidated list is itself the operational fact to plan around, alongside the confirmed domestic casino-licence revocation campaign targeting the same network.

3 evidence refs
Compliance

Cambodia's fit-and-proper weaknesses in casinos, lawyers and accountants remain FATF-flagged pending a further evaluation cycle.

Enhanced due diligence postures toward Cambodia-linked gatekeeper-sector counterparties should reflect that domestic enforcement activity has not yet been matched by a published FATF reassessment confirming remediation.

1 evidence refs
Legal

Divergent US and EU legal bases for sanctioning the same Cambodia-based network create distinct liability-exposure questions on each side.

Counsel assessing exposure to Prince Group/Jin Bei Group-linked counterparties needs to separately assess OFAC transnational-crime-based liability and EU human-rights-sanctions-based liability, since the two regimes do not share a single designation list or legal theory.

2 evidence refs
Board

Sustained multilateral pressure on Cambodia's scam-compound economy is intensifying across separate US and EU enforcement tracks.

This is a structural, multi-year enforcement trend rather than an isolated incident, with material reputational implications for any institution carrying Cambodia-linked counterparty exposure in this sector.

2 evidence refs
CTO

A comprehensive Digital Asset Law targeted for a November 2026 final draft could materially widen Cambodia's crypto regulatory perimeter beyond the current bank/PSP gateway.

Technical architecture built around the existing Prakas B7-024-735 reporting-entity model may need to accommodate a broader statutory perimeter if the reported drafting and approval timetable holds through year-end 2026, as scheduled.

1 evidence refs
Risk

Sanctions-regime divergence between the US and EU on the same Cambodia-based network is an emerging pattern worth tracking as a standalone risk category.

Exposure-concentration assessments should treat non-aligned unilateral sanctions tracks as a distinct risk vector from coordinated multilateral action, since name-matching and timing will differ structurally between the two.

2 evidence refs
Operations

Casino Licence No. 248 held by Casino YING HUANG was revoked following findings of links to online-scam activity.

Transaction-monitoring and counterparty-screening workflows with exposure to Cambodian casino-sector entities should reflect the revocation in counterparty-status checks going forward.

1 evidence refs
Audit

The evidentiary basis for the EU Council designation of Prince Holding Group rests on secondary reporting rather than a primary EU Official Journal instrument retrieved this cycle.

Control-testing scope for sanctions-screening coverage of EU designations should note that the underlying Official Journal instrument was not independently retrieved this cycle, which is a documentation gap worth tracking for future verification.

1 evidence refs
Scenario sketches

Hybrid EU-level supervision reshaping cross-border obliged-entity exposure

Illustrative scenario for analytical orientation only: as the EU AML Package moves from purely national supervision toward AMLA direct and indirect supervision of cross-border obliged entities under the AMLA Regulation, alongside the directly applicable AML Regulation and per-state transposition of the sixth AML Directive, obliged entities with cross-border exposure to higher-risk corridors could face a supervisory environment where evasion techniques calibrated to exploit gaps between national regulators become less effective as supervisory authority consolidates at the EU level. This is architecture-over-incident framing describing a possible structural mechanism, not an observed fact or a prediction of how any specific entity will be treated.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architecturestable
T2 · EU AML Package / AMLAno_changeKH is a non-EEA autonomous jurisdiction; AMLR/6AMLD/AMLA do not apply.
T3 · FATF Grey ListwatchCambodia remains off the FATF grey list (exited Feb 2023) but is stepping up enforcement ahead of a further 2026 evaluation to avoid a third listing.
T4 · Beneficial-Ownership Register Statusstable
T5 · Crypto & Digital-Asset IntegritywatchNBC Group1/Group2 Prakas remains operative gateway; comprehensive Digital Asset Law targeted for November 2026 draft.
T6 · Sanctions Regime DivergenceescalatingUS (E.O. 13581) and EU (Global Human Rights Sanctions Regime) sanctioned overlapping Cambodia-based Prince Group/Jin Bei Group targets on different legal bases and dates.
Registers

Enforcement actions

  • 14 Oct 2025
  • 14 Oct 2025
  • 14 Oct 2025
  • 23 Apr 2026
  • 8 Jan 2026
  • 1 Jun 2026
  • 23 Jun 2026
  • 23 Jun 2026
  • 25 Sep 2026
  • 3 Aug 2026
  • 28 May 2026
  • 3 Apr 2026
  • 28 May 2026
  • 3 Apr 2026
  • Coordinated designation of the Prince Group TCO and Chen Zhi under Global Magnitsky/TCO authority, alongside a DOJ wire-fraud/money-laundering indictment of Chen Zhi and the largest-ever US civil forfeiture (127,271 BTC, ~$15bn), plus a FinCEN Section 311 final rule against Huione Group. 14 Oct 2025
  • UK coordinated sanctions under the Global Human Rights Sanctions Regulations 2020 against the Prince Group network operating Cambodia-based scam centres, freezing a £12m North London mansion and other UK assets. 14 Oct 2025
  • Final rule under Section 311 of the USA PATRIOT Act imposing a special measure severing Cambodia-based Huione Group's access to the US financial system, following a May 2025 NPRM finding it a primary money-laundering concern. 14 Oct 2025
  • OFAC designated Cambodian senator Kok An's business empire and network under E.O. 13694/14390 for operating scam compounds tied to at least $73 million laundered from US victims, including direct control of a Cambodian bank. 23 Apr 2026
  • Cambodia's interior ministry arrested Chen Zhi in early January 2026 following his sanctioning and US indictment, and extradited him to China rather than to the United States, which held the outstanding criminal indictment. 8 Jan 2026
  • UK widened its Prince Group sanctions package, adding further individuals identified operating under multiple aliases and freezing additional London properties including a £9m penthouse, building on the October 2025 designations. 1 Jun 2026

Sanctions changes

  • 14 Oct 2025
  • 14 Oct 2025
  • 23 Apr 2026
  • 1 Jun 2026
  • 4 Dec 2025
  • 23 Jun 2026
  • 23 Jun 2026
  • 23 Jun 2026
  • 14 Oct 2025
  • 23 Jun 2026
  • 31 Jul 2026
  • 14 Oct 2025
  • 23 Jun 2026
  • 31 Jul 2026
  • OFAC designated the Prince Group Transnational Criminal Organization and 146 associated Cambodia-linked targets under Global Magnitsky/TCO sanctions authority, later expanded with 25 additional bitcoin addresses. 14 Oct 2025
  • UK Global Human Rights sanctions regime listed Prince Group, Jin Bei Group, Golden Fortune Resorts, Byex Exchange and named individuals (Chen Zhi et al.), coordinated with the US action of the same date. 14 Oct 2025
  • OFAC designated Cambodian senator Kok An and 28 individuals/entities including Heng Feng Cambodia Bank for operating scam-compound and money-laundering infrastructure. 23 Apr 2026
  • UK widened its Prince Group-related sanctions list to add Hu Xiaowei and other alias-holding individuals, plus associated UK companies and properties. 1 Jun 2026
  • As of the December 2025 EU high-risk third country delegated regulation update (EU 2026/46, EU 2026/83), Cambodia remains absent from the EU AML high-risk list, and no EU autonomous sanctions regime designation of Cambodia-linked scam-network entities has been identified, in contrast to the coordinated US/UK action. 4 Dec 2025

Regulatory horizon (register)

  • NBC CASP-licensing and bank crypto-exposure implementing regulations
  • NBC CASP-licensing and bank crypto-exposure implementing regulations
  • FATF/APG 5th-round Mutual Evaluation of Cambodia
  • Draft Law on the Management of Virtual Assets and Digital Assets
  • Cambodia Digital Asset Law (comprehensive)
  • FinCEN final rule on H-Pay Service PLC / Huione successor entities
  • Next FATF Plenary review point for Cambodia AML/CFT standing
  • Next periodic EU high-risk third country list update

Active schemes

  • [CRITICAL] Cambodia scam-compound pig-butchering crypto fraud complex
  • [CRITICAL] Huione Group crypto-fiat guarantee-marketplace laundering hub
  • [HIGH] DPRK cyber-heist to crypto laundering corridor via Cambodia
  • [HIGH] Elite patronage network monetising extractive-industry corruption
  • [HIGH] Citizenship-for-sale and shell-layering BO opacity exploitation
Sources
  1. JOINT STATEMENT: NBC-UN Convening Multi-stakeholder Consultation Process on Microfinance in Cambodia | United Nations in Cambodia
  2. https://home.treasury.gov/news/press-releases/sb0538
  3. https://home.treasury.gov/news/press-releases/sb0278
  4. https://en.wikipedia.org/wiki/2026_in_Cambodia
  5. https://agbrief.com/news/27/01/2026/cambodia-aims-to-avoid-fatf-grey-listing/
  6. https://www.dfdl.com/insights/legal-and-tax-updates/cryptoassets-regulation-introduced-by-the-national-bank-of-cambodia-nbc/
  7. https://kh.usembassy.gov/press-release-regarding-prince-group-transnational-criminal-organization/
  8. https://www.hsfkramer.com/notes/sanctions/2026-posts/ofac-expands-sanctions-on-prince-group-tied-to-global-scam-operations
  9. https://bankingjournal.aba.com/2026/06/fincen-takes-further-steps-to-sever-cambodian-firm-from-u-s-financial-system/
  10. https://www.fatf-gafi.org/en/countries/detail/Cambodia.html
  11. https://agbrief.com/news/cambodia/26/01/2026/cambodia-battles-to-avoid-third-fatf-grey-list-placement-amid-scam-crackdown/
  12. https://asgam.com/2026/08/19/cambodia-says-20-casino-licenses-revoked-amid-significant-progress-in-scam-center-crackdown/
  13. AKP
  14. SERC
  15. Phnom Penh Post
  16. FATF
  17. Khmer Times
  18. https://www.akp.gov.kh/post/detail/368511
  19. https://www.state.gov/wp-content/uploads/2026/09/701264_2026-Cambodia-Investment-Climate-Statement.pdf
  20. https://www.khmertimeskh.com/502032824/imf-urges-cambodia-to-tighten-fiscal-governance-to-combat-scam-related-money-laundering
  21. https://www.fatf-gafi.org/en/countries/global-network/asia-pacific-group-on-money-laundering--apg-.html
  22. https://www.latintimes.com/300-million-frozen-86-compounds-closed-real-scorecard-cambodias-scam-crackdown-599446
  23. Wikipedia
  24. https://thediplomat.com/2026/06/us-government-imposes-fresh-sanctions-against-alleged-cambodian-scam-network/
  25. https://cambodianess.com/article/nbc-places-chief-bank-under-administration-suspends-depositor-withdrawals
  26. https://www.khmertimeskh.com/502023783/nbc-revokes-tian-xu-payment-service-licence
  27. https://www.state.gov/reports/2025-investment-climate-statements/cambodia
  28. https://www.fatf-gafi.org/en/publications/Mutualevaluations/Mutualevaluationofcambodia.html
  29. https://www.lexology.com/library/detail.aspx?g=cfdbf541-eb73-4f6a-b30f-1b6a10d40b9c
  30. https://english.cambodiadaily.com/2026/10/15/cambodia-faces-fresh-scrutiny-over-scam-compounds-despite-crackdown/
  31. https://www.nbc.gov.kh/download_files/legislation/prakas_eng/36.pdf
  32. https://www.akp.gov.kh/post/detail/383280
  33. https://www.nbc.gov.kh/english/
  34. https://asgam.com/2026/10/23/cambodia-freezes-nearly-us1-billion-in-prince-group-assets-as-scam-crackdown-intensifies/
  35. https://www.disruptionbanking.com/2026/10/16/cambodia-crypto-regulation-enters-a-decisive-quarter-ahead-of-black-swan-summit-cambodia/
  36. https://checklynx.com/en/resources/knowledge-base/fatf-grey-list
  37. https://www.ezine.eversheds-sutherland.com/global-aml-guide/cambodia
  38. US Department of the Treasury (OFAC)
  39. US Department of the Treasury (OFAC)
  40. Business & Human Rights Resource Centre
  41. Steptoe LLP
  42. FATF
  43. The Diplomat
  44. AGBrief
  45. Disruption Banking
  46. Agence Kampuchea Presse (AKP)
  47. https://home.treasury.gov/news/press-releases/sb0469
  48. https://www.business-humanrights.org/en/latest-news/cambodia-eu-sanctions-company-and-its-chairman-for-human-trafficking-and-scam-operations/
  49. https://www.steptoe.com/en/news-publications/international-compliance-blog/weekly-sanctions-update-august-3-2026.html
  50. https://thediplomat.com/2025/07/fatf-is-behind-the-curve-on-cambodias-cyber-scam-compounds/
  51. https://www.akp.gov.kh/post/detail/371578
  52. "Black and grey" lists
  53. Cambodia
  54. Mutual Evaluation of Cambodia
  55. Countries / Jurisdictions
  56. Assessments
  57. Jurisdictions under Increased Monitoring - 24 February 2023
  58. Documents - Financial Action Task Force (FATF)
  59. FATF changes its grey listing criteria to further focus on risk
  60. Jurisdictions under Increased Monitoring - 19 June 2026
  61. Jurisdictions under Increased Monitoring - 24 October 2025
  62. OFAC Sanctions Cambodian Senator and Scam Center Network Targeting Americans With Digital Asset Fraud | TRM Labs
  63. U.S. Crackdown on Southeast Asian Crypto Scam Centers
  64. OFAC Sanctions Tracker: How Sanctions Impact Crypto Crime - Chainalysis
  65. U.S. Launches New Strike Force to Combat $10 Billion Scam Industry
  66. Crypto Sanctions: 2026 Crypto Crime Report
  67. Blog - Chainalysis
  68. Organized Crime and Corruption Reporting Project | OCCRP
  69. Cambodia: Over 48,000 Scammers Deported amid Scam Center Crackdown | OCCRP
  70. UK and US take joint action to disrupt major online fraud network - GOV.UK
  71. 1 Cambodia Business Advisory on High-Risk Investments and Interactions
  72. Questions swirl around US plans for record $15B Prince Group crypto seizure - ICIJ
  73. DOJ Seizes $15 Billion in Bitcoin
  74. Operation Prince: Inside the Global Effort That Led to the Largest Forfeiture in US History | TRM Labs
  75. $15 billion seized by US originates from Iran/China bitcoin miner "theft"
  76. Prince Group targeted with $15B crypto seizure and sanctions for pig butchering operations
  77. US Seizes Bitcoin Worth $15 Billion in ‘Pig-Butchering’ Case - Bloomberg
  78. How Cambodia Became A Haven For Criminals | OCCRP
  79. Politically Connected Crypto Project Pursued Resort With Alleged Scam Syndicate Figures | OCCRP
  80. Cambodia Extradites Chair of Alleged ‘Criminal’ Conglomerate to China | OCCRP
  81. ` 3rd Follow-Up Report Mutual Evaluation of Cambodia July 2021
  82. Prakas on Anti- Money Laundering and Combating the ...
  83. ` 6th Follow-Up Report Mutual Evaluation of Cambodia August 2022 October 2023
  84. Cambodia's progress in strengthening measures to tackle money laundering and terrorist financing
  85. ` 5th Follow-Up Report Mutual Evaluation of Cambodia August 2022 August 2022
  86. Fatf-gafi
  87. 1 Cambodia Business Advisory on High-Risk Investments and Interactions
  88. Follow-up report to Cambodia's assessment of anti-money laundering and counter-terrorist financing measures
  89. Cambodia's measures to combat money laundering and terrorist financing
  90. Anti-money laundering and countering the financing of terrorism at international level - Finance
  91. European Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance
  92. EU methodology for the identification of high-risk third countries - Finance
  93. High risk third countries and the international context content of anti-money laundering and countering the financing of terrorism - European Commission
  94. Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance
  95. Commission Delegated Regulation (EU) 2016/1675 of 14 July 2016 supplementing Directive (EU) 2015/849 of the European Parliament and of the Council by identifying high-risk third countries with strategic deficiencies (Text with EEA relevance) (c. 1675)
  96. High-risk and other monitored jurisdictions
  97. Anti-Money Laundering and Terrorist Financing Directive 4 - Finance
  98. Anti-money laundering: the Commission updates its list of high-risk third-country jurisdictions to strengthen the international fight against financial crime - Finance
  99. FinCEN Finds Cambodia-Based Huione Group to be of Primary Money Laundering Concern, Proposes a Rule to Combat Cyber Scams and Heists | FinCEN.gov
  100. FinCEN Issues Final Rule Severing Huione Group from the U.S. Financial System | FinCEN.gov
  101. US Treasury takes 311 action against Huione Group: What this means for you
  102. Huione Group Shutdown and the Future of Crypto Scam Infrastructure
  103. Treasury Moves Against Huione Group in Landmark Action Targeting Global Cybercrime Infrastructure | TRM Blog
  104. FinCEN Proposes to Sever H-Pay Service PLC and Other Huione Group Successor Entities from the U.S. Financial System | FinCEN.gov
  105. Imposition of Special Measure regarding Huione Group as a Foreign Financial Institution of Primary Money Laundering Concern | FinCEN.gov
  106. Huione Carries On: Chinese-Language Platform’s Persistence Reveals the Complexity of On-chain Financial Crime Disruption - Chainalysis
  107. Statement by FinCEN Director Andrea M. Gacki before the House Committee on Financial Services, Subcommittee on National Security, Illicit Finance, and International Financial Institutions | FinCEN.gov
  108. 1 (BILLINGCODE: 4810-02-P) DEPARTMENT OF THE TREASURY
  109. Money Laundering Advisory Notice: June 2026 - GOV.UK
  110. Money Laundering Advisory Notice: High Risk Third Countries - GOV.UK
  111. HM Treasury publish updated list of high risk third jurisdictions
  112. High-risk third countries
  113. RPC opinion: The Money Laundering and Terrorist Financing (Amendment) Regulations 2026 - GOV.UK
  114. The Money Laundering and Terrorist Financing (High-Risk ...
  115. Updated casino guidance to include proliferation financing
  116. The Money Laundering and Terrorist Financing (Amendment) Regulations 2026
  117. Q&A with Governor, National Bank of Cambodia, H.E. Dr. Serey Chea | Insights | Bloomberg Professional Services
  118. Global Crypto Policy Review Outlook 2025/26 Report | TRM Labs
  119. Current State of Central Bank Digital Currencies (CBDCs)
  120. 2025 Crypto Regulatory Round-Up
  121. FATF urges stronger global action to address Illicit Finance Risks in Virtual Assets
  122. How crypto regulation changed in 2025: a global review
  123. Crypto Adoption Accelerates in APAC Region
  124. FSB thematic review 2025: Global crypto regulation remains fragmented despite market growth
  125. Virtual Assets
  126. 1 Financial Sanctions Notice 14/10/2025 Global Human Rights Introduction
  127. The UK Sanctions List - GOV.UK
  128. CONSOLIDATED LIST OF FINANCIAL SANCTIONS TARGETS IN THE UK
  129. UK Widens Sanctions on Suspected Prince Group Scam Operators | OCCRP
  130. Transnational Criminal Organizations Designations; Cuba Designations; Russia-related Designations Removals; Issuance of TCO-related General License; Publication of OFAC-OFSI Comparative Overview | Office of Foreign Assets Control
  131. Historic U.S.–U.K. Operation Targets Southeast Asia’s Scam Compounds with Record $15 Billion Bitcoin Seizure | TRM Labs
  132. CHEN Zhi - FCDO - UK Sanctions List Search - GOV.UK
  133. Designation - FCDO - UK Sanctions List Search - GOV.UK
  134. Who profits from the death of Cambodia’s democracy? | Global Witness
  135. Global Witness in Cambodia | Global Witness
  136. Global Witness statement on US Government sanctions on Try Pheap and Kun Kim | Global Witness
  137. Cambodian Democracy Act is a major step forward in the fight against corruption | Global Witness
  138. Global Witness’ new report, “Taking a Cut” blows lid off systemic corruption in Cambodia’s forest sector | Global Witness
  139. Sacking of Cambodia’s forest chief unconvincing as move against illegal logging | Global Witness
  140. Shifting Sand: how Singapore’s demand for Cambodian sand threatens ecosystems and undermines good governance | Global Witness
  141. Search | Global Witness
  142. Global Witness welcomes Cambodia sand export ban | Global Witness
  143. Campaign Success: Global Witness Welcomes Cambodia Sand Export Ban | Global Witness
  144. JOINT STATEMENT | Progress Update: NBC-UN Convening Multi-Stakeholder Consultation on Microfinance in Cambodia | United Nations in Cambodia
  145. International Cooperation for Investigation of Corruption ...
  146. Supporting Financial Investigations into Corruption in Cambodia
  147. JOINT STATEMENT: NBC-UN Convening Multi-stakeholder Consultation Process on Microfinance in Cambodia | United Nations in Cambodia
  148. FATF / Asia-Pacific Group on Money Laundering (APG)
  149. National Bank of Cambodia
  150. US Department of the Treasury / OFAC
  151. FinCEN
  152. UK Foreign, Commonwealth & Development Office (OFSI)
  153. European Commission
  154. OCCRP
  155. Global Witness
  156. TRM Labs
  157. ICIJ
  158. UK Government (HM Treasury / legislation.gov.uk)
Coverage gaps
fim-int-2026-07-07-G001: No current, publicly available Camb…
fim-int-2026-07-07-G001: No current, publicly available Cambodia National Risk Assessment or CAFIU-published virtual-asset sector risk assessment was identified; sector risk characterisations rely on FinCEN/OFAC third-country framing rather than a Cambodian-authored NRA. [resolved]
fim-int-2026-07-07-G002: Domestic Cambodian prosecution and …
fim-int-2026-07-07-G002: Domestic Cambodian prosecution and conviction data for senior scam-network financiers is largely absent, limiting independent verification of enforcement-asymmetry claims beyond deportation statistics. [resolved]
fim-int-2026-07-07-G003: Continued post-designation activity…
fim-int-2026-07-07-G003: Continued post-designation activity attributed to Huione successor entities (H-Pay) rests on single-vendor blockchain-analytics reporting; independent corroboration from a second analytics provider or a regulator statement would raise confidence above Possible. [resolved]
fim-int-2026-07-07-G004: No EU-specific primary source confi…
fim-int-2026-07-07-G004: No EU-specific primary source confirms whether AMLA or an EU Member State has separately assessed Cambodia-linked scam-network exposure outside the delegated-regulation high-risk-list mechanism. [resolved]
fim-int-2026-07-07-G005: No documented instance of a confirm…
fim-int-2026-07-07-G005: No documented instance of a confirmed Russia-sanctions-evasion nexus through Cambodia was found; absence-of-evidence for the T1 standing tracker would benefit from a dedicated dark-fleet/correspondent-banking screening pass specific to Cambodia. [resolved]
fim-int-2026-08-21-G001: D4 conflict finance carries no Camb…
fim-int-2026-08-21-G001: D4 conflict finance carries no Cambodia-specific material this cycle; genuine coverage gap rather than absence of activity. [resolved]
fim-int-2026-08-21-G002: Prince Bank liquidation rests on a …
fim-int-2026-08-21-G002: Prince Bank liquidation rests on a single Tier-4 source (Wikipedia aggregation); NBC primary confirmation not yet located. [resolved]
fim-int-2026-08-21-G003: Tier-D watch checks for LA, MX, CO …
fim-int-2026-08-21-G003: Tier-D watch checks for LA, MX, CO were not actively re-run this cycle; search budget concentrated on KH. [resolved]
fim-int-2026-09-05-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): Cambodia-specific beneficial-ownership registry status was not established this cycle. [resolved]
fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): Cambodia-specific enabler network beyond the Prince Group corporate web (HK/SG/BVI shells) was not independently researched this cycle. [resolved]
fim-int-2026-09-05-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G003 ({'scheme': 'financial_integrity', 'value': 'D1'}): The underlying FinCEN Federal Register notice for the proposed H-Pay Section 311 extension was not directly retrieved this cycle. [resolved]
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): No primary CGMC/CCOS/CCTC gazette notice was independently opened this cycle; enforcement findings rest on press reporting of official statements rather than a published instrument. [resolved]
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', 'value': 'D1'}): No new KH-linked OFAC/OFSI/EU sanctions designation was located within the 5 Sep - 4 Oct 2026 window, and no evidence was found to confirm or deny whether this reflects a genuine quiet period or a coverage gap. [resolved]
fim-int-2026-10-04-G003: LA/MX/CO Tier-D jurisdictions were …
fim-int-2026-10-04-G003: LA/MX/CO Tier-D jurisdictions were not independently researched this cycle to avoid carrying material from outside the bound KH jurisdiction. [resolved]
fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', 'value': 'D4'}): No conflict-finance-relevant development was located for Cambodia this cycle (D4). [resolved]
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', 'value': 'D6'}): No AI/ML transaction-monitoring compliance-technology development specific to Cambodia was located this cycle (D6). [resolved]
fim-int-2026-10-11-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): Underlying IMF staff report/Article IV text on CAFIU-police follow-through was not directly retrieved; finding rests on secondary Khmer Times reporting. [resolved]
fim-int-2026-10-19-G001: Cambodia's current status on the EU…
fim-int-2026-10-19-G001: Cambodia's current status on the EU list of high-risk third countries (post 29 Jan 2026 list) could not be verified against a primary EU source this cycle. [resolved]
fim-int-2026-10-19-G002: LA/MX/CO Tier D watch jurisdictions…
fim-int-2026-10-19-G002: LA/MX/CO Tier D watch jurisdictions were not actively pursued this cycle; search budget was concentrated on KH as the bound jurisdiction. [resolved]
fim-int-2026-10-25-G001: No Cambodia national risk assessmen…
fim-int-2026-10-25-G001: No Cambodia national risk assessment (NRA) citation was located this cycle. [resolved]
fim-int-2026-10-25-G002: FATF October 2026 plenary outcome f…
fim-int-2026-10-25-G002: FATF October 2026 plenary outcome for Cambodia post-dates the last published FATF list consulted this cycle. [resolved]
fim-int-2026-10-25-G003: No RegTech/AI-transaction-monitorin…
fim-int-2026-10-25-G003: No RegTech/AI-transaction-monitoring guidance specific to Cambodia was located this cycle, a gap given FATF's continuing scrutiny of casino-sector AML effectiveness. [resolved]
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No domain-update located this cycle for D2 Beneficial Ownership. [open]
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', 'value': 'D6'}): No domain-update located this cycle for D6 Compliance Technology & Active Defence. [open]
fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', 'value': 'D5'}): NBC Prakas B7-024-735 full text surfaced by URL but not opened for body-text quotation this cycle; corroborated only by T3 commentary. [open]
fim-int-2026-11-01-G004 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G004 ({'scheme': 'financial_integrity', 'value': 'D1'}): No EU Official Journal primary citation located for the EU Council Prince Holding/Jin Bei designations; relying on T2/T3 secondary reporting, confidence capped at Probable. [open]
FIM-GAP-001 (D3): Despite the scale of the scam-compound eco…
FIM-GAP-001 (D3): Despite the scale of the scam-compound economy documented by US/UK enforcement (billions in laundered proceeds), domestic Cambodian ML prosecutions and convictions of senior network figures remain minimal; the government's dismantling of scam centres has focused on deporting low-level foreign workers (48,000+ deported) rather than prosecuting owners/financiers.
FIM-GAP-002 (D1): Cambodia extradited sanctioned/indicted Pr…
FIM-GAP-002 (D1): Cambodia extradited sanctioned/indicted Prince Group chairman Chen Zhi to China rather than to the United States, which held the operative criminal indictment and forfeiture interest, reflecting state-level diplomatic prioritisation over international law-enforcement cooperation with the sanctioning jurisdictions.
FIM-GAP-003 (D2): OFAC's own business advisory notes limited…
FIM-GAP-003 (D2): OFAC's own business advisory notes limited regulation and oversight of Cambodia's financial, casino and real estate sectors, a largely cash-based dollarized economy, and absence of a comprehensive beneficial ownership framework, allowing illicit cash to move directly into land, luxury goods and property without passing through the banking sector.
FIM-GAP-004 (D1): The UK's Money Laundering and Terrorist Fi…
FIM-GAP-004 (D1): The UK's Money Laundering and Terrorist Financing (Amendment) Regulations 2026 (in force 30 June 2026) narrowed the statutory definition of 'high-risk third country' to only the FATF 'Call for Action' (blacklist) list, removing the broader 'Jurisdictions Under Increased Monitoring' (grey list) from automatic mandatory EDD triggers under UK MLR Regulation 33.
FIM-GAP-005 (D2): No current, publicly available Cambodia Na…
FIM-GAP-005 (D2): No current, publicly available Cambodia National Risk Assessment (NRA) document or dedicated CAFIU-published virtual-asset sector risk assessment was identified in this research window; NRA reference fields for sector-specific virtual asset supervision rely primarily on FinCEN/OFAC third-country characterisations rather than a Cambodian-authored NRA.

Evidence

Confidence-tiered claims

18 casino licences revoked and 9 further licences suspended pending investigation for links to online scam activity, under Royal Government Order No. 01 BB (14 July 2025). [Source 1]
Probable · 1 source
24 casinos across Preah Sihanouk (12), Banteay Meanchey (7) and Svay Rieng (5) confirmed to have ceased online/live-streamed casino betting, football betting, digital lotteries and virtual-cockfighting products after a 30 September 2026 deadline. [Source 1]
Probable · 1 source
NBC and SERC issued a joint statement (23 September 2026) establishing a dual-gateway supervisory intent for virtual-asset activity - NBC-licensed banks need NBC prior approval, non-bank entities need an SERC licence - explicitly citing money-laundering risk, ahead of a comprehensive Law on the Management of Virtual Assets and Digital Assets targeted for completion by end-2026. [Source 1]
Probable · 1 source
NBC revoked the payment-institution licence of Tian Xu International Technology Plc (CoolCash Cambodia), the sixth such payment-institution licence revocation in nine months. [Source 1]
Uncertain · 1 source
Off FATF grey list since February 2023; next possible onsite November 2028, plenary discussion July 2029 [Source 1]
Probable · 1 source
Fraud-related disclosures account for ~20-25% of CAFIU's total disseminations; few spontaneous disclosures result in investigations [Source 1]
Probable · 1 source
Designated 9 individuals and 26 entities linked to Prince Group TCO, unmasking Hu Xiaowei [Source 1]
Probable · 1 source
NBC ordered liquidation and suspension of Prince Bank on 2026-01-08 following Chen Zhi/Chen Bo US indictments [Source 1]
Uncertain · 1 source
CAFIU and NBC oversight of two sandboxed crypto exchanges under Prakas B7-024-735 continues unchanged
Probable
Al Jazeera broadcast (10 Oct 2026) alleges continuing online fraud, coercion, trafficking and officials allegedly protecting operations [Source 1]
Probable · 1 source
NBC revoked payment service provider licence on 3 August 2026, UK had sanctioned the firm in March 2026 over alleged Prince Group links [Source 1]
Probable · 1 source
23 June 2026 tranche designated 9 individuals (incl. Hu Xiaowei as second-in-command) and 26 entities in UK/BVI/Hong Kong/Singapore/Thailand under EO 13581/13863 [Source 1]
Probable · 1 source
FIU 2026 operational plan (5 Feb 2026) seeks direct financial-sanctions tooling, expands cooperation hotlines with China/Singapore/Mekong states, and stands up a joint government task force ahead of FATF's fifth-round mutual evaluation scheduled 2028 [Source 1]
Uncertain · 1 source
Nationwide multi-agency casino inspection sweep across 16 provinces launched October 2026, citing the Law on Anti-Online Scams and AML/CFT Law as legal basis, framing unregulated online gambling as a form of tech scamming [Source 1]
Probable · 1 source
Joint virtual-asset oversight framework published c. 23-25 September 2026 splitting licensing between NBC (banks) and SERC (non-bank CASPs); entities become AML/CFT reporting entities to the Cambodia FIU [Source 1]
Probable · 1 source
Draft Law on the Management of Virtual Assets and Digital Assets targeted for final draft November 2026; three pillars include AML/CFT, stated to match FATF VASP expectations [Source 1]
Probable · 1 source
Cambodian courts froze ~US$1bn in assets, issued 32 arrest warrants, sought INTERPOL assistance against 29 fled ringleaders [Source 1]
Probable · 1 source
Imposed sweeping sanctions on 146 targets within the Prince Group Transnational Criminal Organization [Source 1]
Probable · 1 source
Joint licensing/reporting framework for virtual-asset firms launched late September 2026; NBC-supervised banks need central-bank approval, other firms need SERC licence, authorised firms become CAFIU reporting entities [Source 1]
Uncertain · 1 source
Not on the FATF list of 22 jurisdictions under increased monitoring as of 19 June 2026 statement; removed from grey list Feb 2023 [Source 1]
Probable · 1 source
Casinos and other gambling institutions are designated reporting entities under Art. 5 [Source 1]
Uncertain · 1 source
OFAC added Hu Xiaowei and 9 individuals/26 entities to Prince Group TCO designation [Source 1]
Probable · 1 source
EU Council designated Prince Holding Group and chairman Chen Zhi under Global Human Rights Sanctions Regime [Source 1]
Probable · 1 source
Weaknesses remain with fit and proper tests of casinos, lawyers, and accountants per FATF's August 2023 follow-up report [Source 1]
Probable · 1 source
Final draft targeted November 2026; legislative approval expected by end of 2026 [Source 1]
Probable · 1 source
Expanded Prince Group TCO designation on 2026-06-23 adding Hu Xiaowei (named second-in-command) and 9 individuals / 26 entities [Source 1]
Probable · 1 source
Designated Prince Holding Group and chairman Chen Zhi under the EU Global Human Rights Sanctions Regime on 2026-07-31, citing at least 10 scam compounds operated throughout Cambodia [Source 1]
Probable · 1 source
NBC Prakas B7-024-735 remains the sole operative crypto-AML gateway for bank/PSP-channel Group 1 crypto-asset activity; authorized firms become FIU reporting entities [Source 1]
Probable · 1 source
Cambodia is an APG member, exited the FATF grey list in February 2023; August 2023 follow-up report found continuing weaknesses in casino/lawyer/accountant fit-and-proper testing [Source 1]
Probable · 1 source
Revoked Casino Licence No. 248 for Casino YING HUANG after finding links to online-scam activity and illegal possession of weapons/narcotics [Source 1]
Probable · 1 source