Cambodia’s online-scam law preceded US Treasury action by seventeen days

The Nikkei Asia piece dated 14 May names Senator Kok An, four other Cambodian individuals, an associated network of companies, two foreign analysts, and the Wall Street Journal’s “Scambodia” coinage. It does not name Royal Decree NS/RKM/0426/006. It does not record the 91 casinos Cambodia announced shut on 24 April, or the 13,039 deportations and 241,888 voluntary departures the same statement carried. It does not mention the Cambodia Financial Intelligence Unit, the Anti-Cybercrime Department, or the Commission for Combatting Online Scams. The Treasury Department’s Office of Foreign Assets Control issued Cyber-Related General License 2 the same day it designated Kok An’s network, carving water-treatment and -distribution transactions with Anco Water Supply Co. Ltd. out of the sanctions reach. The Nikkei piece carries the exception in a single sentence without naming the instrument or what its issuance acknowledges.

The architecture exists. The international account selects what it records.

Royal Decree NS/RKM/0426/006 promulgated Cambodia’s Law on Combating Technology-Enabled Scams on 6 April 2026, adopted unanimously by the National Assembly on 30 March and concluded by the Senate on 3 April. The statute entered force the same day it was promulgated. Sixteen days later, on 22 April, Chinese Foreign Minister Wang Yi met Prime Minister Hun Manet in Phnom Penh and urged stronger Cambodian action on cross-border gambling and cyber-fraud. The next day, OFAC designated Senator Kok An and 28 individuals and entities in his network and issued Cyber-Related General License 2 authorising transactions with Anco Water Supply for the treatment and distribution of drinking water. On 24 April Cambodia’s government, in a statement carried by Xinhua, said 91 casinos had been shut for scam-linked operations, 250 raids conducted over the preceding nine months, 13,039 foreign nationals from 33 nationalities deported, and 241,888 individuals voluntarily departed Cambodia between mid-January and 19 April.

The OFAC action targets the political-protection architecture. The press release names Kok An as a senator who “controls scam compounds throughout the country,” operating through Crown Resorts (his flagship hospitality company holding properties in Poipet, Sihanoukville, Bavet, and other Cambodian cities) and Anco Brothers Co Ltd, the conglomerate that holds the casino licenses and provides uniformed security to the compounds. The designation list reaches Anco Specialized Bank, Heng Feng Cambodia Bank plc, Khmer Electrical Power, KEP Hydropower SVTK & MSRC, Brilliancy Sihanoukville Investment and Development (Bolai), four other named individuals (Rithy Raksmei, Aik Paung, Sai Aung Linn, Luo Hong), and a network of property, construction, real-estate, and tourism vehicles. The legal basis Treasury cited: Executive Order 13694 as amended, in furtherance of E.O. 14390 of 6 March 2026 on cyber-enabled fraud.

The statute Cambodia promulgated seventeen days earlier criminalises the same conduct in greater detail. It is Cambodia’s first dedicated technology-enabled-scam instrument; Article 23 expressly preserves the existing Law on Anti-Money Laundering and Counter-Terrorism Financing as continuing architecture for AML measures related to offences under the new law. Article 5 sets imprisonment of two to five years for technology-enabled scams, escalating to five to ten years where committed by an organised group or against multiple victims. Article 6 sets five to ten years for organising or leading a scam centre, ten to twenty years where violence, torture, abduction, detention, human trafficking, labour exploitation, or forced criminality occurs, and fifteen to thirty years or life imprisonment where the conduct causes death. Article 7 sets two to five years for recruiting or training others into scam operations, escalating to five to ten years where violence, abduction, or victim-of-trafficking knowledge is involved. Article 19 sets a 48-hour judicial decision on seizure or freezing of accounts and property, with the Cambodia Financial Intelligence Unit (operating under the National Bank of Cambodia) holding the immediate-suspension authority and Article 4 conferring judicial-police powers on the civil servants operating within the dedicated enforcement mechanism Article 3 contemplates — the architecture that includes the Anti-Cybercrime Department under the Ministry of Interior’s National Police and the inter-ministerial Commission for Combatting Online Scams. Article 21 frames international cooperation on mutual legal assistance, extradition, asset identification, seizure, and proceeds recovery as the bridge to foreign enforcement architectures.

Article 21 is the statutory predicate the multi-jurisdictional sequence depends on. Sanctions reach assets and persons inside U.S. jurisdiction; criminal accountability inside Cambodia requires the domestic statute the Senate vote produced. The Cambodian instrument and the U.S. instrument operate on different sides of the same accountability architecture, connected through the cooperation pathway Article 21 names.

Per The Record from Recorded Future News, both Kok An and Ly Yong Phat (the Cambodian senator Treasury sanctioned in September 2024 for similar conduct) voted in support of the Law on Combating Online Scams two weeks before OFAC moved on Kok An. The Senate adoption was unanimous. Both senators retain their seats. Cambodia’s Senate adopts laws by procedural unanimity in the chamber’s CPP-dominated structure. Under Article 104 of the Constitution, prosecution, arrest, or detention of a sitting senator requires Senate authorisation, with two-thirds majority approval at the next session for Standing Committee actions taken between sessions. The new law’s reach into senate ranks runs through this immunity-stripping gate. Senate spokesperson Chea Thyrith, asked by AP about Kok An after the 23 April designation, told reporters Kok An “is a Cambodian Senator and he was elected by elections, and as a senator he has parliamentary immunity,” and that only the U.S. side could speak about the sanctions specifics.

Ministry of Interior spokesperson Touch Sokhak told OCCRP the ministry “has been and continues to investigate and crack down on technology-based fraud in general, in line with the Royal Government’s policy, without targeting any specific individual, and in accordance with the principle of confidential investigations as required by law.” OCCRP reported Cambodian corporate records show Kok An ceased being Anco Brothers’ chairman in January 2026, roughly three months before the OFAC designation. The first prosecution under the new statute will name what the architecture produces operationally.

Cyber-Related General License 2 authorises transactions with Anco Water Supply Co. Ltd., and any entity in which Anco Water Supply holds a fifty-percent or greater interest, ordinarily incident or necessary to the treatment or distribution of drinking water. Anco Water Supply remains a designated entity; the license carves out a specific transaction category, not the entity from sanctions. General licenses for civilian utilities and humanitarian categories sit inside OFAC’s routine practice — Venezuela authorisations for electricity and water-sector transactions, Cuba’s humanitarian carve-outs, Iran’s water and medical-sector general licenses — where essential civilian infrastructure intersects with designated entities. What the instrument carries on the record is the operational distinction Treasury itself drew between the targeted network and Cambodia’s water infrastructure.

The architecture has been operating on the same network on different vectors. In January 2026 Cambodia extradited Chen Zhi to China after stripping his Cambodian citizenship for fraudulent documentation. Hun Manet told AFP in Brussels on 25 February that the U.S. October 2025 designation of Chen Zhi’s Prince Group, alongside 146 associated persons, produced the action. “We did not know that he was the kingpin,” he said, and added that Chen’s stripped Cambodian citizenship “left him with only Chinese nationality,” requiring extradition to China.

In the same interview Hun Manet told AFP that “the scam network, what we call the black economy, is destroying our honest economy. It has put a bad reputation on Cambodia.” He pushed back on the 2024 U.S. Institute of Peace estimate of cyberscamming returns to Cambodia exceeding $12.5 billion annually, roughly half formal GDP, and denied state capture: “Most of the proceeds do not go into the government of Cambodia.”

The April action sits inside the broader external-pressure architecture this publication has documented across Cambodia’s April 2026 diplomatic and economic positioning. The U.S. enforcement track on Cambodia preceded this front: OFAC’s September 8, 2025 designation of 12 companies and seven individuals based in Cambodia and Burma for facilitating human trafficking and cyber scams, and the October 14, 2025 designation of Chen Zhi’s Prince Group as a transnational criminal organisation alongside 146 associated persons in coordination with the United Kingdom. The pressure stack operates concurrently with Cambodia’s own enforcement architecture, not against its passive absence.

The Nikkei piece anchors on what it calls business risk. Bradley Jensen-Murg of Paragon International University, the analyst Nikkei quotes twice, told the publication that “Cambodia risks being seen not just as an emerging market with governance challenges, but as a place where illicit and licit economies are deeply entangled. That perception is difficult to reverse, and it could weigh on the country for some time.” Chris McCarthy of AmCham Cambodia spoke to compliance burden in a market where corporate ownership structures are not transparent. Neither analyst’s framing names the Law on Combating Online Scams, the Anti-Cybercrime Department, the Commission for Combatting Online Scams, the deportation figures, the casino closures, or Cyber-Related General License 2.

The contradiction inside Cambodia’s record is documented at its full weight. Amnesty International’s June 2025 findings on Cambodia’s gaming regulator, the September 2025 Cyber Scam Monitor description of Crown Resort in Poipet as a prominent site for online operations with documentation dating to 2016, and the Humanity Research Consultancy report naming “powerful class of Cambodian oligarchs who hold direct ownership stakes in the infrastructure and technology used to perpetuate criminal activity” name the elite-business network the designations reached. Thailand issued an arrest warrant for Kok An in July 2025 and raided properties he held along the Cambodia-Thailand border during the lead-up to the December 2025 hostilities. The Hun Manet government’s earlier defences of Ly Yong Phat following his September 2024 OFAC designation, and its broader response pattern to allegations against named senators, are on the record.

The OFAC designation and the Royal Decree document together the architecture Article 21 frames for transnational accountability. The Nikkei piece dated 14 May names one sequence and leaves the other absent.