Cambodia Hosts Global Conference as Online Scams Become a Growing Cybersecurity Challenge

Online scams are no longer isolated incidents carried out by individual criminals. They have evolved into increasingly organised, technology-driven operations capable of targeting thousands of people across borders.

This growing threat is receiving renewed international attention as Cambodia hosts the International Conference on Combating Online Scams (ICCOS-2026) in Phnom Penh from 23–24 September 2026. The conference brings together governments, international organisations, law enforcement agencies, financial institutions, technology companies, academia and other stakeholders to discuss cooperation against the growing global threat of online scams.

The event comes at a time when cybercriminals are increasingly using the same technologies that businesses and society rely on every day — artificial intelligence, social media, cloud platforms, digital payments, cryptocurrencies and automated communication tools — to make scams more convincing and more scalable.

From Simple Fraud to Technology-Enabled Cybercrime

Traditional scams often relied on relatively simple techniques: a fraudulent email, a fake phone call or a fabricated message asking a victim to transfer money.

Today, the threat landscape is considerably more complex.

Cybercriminals can combine multiple technologies to create highly convincing attacks. Social media platforms can be used to identify potential victims and gather information about their interests. Messaging applications provide direct and immediate communication. Automated systems allow criminals to contact large numbers of victims simultaneously, while artificial intelligence can help generate convincing messages, images, voices and other forms of digital content.

This means that the traditional distinction between a "scam" and a sophisticated cyberattack is becoming increasingly difficult to maintain.

Modern scams can involve social engineering, identity theft, credential theft, malware, account compromise, impersonation, fraudulent websites and financial manipulation — often within the same attack.

Artificial Intelligence Is Changing the Threat Landscape

One of the most significant developments is the increasing accessibility of artificial intelligence.

AI can help legitimate organisations automate customer service, analyse information, detect threats and improve productivity. The same underlying capabilities can also be misused by cybercriminals.

AI-assisted tools can make fraudulent communications more personalised and convincing. Criminals can generate messages in different languages, imitate communication styles, automate conversations and create content designed to build trust with potential victims.

The result is a shift from mass-produced, easily identifiable scam messages towards attacks that can appear increasingly relevant to the individual receiving them.

The challenge for cybersecurity is therefore no longer simply identifying whether a message looks suspicious. Security systems increasingly need to understand behaviour, context, identity, communication patterns and unusual activity.

Deepfakes and Digital Impersonation

The development of generative AI has also introduced another significant cybersecurity concern: digital impersonation.

Voice cloning and synthetic media can potentially be used to imitate executives, family members, public figures or trusted organisations. A criminal may attempt to convince an employee that a request for payment or confidential information is legitimate because the communication appears to come from someone they know.

This creates a new dimension to social engineering.

Previously, an employee might identify a suspicious email because of poor grammar, an unusual sender address or an obvious request. As synthetic content becomes more sophisticated, organisations need to place greater emphasis on verification processes, identity security and behavioural controls, rather than relying solely on human recognition of fraudulent content.

Cybercriminals Are Becoming More Organised

The scale of the problem is also changing.

Reuters reported that representatives from more than a dozen countries, including the United States and China, are attending the Cambodia summit. The report highlights the presence of large-scale scam compounds in Cambodia and other parts of Southeast Asia, where criminal networks have operated schemes including romance scams and impersonation fraud.

Cambodian authorities say they have conducted raids against hundreds of compounds and taken action against large numbers of people involved in these operations. Reuters also reported that criminal groups have adapted by breaking operations into smaller units and moving activities across borders.

This illustrates an important cybersecurity reality:

Cybercrime does not operate within the boundaries of a single network, organisation or country.

Criminal infrastructure can span multiple jurisdictions, while victims may be located thousands of kilometres away.

The Financial System Is Part of the Cybersecurity Battle

Online scams also demonstrate why cybersecurity cannot be separated from financial security.

A successful scam frequently ends with a digital financial transaction. Criminals may attempt to manipulate victims into transferring funds, providing banking credentials, revealing authentication codes or authorising transactions themselves.

This creates a chain of risk involving:

Identity → Communication → Authentication → Device → Account → Transaction

If any part of this chain is compromised, the consequences can extend beyond the individual victim to businesses, financial institutions and wider digital ecosystems.

Cybersecurity therefore needs to operate across the entire attack lifecycle rather than focusing only on protecting networks and devices.

Why Identity Has Become a Critical Security Layer

As more services move online, digital identity has become one of the most valuable targets for attackers.

A compromised account can provide access to email, cloud services, financial systems, business applications and sensitive information. In an organisation, the compromise of a privileged account can be particularly serious because it may provide access to critical systems and infrastructure.

This makes identity and access security a central component of modern cybersecurity.

Organisations increasingly need to verify not only who is attempting to access a system, but also:

• Is the access request expected?
• Is the device trusted?
• Is the user's behaviour consistent with previous activity?
• Is the requested access appropriate?
• Is the transaction or action unusual?
• Should additional verification be required?
• How long should the access remain active?

These questions move cybersecurity beyond traditional username-and-password protection towards continuous risk-based security.

Cybersecurity Must Become More Adaptive

The rapid evolution of online scams demonstrates that static security controls alone are not enough.

Attackers continuously change their techniques. When one method becomes ineffective, criminal groups can modify their communication channels, infrastructure, identities and payment mechanisms.

Defensive systems therefore need to become increasingly adaptive.

Modern cybersecurity strategies can combine artificial intelligence, behavioural analytics, identity protection, multi-factor authentication, threat intelligence, transaction monitoring, endpoint security and continuous detection to identify suspicious activity earlier.

At the same time, technology cannot replace human awareness.

Employees and users remain an important security layer. Security awareness, verification procedures and clear incident-reporting mechanisms remain essential because many successful attacks begin by manipulating a person rather than directly exploiting a technical vulnerability.

International Cooperation Is Becoming Essential

The Cambodia conference reflects another important development: the need for international cooperation.

The official ICCOS-2026 programme describes the conference as a platform for governments, law enforcement, financial institutions, technology companies and other stakeholders to exchange experience and strengthen collective efforts against online scams.

ASEAN has also highlighted the participation of its Secretary-General in the conference, alongside organisations including INTERPOL and the United Nations Office on Drugs and Crime's regional office.

This type of cooperation is increasingly important because a single cybercrime operation can involve infrastructure, criminals, victims, financial transactions and digital platforms located in different countries.

Effective cybersecurity therefore requires more than protecting individual systems. It requires information sharing, coordinated investigations, stronger identity controls, financial monitoring, technology collaboration and greater public awareness.

A New Era of Digital Risk

The rise of online scams demonstrates how quickly technology can change the cybersecurity landscape.

Artificial intelligence can make attacks more personalised. Automation can increase their scale. Social platforms can provide information about potential victims. Digital payments can move money rapidly across borders. Cloud services can provide infrastructure. Synthetic media can make impersonation more convincing.

Together, these technologies can give cybercriminals capabilities that were previously difficult or expensive to obtain.

At the same time, the same technologies can strengthen defence.

AI can help detect abnormal behaviour. Machine learning can identify patterns across large volumes of security data. Automation can accelerate incident response. Identity technologies can strengthen authentication. Threat intelligence can help organisations identify emerging attack methods.

The cybersecurity challenge is therefore not simply about technology itself.

It is about how technology is used, how quickly organisations can detect misuse, and how effectively different stakeholders can work together.

Security Must Evolve With the Threat

The international focus on online scams is a reminder that cybersecurity is becoming increasingly interconnected with everyday digital life.

As technology becomes more intelligent, accessible and automated, cybercriminals will continue looking for ways to exploit trust, identity and human behaviour.

The response must evolve accordingly.

Organisations need to treat cybersecurity as an ongoing process rather than a one-time investment — combining technology, people, processes and cooperation to protect digital identities, information, systems and financial assets.

The fight against online scams is no longer simply about stopping fraudulent messages.

It is about protecting digital trust in an increasingly connected world.