Functional Integration and Disruption in Scam-Compound Organisations: The SCOM Framework and the Alleged Prince Group Network

In the shadow of the global digital economy, a new kind of criminal enterprise has taken root, one that operates less like a street gang and more like a multinational corporation. These are not merely groups of individuals committing fraud; they are industrial-scale operations known as scam compounds. Located in specific zones across Southeast Asia, these facilities function as factories for deception. Inside, workers are often held against their will, forced to execute elaborate scripts that convince victims to invest money that never returns. The money does not simply vanish; it flows through a complex web of digital currencies, shell companies, and casinos before reappearing as legitimate wealth. For years, law enforcement has struggled to dismantle these networks, often finding that when they knock down one building, the criminals simply move to another or rebuild elsewhere. The central question for researchers and investigators has been: why do some of these massive criminal organizations collapse under pressure, while others seem to adapt and survive?

A new study by researchers at the University of Hong Kong and the University of Macau offers a fresh way to look at this puzzle. Instead of just counting how many people are involved or how much money is stolen, the authors developed a framework to examine how these organizations are actually built. They call this the Scam-Compound Organisational Matrix, or SCOM. The core idea is that an organization's ability to survive an attack depends on three specific things: how tightly it controls its own internal parts, how easily it can replace those parts if they are removed, and whether all its critical information and power are concentrated in one place or spread out. By applying this lens to a specific, high-profile network known as the Prince Group, the researchers found that the relationship between control and survival is far more complicated than previously thought.

The researchers focused their analysis on the alleged Prince Group network, a transnational criminal organization accused of running a vast empire of fraud, forced labor, and money laundering. This network was not just a collection of scammers; it was a sophisticated system that integrated labor control, fraud production, financial settlement, and political connections. The study examined public records, court documents, and blockchain data available up to mid-2026 to map out how this organization functioned. They looked at six key areas: how they controlled their workers, how they produced the fraud, how they moved and hid money, how they embedded themselves in legitimate businesses, how they secured political protection, and how they exploited differences between laws in different countries.

What the researchers discovered challenges the simple assumption that a highly organized crime group is necessarily a resilient one. In many cases, the Prince Group appeared to have tight internal control over its operations. They managed their own fraud scripts, their own financial ledgers, and their own corporate structures. However, this very tightness created a vulnerability. Because so much of their power, money, and decision-making was concentrated in a few specific hands and locations, a coordinated attack on those central points could cause significant damage. The study suggests that when law enforcement targets a function that the organization cannot easily replace—like a specific political connection or a unique financial channel—and hits it at the same time as the central leadership, the organization is likely to contract or collapse.

However, the picture is not entirely one of vulnerability. The researchers found that the Prince Group had built in ways to survive even when parts of its machine were broken. For certain functions, such as payment processing or using different corporate vehicles, the organization had access to multiple substitutes. If one payment route was blocked, they could switch to another. If one company was seized, they could use a different one. This ability to swap out components allowed the network to continue operating even while its leadership was being arrested and its assets were being frozen. The study notes that reports of new payment services and continued activity in certain locations suggest that while the specific leadership structure may have been disrupted, the broader ecosystem of fraud persisted.

A particularly complex part of the investigation involved a massive cache of Bitcoin, estimated at 127,271 coins. The researchers highlighted a critical distinction often missed in public reporting: owning the keys to a digital wallet is not the same as proving the money was stolen, nor does it automatically mean the money can be legally confiscated. The study points out that while some reports linked these coins to a specific theft, others suggested they were dormant for a long time before moving. The researchers emphasize that proving who controlled the keys, where the money came from, how it was used, and whether it can be legally taken away are four separate questions that require four separate proofs. This distinction is vital because it shows that even when authorities seize assets, the legal path to returning that money to victims is often fraught with technical and evidentiary hurdles.

The study also looked at the aftermath of a major coordinated enforcement action in late 2025, where authorities in the United States, the United Kingdom, Singapore, and other jurisdictions issued sanctions, froze assets, and arrested key figures. The results were mixed. On one hand, the pressure was immense: banks were liquidated, billions in assets were frozen, and leaders were extradited. On the other hand, the fraud did not stop. The researchers observed that while the specific organization faced severe pressure, the broader network of scam activity continued, often through successor services or by shifting to new locations. This suggests that simply arresting the bosses or freezing the bank accounts of one group is not enough to stop the flow of fraud if the underlying system of money laundering and labor exploitation remains intact.

The authors are careful to state that their work is a framework for understanding, not a final verdict on the Prince Group's guilt or innocence. They present their findings as a way to measure how different types of criminal organizations might react to law enforcement, rather than a definitive proof of what happened in this specific case. They argue that future investigations need to look beyond just the size of the network or the amount of money involved. Instead, they should focus on the specific functions that hold the organization together. If a function is hard to replace and is controlled by a single point of failure, hitting it will likely break the organization. If the organization can easily swap out that function, it will likely survive.

Ultimately, this research offers a sobering but necessary perspective on the fight against industrialized fraud. It suggests that the most effective way to disrupt these networks is not just to attack them broadly, but to identify the specific, irreplaceable links that hold them together. Whether it is a unique political connection, a specific financial gateway, or a centralized leadership structure, these are the weak points that, if targeted correctly, can lead to genuine contraction rather than just temporary displacement. The study concludes that without a clear understanding of how these organizations are built and how they can be replaced, enforcement efforts may continue to yield results that look like victories on paper but fail to stop the harm in reality. The path forward requires a more precise approach, one that distinguishes between the survival of a criminal organization and the mere persistence of the criminal activity it once directed.