Cybercrime & Online Scams Targeting Phuket Expats: 2026 Guide

A friend of mine — sharp, experienced, been in Phuket for four years — lost 850,000 THB to a cryptocurrency investment scam last year. He knew about romance scams. He'd read the articles. He thought he was careful. The operation that got him was sophisticated enough to have a fake trading platform with real-looking charts, a fake support team, and months of patient relationship-building before they asked for money.

Phuket expats are disproportionately targeted by organised cybercrime for a simple reason: we have money, we're often socially isolated at first, we're navigating unfamiliar systems, and we're online constantly. This guide covers the real threats as of 2026 — not the obvious stuff, but the sophisticated scams that catch experienced people off guard.

The Pig Butchering Scam (Sha Zhu Pan)

This is the one that's destroying lives. The Thai name is sha zhu pan (杀猪盘) — "pig butchering" — and it's grimly descriptive: the scammers fatten you up emotionally before slaughtering your finances.

Here's how it works in Phuket in 2026:

1. Initial contact — You get a WhatsApp or Telegram message from an attractive stranger who "accidentally" sent it to the wrong number. Or a connection request on LinkedIn from someone claiming to work in finance in Singapore or Hong Kong.
2. Trust building — They're friendly, interesting, never ask for money. This goes on for weeks. They mention casually that they've been making good returns on a specific crypto platform.
3. The platform — You're introduced to a trading app. It looks legitimate. You invest a small amount and are allowed to withdraw it — proving it "works". Returns are shown as high.
4. The fattening — You invest more. Larger amounts. You can see your balance growing on their fake platform.
5. The slaughter — When you try to withdraw a large sum, there's suddenly a "tax hold" or "account verification" requiring another large payment. If you pay it, there's another fee. Your money is gone.

SIM-Swap Attacks on Thai Banking

This one is more technical but increasingly common. A fraudster contacts AIS, DTAC, or True Move (Phuket's main mobile operators) pretending to be you, claiming their SIM was lost or damaged, and requests a SIM swap. Once they have your number active on a new SIM, they can receive the SMS verification codes your bank sends for transactions.

Signs your SIM has been swapped: your phone suddenly loses mobile signal even in areas with good coverage, or you receive an SMS confirmation of a SIM change you didn't request.

Protect yourself:

• Add a PIN or security code to your Thai SIM account (visit the carrier's store in person)
• Use Google Authenticator or Authy for 2FA instead of SMS wherever your bank allows it
• Set up banking alerts for all transactions — Bangkok Bank, Kasikorn, and SCB all offer this
• If you lose signal unexpectedly, call your bank immediately to freeze transfers

WhatsApp Hijacking

This scam is devastatingly simple. You receive a WhatsApp message from a friend saying: "Sorry, I accidentally sent a 6-digit code to your number — can you forward it to me?" The code is actually WhatsApp's verification code for your account. Once you forward it, they immediately log in as you, lock you out, and start messaging your contacts asking for urgent money transfers.

This has happened to multiple expats in Phuket Facebook groups. The tell: the message usually comes from someone you know but the tone is slightly off. Never forward any 6-digit code to anyone, ever.

Rental Scams on Facebook Marketplace

Phuket's Facebook expat rental groups are rife with fake listings. Common patterns:

• Too-good-to-be-true pricing — A 2-bedroom beachside condo in Bang Tao for 15,000 THB/month. Real market rate is 35,000+. Red flag.
• Landlord is "overseas" — Can't meet you, but will send keys after a deposit. There are no keys. There is no property.
• Reverse image search fails — Stolen photos from other listings or hotel sites. Check every photo with Google Reverse Image Search.
• Pressure and urgency — "Three other people are looking at this property today, I need your deposit now."

Rule: Never transfer money for a rental property you haven't physically inspected. Period. Not a holding deposit, not first month — nothing. If someone won't let you see the place before payment, walk away. For more on this topic, read our full guide on rental scams in Phuket and how to avoid them.

Online Shopping and QR Code Scams

Fake QR Codes at Restaurants and Markets

This one is more common than you'd expect in Phuket's tourist areas. Fraudulent QR codes placed over legitimate payment QR codes at Patong restaurants, Chatuchak-style weekend markets, or Saturday Night Markets redirect payments to a scammer's account. Always check that the QR code is original (not a sticker placed on top) before scanning, and verify the merchant name shown before confirming payment.

Lazada and Shopee Phishing

Fake order confirmation emails that look exactly like Lazada or Shopee messages, directing you to a phishing site. Check the sender domain carefully — legitimate emails come from @lazada.co.th or @shopee.co.th, not variations like @lazada-support.net.

Protecting Yourself: Practical Steps for Phuket Expats

How to Report Cybercrime in Phuket

If you've been scammed or targeted, here's who to contact:

• Thai Cyber Crime Investigation Bureau (CCIB): Hotline 1441 (24 hours). This is the main national unit for cybercrime. They have English-speaking operators at peak times.
• Tourist Police: 1155 — can assist with filing reports and translation
• Your bank: Call immediately for any financial fraud. Kasikorn, Bangkok Bank, and SCB all have 24-hour fraud lines. Swift action (within 24 hours) sometimes allows reversal of transfers.
• Phuket Police (Muang Phuket Station): +66 76 212 115 for local incidents

You'll need a police report for insurance claims and for any attempts at legal recovery. Even if you think recovery is unlikely, file the report — it adds to the data Thai authorities use to track and prosecute these networks.

See our Phuket expat safety guide and common scams in Phuket for more on the full range of threats beyond cybercrime. Our safety hub is updated regularly with new scam alerts.