$12.8M Recovered: Cambodia and Singapore Foil a BEC Fraud

• $12.8 million recovered. The money had been transferred to a bank account in Cambodia, then intercepted before being returned to its rightful owner.
• Announced on October 29, 2026. The National Police issued a statement, which was picked up by the Phnom Penh Post.
• Victim: a petrochemical company based in Singapore. It fell victim to an online business email compromise (BEC) fraud.
• Very short turnaround: alert on October 26. Singapore police were notified that day that the transfer had been made to a suspicious account.
• Three players named. The National Police, the Singapore Police Force and the National Bank of Cambodia (NBC) coordinated the operation through the 24/7 Hotline Scam working group.

The statement gives few dates, but the sequence of events is clear. The milestones below include only what the police have confirmed.

1. Before October 26: the fraudsters use a spoofed email address to deceive the Singapore company, which then wires $12.8M to an account in Cambodia.
2. October 26: the Singapore Police Force learns that the company transferred the funds to a suspicious bank account in Cambodia, in a suspected BEC fraud.
3. October 26 (preliminary investigation): investigators establish that the suspects used a fake email address to impersonate a legitimate contact.
4. Immediately afterward: Singapore asks the Cambodian authorities for help. They activate the 24/7 Hotline Scam working group.
5. Central bank involvement: Cambodian police coordinate with the National Bank of Cambodia to intercept the funds and return them to their source.
6. October 29: the National Police announce in a statement that the $12.8M has been recovered.
7. What's next: no arrests have been announced so far. The police have not released any details about the suspects.

There is no geographic or sector breakdown in this case. The table below therefore sets out the role of each party, based on the statement.

• Incoming transfers are closely monitored. The Hotline Scam system and the NBC's role show that the authorities know how to act quickly on a suspicious account. Large transfers draw attention.
• A real risk for business owners. BEC fraud targets companies that pay suppliers or service providers by bank transfer. A guesthouse, agency or import business manager could be affected.
• Keep your paperwork handy. Contracts, invoices and proof of the source of funds make dealings with your bank easier if a check is carried out.
• International cooperation that works. The funds were sent back to Singapore within a few days. That's a reassuring sign for victims of cross-border fraud.
• Be vigilant from the very first transfer. Even for small amounts, verifying the recipient's identity through a second channel remains the best habit.

1. Step 1: check every email address character by character. Fraudsters often change a single letter or the domain name to imitate a known contact.
2. Step 2: confirm any change of bank details by phone. Call a number you already had, never the one given in the message.
3. Step 3: set up dual approval for large payments. Two people verify the beneficiary before the money is sent.
4. Step 4: act immediately if you spot a mistake. Call your bank and report the transfer without delay, because speed is essential to freezing the funds.
5. Step 5: report the incident to the police in your country of residence and to the Cambodian police. The 24/7 Hotline Scam group is mobilized for this type of case.
6. Step 6: keep all emails, invoices and statements. This evidence helps investigators and your bank.
7. Step 7: only use bank accounts registered in your own name or your company's name. Don't lend your account to a third party, even as a favor.