By Li Yuchen
On February 2, 2026, the Thai military showcased the interior of an electrical fraud park to the world.
The park is located in the small town of O’Smach on the Cambodian border, and was captured by the Thai army during last year’s Thai-Cambodian conflict. General Diranan, the Director of the Royal Thai Army Intelligence Bureau, led reporters and foreign representatives into a six-story building within the park.
There are many rooms in the building, each of which is set up as:
Police stations.
Not police stations of one country, but of many countries. China, Singapore, Indonesia, Vietnam, Brazil, Australia – this building houses a miniature “Interpol”.
The nameplate on one of the rooms reads:
Shanghai Municipal Public Security Bureau.
一
The Thai military said that the park once held thousands of people.
Many of them were victims of human trafficking. After being lured here, they had only two choices: to defraud strangers, or to be punished.
The operation of the park is very professional.
Each room is carefully arranged to simulate police offices of different countries. Police badges hang on the walls, documents are placed on the desks, and uniforms hang on the hangers. If you receive a video call, the person on the screen is wearing a police uniform, and the background is a seemingly regular office – it’s hard to imagine that it’s actually a prop room in the Cambodian jungle.
The Singaporean room has a nameplate that reads “Woodlands East Neighbourhood Police Post”. The room displays the Singapore Police Force badge and matching uniforms.
The Vietnamese room is more particular. A portrait of Ho Chi Minh hangs on the wall, along with the rules of the Public Security Bureau, and a banner:
“Long live the glorious Communist Party of Vietnam.”
The Thai military seized 871 SIM cards in the park, all of which could be used for anonymous international communication. There were also dozens of smartphones, forged police badges and uniforms, and multi-language fraud scripts.
The most impressive thing is those cubicles.
Each cubicle is lined with sound-absorbing cotton, which is said to prevent victims from noticing the background anomalies during the call. After all, if you are talking to a police officer from the “Shanghai Municipal Public Security Bureau”, and a chicken suddenly crows in the background, it may not be right.
Diranan stood in the building and said to the camera: “We are showing this place in the hope that the whole world can see how it is used as a criminal base that endangers humanity.”
二
A question arises: How do these fraudsters know your information?
If you have received a fraud call, you may be surprised at how much the other party knows about you. They know your name, your ID number, where you live, and even what you bought recently.
This information is not fabricated.
It’s bought.
In July 2022, something shocked the entire cybersecurity circle. A hacker publicly sold a batch of data on an overseas forum, claiming it came from the Shanghai Municipal Public Security Bureau.
The data volume is 23TB, involving over 1 billion mainland Chinese residents. The content includes: name, address, place of birth, ID number, photo, mobile phone number, and criminal case information.
The selling price was 10 bitcoins, which was about $200,000 at the time.
Later investigations showed that this batch of data was hosted on the Alibaba Cloud platform. According to security researchers, the console used to access and manage the database was opened on the wide area network, and:
No password was set.
Even more ironically, this data table also marked specific groups of people. One type of mark is:
“Those who need to be closely monitored”.
This means people who are considered by the government to pose a threat to social order.
The government spent a lot of resources collecting this information with the aim of strengthening control over society. What was the result? All this information was leaked overseas.
Commentators believe that this batch of data leaked from government agencies may shake the argument that “the monitoring system can protect national security”.
三
The Shanghai Public Security database leak is not an isolated case.
In February 2023, a privacy query robot suddenly appeared on Telegram. Users only need to enter their mobile phone number to find the corresponding name and detailed delivery address.
According to online news, this robot is behind about 4.5 billion pieces of domestic personal information, with a data package size of 435GB, suspected to be from the e-commerce or express logistics industry.
A cybersecurity blogger personally tested this robot and found that his information was listed. Not only his name and mobile phone number, but also multiple home addresses in Wuhan and Beijing.
Even more outrageous is the note he left for the courier:
“Put it in the refrigerator.”
So, how was this data leaked?
There are several common ways: API interface vulnerabilities, improper operation and maintenance, and database being hacked. But there is also one that is the most difficult to prevent:
Internal spies.
In 2021, the procuratorate prosecuted more than 500 “internal spies” who leaked citizens’ personal information. They came from all walks of life: communications, banking, insurance, real estate, hotels, property, and logistics.
In 2024, public security organs solved more than 7,000 cases of crimes that violated citizens’ personal information.
Where does this data go? It goes to the dark web, to the social engineering database, and to those who pretend to be police officers in the Cambodian jungle.
四
The Thai military said that the town of O’Smach had long been named by the United States as a hotbed of fraud activities, involving human trafficking and forced criminal behavior.
However, the park was only captured until the military conflict broke out on the Thai-Cambodian border.
In other words, the reason for taking down this electrical fraud park was not because someone wanted to crack down on crime, but because the two countries fought, and they took it down incidentally.
After the incident was exposed, the reactions of all parties were very interesting.
Thailand is very high-profile. Diranan took reporters to visit the park, made a statement to the camera, and said that he wanted the whole world to see this “criminal base that endangers humanity”.
Cambodia is not very happy. The spokesman of the Ministry of Interior, Du Soka, accused Thailand of using the crackdown on fraud parks as an excuse, but in fact launched a military attack. Cambodia said that it is severely cracking down on fraud activities and promised to eradicate this illegal industry before April this year.
What about China?
The Chinese authorities have not made any comments on the fact that the “Shanghai Municipal Public Security Bureau” appeared in the Cambodian electrical fraud park.
Nor has it made any public response to the 2022 Shanghai Public Security database leak. The authorities have conducted content censorship on social media platforms such as WeChat and Weibo to prevent the news from spreading.
Silence, sometimes, speaks more than a response.
五
The Thai military also found a large number of documents in the park.
These documents include lengthy lists of seemingly potential targets and their contact information, fraud dialogue scripts, and fully archived fraud target information.
Behind each name is a person who may be deceived.
Their information may come from an online shopping, a courier sign-off, or a hotel check-in.
This is probably one of the most absurd news stories of 2026.
A country’s public security system collects citizens’ information in the name of security, but cannot protect the security of this information.
If this is a script, the screenwriter may be criticized:
“It’s too fake, this kind of thing is impossible in reality.”
But it happened.
Right in the jungle on the Cambodian border, right in the six-story building with the nameplate “Shanghai Municipal Public Security Bureau”.
Li Yuchen’s article stands in the dust
Written on February 6, 2026
This article has opened quick reposting, welcome to repost to your public account
Archiving to prevent deletion, relaying and spreading
Discover more from 自由档案馆
Subscribe to get the latest posts sent to your email.