South Korean police bust $15 million illegal gambling rings run from converted internet cafés

Dig Deeper

Related stories

2025/05/28: South Korean man charged over North Korean gambling operation 2025/07/08: Four Korean nationals arrested for illegal online gambling operations 2025/01/27: Vietnam police bust US$1.2 billion illegal gaming operation 2025/05/12: Indonesian authorities bust Rp530 billion illegal gambling operation

The Backstory

How Jeju fits a widening regional crackdown

Jeju police say the dismantled gambling rings targeted teenagers and seafarers and moved billions of won in wagers through converted PC bangs and a rented villa. The operation’s contours mirror a wider Asia Pacific trend: small, distributed teams running online platforms, tightly coupled to fast-moving payment channels, and shielded by fragmented hosting and domain infrastructure. The Jeju bust underscores how domestic enforcement has been accelerating in step with cross-border investigations that are disrupting the labor, technology and banking pipelines that sustain illicit betting.

South Korean authorities have stepped up actions against operators who mix local physical fronts with online platforms to widen reach while keeping risk dispersed. The strategy increasingly collides with transnational networks that lease domains, outsource development and exploit gaps between jurisdictions on everything from extradition to bank KYC. The result is a cat-and-mouse cycle where operators diversify locations and payment methods, and regulators answer with coordinated raids, asset freezes and criminal-profit recovery.

The Jeju case lands amid rising concern about youth exposure and the use of predatory lending to keep bettors in the ecosystem. That focus aligns with a broader policy shift toward cutting off proceeds at the source, reclaiming assets and moving upstream to the infrastructure—domains, hosting and payment rails—that makes the trade resilient.

North Korean-linked infrastructure feeds gray markets at home

Prosecutors in Seoul recently charged a 55-year-old South Korean, identified as Kim, with concealing criminal proceeds and violating the National Security Act for allegedly brokering domain names and site access for North Korean hackers supplying illegal gambling software. Authorities allege Kim sold 71 domains tied to 16 gambling sites to local operators and that roughly a third of the profits flowed to Pyongyang. The case, described in prosecutors’ charges over a North Korean gambling operation, highlights the long tail of cyber infrastructure in the sector: developers and domain resellers upstream, domestic marketers and lenders midstream, and cash-out specialists downstream.

For South Korean police, that division of labor complicates traditional enforcement centered on local venues. It also raises national security stakes. When gambling revenue intersects with sanctioned actors, routine financial crimes become channels for state-directed cyber activity. The Jeju arrests, with their emphasis on profits, teenage exposure and recovery of illegal earnings, fit a playbook that aims to disrupt that flow by rolling up local nodes while intelligence and prosecutors tackle the infrastructure layer.

The Kim case also shows why seizures of phones, servers and wallets matter. Domain sales can be traced, hosting providers contacted and payment clusters mapped, shrinking the life span of illicit sites. As Jeju investigators stress recovery and deterrence, Seoul’s prosecutors are signaling that asset preservation and forfeiture will be central to cutting off returns that keep new sites spinning up.

Offshore hubs lose cover as Manila, Cebu and Clark tighten rules

The Philippines, long a magnet for offshore gambling operations serving foreign markets, has turned more aggressive following the government’s 2024 ban on POGOs. Immigration agents have carried out raids in Clark Freeport and elsewhere, arresting foreign nationals alleged to be running betting platforms. In one raid, officials detained seven South Koreans inside Clark on suspicion of managing workstations linked to sports betting, as detailed in the arrests in Clark Freeport. Authorities framed the action as part of a broader campaign to arrest and deport violators and to prevent online gaming from resurfacing under the guise of legitimate tech businesses.

Cooperation between Manila and Seoul has widened. A joint effort led to multiple arrests of Korean nationals in the Philippines, including a suspected ringleader in Clark and others apprehended at airports and residences. Investigators allege the groups operated dozens of platforms and generated large profits while routing content and payments through rented houses and small teams, according to the coordinated arrests of four Korean nationals. Those arrests show how the Philippines’ enforcement posture has shifted from licensing oversight to direct interdiction and deportation, narrowing safe harbors for cross-border operators and complicating the offshoring model that domestic rings have relied on for technology, personnel or payment processing.

For operators inside South Korea, that means less operational cover, higher costs and added risk in outsourcing technology or call center work abroad. For regulators, it creates leverage: when host countries clamp down and share data, domestic investigations can stitch together cross-border money trails more quickly.

Laundering pipelines evolve from Da Nang to Jakarta

As enforcement tightens, laundering schemes are becoming more sophisticated and geographically dispersed. Vietnamese police in Da Nang recently dismantled what they described as one of the country’s largest money-laundering operations, with alleged flows of about US$1.2 billion moving through more than 600 bank accounts and 187 registered businesses linked to fraud and online gaming. The case, outlined in Vietnam’s US$1.2 billion bust, illustrates how operators use legitimate corporate shells and high-volume account networks to mask gambling proceeds among ordinary commercial transactions.

Indonesia’s national police likewise reported a laundering network that funneled gambling revenue through cryptocurrency and the country’s QRIS payment system, moving funds across thousands of accounts tied to a shell company. Investigators seized Rp530 billion in assets, including funds scattered across 22 banks, as detailed in the Indonesian bust of a Rp530 billion operation. The case shows how instant payments and crypto rails can be combined to obfuscate flows, degrade traceability and accelerate settlement for gambling sites that need liquidity to pay winners and recycle stakes.

These cases matter for South Korea. Domestic rings that recruit teens and local bettors still need cross-border payment exits to convert wagers into spendable funds and to hedge enforcement risk. Each takedown of a laundering node increases friction, raises costs and makes it harder to keep sites running after raids on front locations like PC bangs. It also pushes criminals toward higher-interest loans, as alleged in Jeju, which magnifies harm to vulnerable bettors and invites further scrutiny from financial regulators.

Why the stakes are rising for regulators, banks and platforms

The Jeju arrests connect local social harms—teen debt, predatory lending and access to gambling—to a regional web of technology providers, domain resellers, offshore hubs and laundering shops. The trend line is clear: police and prosecutors are pivoting from whack-a-mole site closures to end-to-end disruption that targets profits, platforms and payment rails.

For regulators, the immediate task is harmonizing data sharing with counterparts in Manila, Hanoi and Jakarta while tightening domestic oversight of payment intermediaries, crypto on-ramps and small corporate registries. For banks and fintechs, the pressure is to improve anomaly detection around high-velocity microtransactions, QR payment bursts and account farms that signal gambling flows. For domain registrars and hosts, closer compliance with takedown requests and stricter vetting of resellers could shorten the life cycle of illicit sites.

The Jeju case also raises the penalty for complacency. If North Korean-linked developers continue to seed the market with turnkey sites, as prosecutors allege in the Kim case, then South Korea’s gambling cleanup doubles as a national security imperative. Each recovered won is a dollar not cycling back into sanctioned programs. And each dismantled laundering node—from Da Nang’s corporate webs to Indonesia’s QR and crypto switchboards—thins the safety net that keeps operators one step ahead.

Taken together, recent actions in South Korea, the Philippines, Vietnam and Indonesia signal a coordinated phase of enforcement. The Jeju bust is not an outlier but a local expression of a regional clampdown that is moving upstream to infrastructure and downstream to assets. The next tests will be whether authorities can sustain cross-border asset recovery, keep pace with payment innovation and deter the recruitment of minors that turned a neighborhood internet café into a node of a much larger market.