Two weeks ago, police in Lilongwe busted a cybercrime ring that has been defrauding foreigners.
Details are emerging how the syndicate was operating.
The Chinese-led group has been running its scheme in the neighbourhoods of the city for years, exploiting vulnerable Malawian youth and using them to defraud foreign victims.
The network ran its operations from at least three houses in Lilongwe’s Areas 43, 47, and 51, where young Malawians were recruited under false promises of legitimate employment.
- Advertisement -
Once inside the ring, recruits discovered they had become part of an elaborate international fraud scheme targeting mostly foreign men.
- Advertisement -
Interviews with James Banda, who worked within the operation, suggest the syndicate recruited young Malawians by advertising what appeared to be legitimate customer service or online sales jobs for Chinese products.
He told Malawi News that applicants were promised a salary of about K400,000 per month.
However, after joining, he realized the job was something entirely different.
Instead of sales work as advertised, employees were allegedly forced to impersonate women online and communicate with foreign men through messaging platforms such as Telegram.
- Advertisement -
He said workers were paid only K3,500 per night while working 12-hour shifts from 6pm to 6am, far from the salary initially promised.
During working hours, the workers were not allowed to use personal phones or freely communicate, a measure believed to have been designed to prevent them from exposing the operation.
Another youth who has been working as a model said the recruitment process itself raised suspicion.
Applicants were not asked about qualifications or work experience, suggesting the syndicate was primarily interested in individuals who could easily follow scripted online conversations.
According to investigators and sources, the syndicate used several online fraud techniques.
Young Malawian women were instructed to create fake identities and pose as attractive women online.
In some cases, the recruits were reportedly forced to strip and take explicit photographs used to lure victims.
One ‘model’ told Malawi News that their images were then used to build trust with targets abroad, and in turn, they were paid K100,000.
Another worker said victims were later manipulated into sending money through various schemes.
“One tactic involved romance scams, where victims were convinced to send ‘transport money’ or other financial assistance,” he said.
Another part of the operation involved online investment and gaming scams.
One source said victims were encouraged to participate in online games or investment platforms where they initially appeared to make profits.
Once they invested larger amounts of money, their accounts were frozen and the funds disappeared.
Investigators believe the syndicate targeted mainly American victims, exploiting the distance and anonymity of the internet to run the operation from Malawi while the financial losses occurred overseas.
Malawi News visited the rented houses the syndicate was operating from. They had converted them into small cybercrime hubs equipped with computers and networking infrastructure.
When police eventually raided the locations, they discovered a sophisticated setup.
still underway
According to Central West Region Police spokesperson Foster Benjamin, detectives arrested two Chinese nationals and four Malawians suspected of running the syndicate.
The suspects were identified as Leung Guoh, 37 and Lin Chao, 40; Pride Ntundu, 26; Hope Lipipa, 29; Hawa Chinula, 23 and Enosi Chisime, 25
Police say officers recovered 32 built-in computers, 18 internet routers, one CCTV server, a printer, and 27 notebooks containing hacking procedures and Telegram accounts of potential victims.
Investigators also rescued 18 young Malawians believed to have been trapped in the operation.
“Investigations are still underway to uncover more about the syndicate,” Benjamin said.
Authorities are now analyzing the seized digital devices to determine the full scale of the fraud network and identify possible victims across different countries.
One former worker said he was eventually forced out of the operation after telling supervisors that he wanted to resign.
The source claims he was thrown out of the premises around 1am on February 14, 2026.
He later contacted a friend who alerted officers at the Malawi Police Service’s Lingadzi Police Station, who reportedly picked him up.
The source said he had previously informed police about the operation, claiming officers had visited the location twice but made no arrests at the time.
The Chinese operators allegedly used code names, making it difficult for workers to identify them.
Malawi has experienced rapid growth in internet connectivity, particularly in urban areas, but cybersecurity enforcement capacity remains limited.
At the same time, high youth unemployment creates a pool of vulnerable recruits who may accept suspicious jobs without fully understanding the risks.
International cybercrime syndicates have increasingly been known to shift operations to countries with weaker digital enforcement systems, where residential houses can easily be converted into call centers or online scam hubs
