Scammers Target Myanmar Travelers in Shan State to Fuel Telecom Fraud Operations

Fraudsters in southern Shan State’s Taunggyi Township are targeting travelers at intercity bus stops and transit hubs, posing as bank representatives to collect national identification card (NIC) data and facial photographs for telecom scam syndicates, according to residents and victims. Operating in towns like Aungpan, middle-aged scammers lure unsuspecting victims with offers to set up free accounts at major financial institutions, including KBZ Bank and AYA Bank. After they take photographs of victims' identity cards and faces, the perpetrators abscond, selling the biometric and personal data to online scam operations—locally known as Zhapaian—for tens of millions of Myanmar kyat. The scam exploits military junta travel mandates that require Myanmar citizens to carry physical identity cards at all times due to ongoing political instability. Most victims realize their information has been stolen when they attempt to open a bank account themselves. A resident of neighboring Ywangan Township, for instance, was turned away by KBZ Bank staff after finding an account had already been fraudulently registered using his identity credentials. "I was in Aungpan when people offered to help me open a bank account. They took photos of my NIC and face, then claimed they couldn't finish it right away and left," the victim told the Shan Herald Agency for News. "When I later went to open an account myself, I was told one was already registered under my name." Community members and cybersecurity advocates warn that stolen credentials put victims at severe legal risk, exposing them to liabilities involving illicit financial transactions, money laundering, and unauthorized loans. Concerns are also growing over parallel security threats on regional transit routes, where individuals in junta uniforms have reportedly been seen photographing travelers' identity documents. Local tech advocates have additionally urged the public to beware of phishing links distributed via Viber and Telegram platforms used to compromise mobile devices.