Fusion Fireside #17: Inside the Chinese Smishing Triad with Gary Warner
18 March 2026
Jump to
In the latest episode of Fusion Fireside, Eward sits down with one of the most respected minds in cybercrime research: Gary Warner, a longtime educator, threat intelligence veteran, and one of the world’s leading experts on Chinese‑speaking smishing and fraud networks.
Gary’s visibility into criminal ecosystems is extraordinary.
During this episode, we explore how Chinese smishing triads have rapidly evolved from automating phishing and SMS scams to dominating global money‑laundering operations – now supporting criminals across continents.
Insights from the Fireside
Several observations stood out during the chat with Gary:
- Criminal channel mapping: Gary tracks Chinese‑speaking fraud groups by mapping their conversations across Telegram using “similar channel trees.”
- Guarantee syndicates: These organized marketplaces verify vendors and provide services like phishing kits, spam delivery, data brokerage, and money laundering.
- Automated scam operations: Chinese groups now industrialize investment scams, even creating pre‑populated Telegram/WhatsApp groups of targeted victims.
- Record‑breaking investment fraud: Investment scams have become the world’s most financially damaging fraud category, with massive underreporting and seniors losing the most.
- Precision data brokerage: Criminal lead sellers offer hyper‑targeted victim lists (e.g., elderly homeowners, doctors, lawyers) enabling marketing‑grade targeting.
- Smishing evasion tactics: Criminals pre‑screen phone numbers to avoid proactive telcos and increasingly rely on encrypted iMessage & RCS to bypass filtering.
- Money‑laundering dominance: Chinese laundering networks now serve criminals worldwide — Russian groups, Mexican cartels, West African fraud rings — at very low fees.
- “Motorcade” laundering model: Thousands of small account holders (many unwitting) move small amounts of money, making laundering harder to trace.
- Human‑trafficking scam centers: Many scam operators are enslaved in compounds in Cambodia, Myanmar, and beyond, blurring victim–criminal lines.
- Training the next generation: Gary’s Scam Busters University Edition empowers students globally to uncover crypto scam sites and feed intelligence to law enforcement.
Final Thoughts
Gary paints a clear picture: Chinese‑speaking smishing and fraud networks have evolved into a highly efficient, globally interconnected criminal economy — one that blends automation, human trafficking, advanced targeting, and industrial‑scale money laundering. Yet, as Gary highlights, targeted enforcement, collaboration with telcos, and empowering a new generation of investigators can meaningfully raise the cost of doing crime. Understanding these ecosystems is the first step in disrupting them.
Explore previous episodes:
https://www.threatfabric.com/fusion-fireside