Executive Summary
Colombia stands at a dangerous crossroads where traditional organized crime—drug cartels, armed groups, and trafficking networks—is rapidly evolving into sophisticated digital fraud operations. A nation historically known for cocaine production and armed conflict is now witnessing criminal organizations diversify their portfolios to include cryptocurrency scams, call center fraud, and exploitation of the 3 million Venezuelan refugees who have fled to Colombia seeking safety but often find exploitation instead.
In November 2025, Colombian authorities dismantled a Medellín-based crypto scam network that stole 71 billion pesos (approximately $18 million) from victims across Colombia, Chile, and Peru since 2021. The operation revealed a highly structured criminal organization with assigned roles—professional phone operators, digital dashboard creators, money launderers—operating with the same organizational sophistication that Colombian cartels brought to the cocaine trade.
But this is just one visible example of a broader transformation. The Gulf Clan (Clan del Golfo), with presence in 392 municipalities (up 55% since 2022), ELN guerrillas in 232 municipalities, and FARC dissidents in 299 municipalities are all expanding their criminal portfolios beyond drugs into cybercrime, human trafficking, and financial fraud. Foreign criminal organizations—including Mexico’s Sinaloa and Jalisco New Generation Cartels, and Venezuela’s notorious Tren de Aragua gang—have established strong footholds, bringing their own expertise in digital crime.
The Venezuelan refugee crisis has created a perfect storm: 2.8 million desperate migrants and refugees, many without legal documentation or employment opportunities, become both victims and sometimes perpetrators of fraud. Women face sexual exploitation in “webcam houses,” young men are recruited into armed groups and street gangs, and entire families fall victim to job scams, romance fraud, and predatory lending schemes.
Key Statistics:
- $18 million stolen in single Medellín cryptocurrency scam (2021-2025)- 2.8 million Venezuelan refugees and migrants in Colombia (largest in Latin America)- 70,284 people displaced by armed group violence in 2025 (double 2024 figures)- 61% of cybercrime committed by employees with insider access- 17% of cybercrime directly perpetrated by criminal organizations- 70% of Colombian internet users experienced attempted or successful cybercrime- 422 cyber criminals arrested in 2013 (up from 252 in 2011), but still far below crime rate
The Medellín Crypto Scam: Case Study in Cartel-Style Digital Crime
The Operation
The November 2025 bust revealed how Colombian criminal ingenuity—honed through decades of drug trafficking—translates seamlessly to digital fraud:
Structure:
- 14 arrested members with assigned specialized roles- Phone Operators: Trained in scripted conversations, sounding professional and knowledgeable- Digital Front Creators: Built fake dashboards mimicking real crypto exchanges- Money Launderers: Moved funds rapidly across accounts to prevent tracking- Supervisors: Monitored recruitment and expansion beyond Colombia’s borders
Method:
- Cold calls promising “unimaginable profits” that traditional banks couldn’t match- Sophisticated fake platforms appearing legitimate- Initial small investments to build trust- Encouraging larger deposits as “profits” appeared on fake dashboards- Communication cut off once major funds deposited- Platform disappeared, leaving victims with nothing
Victims:
- Hundreds across Colombia, Chile, and Peru- Total losses: 71 billion pesos (~$18 million)- Many placed life savings in the scheme- Cross-border coordination complicated investigation
The Takedown: Colombian prosecutors, regional cybercrime units, and international partners coordinated for months. Victim testimonies—screenshots, recorded calls, communication histories—revealed patterns. Digital forensics uncovered servers hosting fake dashboards. Financial transaction tracking eventually linked back to organization members despite rapid movement designed to mask origins.
What It Reveals
This case demonstrates Colombian organized crime’s evolution:
Traditional Cartel Tactics Applied Digitally:
- Hierarchical structure with specialized roles- International expansion strategy- Sophisticated money laundering- Recruitment and training systems- Compartmentalization to protect leadership
New Digital Capabilities:
- Technology infrastructure creation- Social engineering expertise- Cryptocurrency knowledge- Cross-border digital operations- Fake platform development
The Venezuelan Refugee Crisis: Exploitation at Scale
The Numbers
Colombia hosts the third-largest refugee population globally:
- 2.8 million Venezuelan refugees and migrants- 7 million internally displaced Colombians- 3 million+ Venezuelans arrived since Venezuela’s crisis began- 35,000 reach official crossings daily; ~5,000 don’t return- Over 50% of jobs in Colombia are informal economy
The Vulnerability Cycle
Why Venezuelans Are Targeted:
- Lack of Documentation
- Many crossed illegally without papers- Temporary Protection Status (TPS) has strict requirements- ~1 million lack proper documentation, making them invisible- No access to formal jobs or social services without documents2. Economic Desperation
- Fleeing hyperinflation, political instability, violence- Arrive with nothing—many homeless (16% of Colombian homeless are Venezuelan)- Need immediate income for survival- Will accept dangerous or exploitative work3. Limited Rights Awareness
- Don’t understand Colombian legal system- Fear deportation prevents reporting abuse- Language/cultural barriers in some regions- Distrust of authorities4. Social Isolation
- Separated from family support networks- Target of xenophobia from some Colombians- Vulnerable to recruitment by those offering “help”- Easy to exploit without community protection
The Exploitation
Human Trafficking and Sexual Exploitation
The Crisis:
-
20% increase in Venezuelan trafficking victims in Q1 2020 vs. all of 2019- Women and girls particularly targeted- “Webcam houses” forcing sex work under abusive conditions- Trafficking routes through border towns and tourist destinations Global Scam Series 2025 - ScamWatchHQ
ScamWatchHQScamWatchHQHow It Works:
-
Traffickers promise legitimate employment- Offer to arrange passports, visas, documentation- Once in Colombia, victims coerced into prostitution- Threats of deportation, posting intimate photos online- Debt bondage: forced to work off “costs” of border crossing, housing, food- Documents confiscated to control movement
Scale: Venezuelan migrants, LGBTQI+ community members, Afro-Colombians, indigenous people, and those in conflict zones are most vulnerable. Criminal organizations and armed groups are “heavily engaged” in these activities according to UN Special Rapporteur.
Armed Group Recruitment
Urban Gangs:
- Target homeless migrants sleeping rough- Offer food, shelter, one-off payments- Recruit as street fighters, drug dealers, hit men- Use desperation to build cheap labor force
Rural Armed Groups:
- ELN, FARC dissidents, Gulf Clan all recruiting migrants- Work in coca cultivation, drug processing- Serve as combatants, informants- Forced participation with threats against families
Children Especially Vulnerable:
- 159 cases of child recruitment in first half of 2024- Indigenous children frequently targeted- Recruited children face extreme abuse- Used in combat, drug operations, sexual exploitation
Job Scams
Common Schemes:
- Fake job offers on social media (WhatsApp, Facebook)- “Modeling opportunities” abroad (actually trafficking)- Mining and agricultural work that’s forced labor- Restaurant/hospitality jobs that never materialize- “Work from home” cryptocurrency schemes- Call center jobs that are actually scam operations
The Medellín Connection: Medellín, where thousands of Venezuelans sought refuge, became a hub for sophisticated scams targeting both migrants as victims and recruiting desperate migrants as perpetrators of fraud against others.
Romance Scams: Targeting Colombian Diaspora and Beyond
The Colombian Connection
Why Colombia Is a Romance Scam Hub:
- Stereotypes Exploited
- Colombian women perceived as beautiful, family-oriented- Men seen as charming, passionate- Cultural expectations around gender roles- International reputation (unfairly) linked to “exotic” appeal2. Language Advantage
- Spanish-speaking scammers target U.S. Latino population- Can operate across Latin American diaspora- Cultural understanding of target victims- Authentic-seeming conversations3. Economic Motivation
- High unemployment, especially among youth- Organized crime provides infrastructure- Call center operations with trained operators- Low risk compared to drug trafficking
How Colombian Romance Scams Operate
Structure: Professional call centers operate like legitimate businesses:
- Supervisors manage multiple operators- Scripts and training provided- Performance metrics tracked- Targets assigned based on language, demographics- Money laundering networks integrated
Typical Pattern:
- Profile creation using stolen photos (models, influencers)2. Initial contact via dating apps, social media, Facebook3. Love bombing—intense attention, declarations of love4. Gradual requests for money (family emergency, business opportunity, travel costs to meet)5. Crisis escalation if victim hesitates6. Disappearance once victim exhausted or suspicious
Common Stories:
- “My mother needs surgery, I have no one else to turn to”- “My business has a temporary cash flow problem”- “I need visa/travel costs to come meet you”- “Investment opportunity we can do together”- “Being held by kidnappers, need ransom” (fake kidnapping)
Specific Target Groups
U.S. Latino Community:
- Scammers exploit cultural connections- Speak Spanish fluently- Understand cultural references, family dynamics- Target immigrants seeking connection to home culture
Elderly Victims:
- Seeking companionship after spouse death- May have retirement savings accessible- Less familiar with online fraud tactics- Emotionally vulnerable
Military Personnel:
- Regular income and benefits- Often lonely due to deployments- Seek stable relationships- Target of specialized scams
Cryptocurrency and Financial Fraud
Colombia’s Crypto Landscape
Why Colombia Attracts Crypto Crime:
- Growing cryptocurrency adoption- Limited regulatory oversight- Tech-savvy population in major cities- Existing money laundering infrastructure from drug trade- Cross-border payment needs- Currency instability driving crypto interest
Beyond the Medellín Scam
Other Cryptocurrency Fraud:
- Fake Exchanges
- Websites mimicking legitimate platforms- Steal deposits immediately- Provide fake trading interfaces- Disappear with user funds2. Investment Schemes
- “Guaranteed returns” in Bitcoin/Ethereum- Ponzi structures using crypto- “Mining” operations requiring upfront equipment purchase- Celebrity endorsement scams (deepfakes)3. Cryptocurrency ATM Fraud
- Fake ATMs stealing deposits- Legitimate ATMs used in money laundering schemes- Technical support scams directing victims to crypto ATMs- Romance scammers requesting crypto ATM transfers
”Gota a Gota”: Digital Evolution of Predatory Lending
Traditional “Gota a Gota” (“Drop by Drop”):
- Illegal loan sharks offering quick cash- Extremely high interest rates (10%+ daily)- Physical collectors visiting daily- Violence and threats for non-payment- Targets those excluded from formal banking
Digital Transformation:
- WhatsApp and Telegram-based lending- Automated daily payment reminders- Digital transfers instead of cash collection- Expanded reach beyond physical territory- Data harvesting of personal information- Threats via message, social media exposure- Access to victim’s phone contacts for harassment
The Trap: Desperate Venezuelans and poor Colombians, unable to access formal credit, turn to “gota a gota” for emergencies. Daily compound interest means debts spiral quickly. Digital methods allow lenders to harass via messages, threaten social media exposure of debt, and contact all phone contacts. Violence remains option but psychological torture via digital means is primary control mechanism.
Government and International Response
Colombian Authorities
National Police:
- Cybercrime units established but under-resourced- 422 cyber criminals arrested in 2013 (increasing but insufficient)- International coordination improving- Focus remains primarily on drug trafficking
Prosecutor’s Office:
- Led Medellín crypto scam investigation- Regional cybercrime coordination- Challenges: outdated legal frameworks, limited resources- Corruption undermines some enforcement efforts
Border Control:
- Temporary Protection Status (TPS) for qualifying Venezuelans- 10-year protection allowing access to services- Requirements exclude many vulnerable migrants- Program suspended in 2023, possible 2025 restart
International Support
UNHCR (UN Refugee Agency):
- Operates across Colombia including hard-to-reach areas- Prevention, protection, assistance, empowerment, solutions- Supports both Venezuelan refugees and displaced Colombians- Faces funding shortfalls
International Rescue Committee (IRC):
- Emergency response in Cúcuta (main crossing point) and Medellín- Focus: protecting children, empowering women, healthcare, economic wellbeing- Notes conditions remain dire despite Colombian government support
HIAS:
- Legal services, economic empowerment, mental health, protection- Supports single women, women-headed households, violence survivors- Free services (warns of fraud from those claiming to represent HIAS)
Challenges
Limited Resources:
- Law enforcement lacks cybercrime investigation capacity- Outdated legal frameworks hinder prosecution- Colombia ranks among weakest in financial fraud security
Corruption:
- Tax evasion and corruption undermine formal economy- Some authorities complicit in criminal activities- Financial oversight institutions ineffective
Scale of Crisis: With 2.8 million refugees plus 7 million internally displaced, resources are overwhelmed. Armed groups expand faster than government can respond.
Protection Strategies
For Venezuelan Refugees and Migrants
Job Offers:
- Verify employer legitimacy through official channels- Never pay fees for job opportunities- Be suspicious of offers requiring travel abroad- Avoid jobs requiring you to recruit others- Research companies online before accepting- Meet potential employers in public, official locations
Documentation:
- Keep copies of all identification separate from originals- Never give passport/ID to employer or “helper”- Register for Temporary Protection Status if eligible- Contact UNHCR, IRC, HIAS for legitimate documentation assistance- Report anyone charging fees for refugee services (should be free)
Financial Safety:
- Avoid “gota a gota” lenders at all costs- Seek formal microfinance or community lending circles- Never borrow at rates you cannot calculate/understand- Don’t give lenders access to phone contacts- Report predatory lending to authorities
Human Trafficking:
- Be extremely wary of anyone offering “too good to be true” opportunities- Never accept offers requiring you to cross borders illegally- Keep family/friends informed of whereabouts- Don’t let anyone take your documents “for safekeeping”- Trust instincts if situation feels wrong- Know emergency numbers: report to police, contact UNHCR/IRC/HIAS
For All Colombians
Cryptocurrency:
- Research platforms thoroughly before investing- Be suspicious of guaranteed returns- Verify company registration with Colombian authorities- Never invest money you can’t afford to lose- If it sounds too good to be true, it is- Report suspicious platforms immediately
Romance Scams:
- Never send money to someone you haven’t met in person- Be wary of rapid declarations of love- Video calls don’t guarantee authenticity (deepfakes exist)- Research person’s photos with reverse image search- Don’t accept packages or transfer money for online relationships- Discuss new relationships with trusted friends/family
General Fraud Prevention:
- Verify caller identity before giving information- Don’t trust caller ID (easily spoofed)- Hang up and call official number if suspicious- Never click links in unsolicited messages- Use strong, unique passwords for all accounts- Enable two-factor authentication everywhere possible
Conclusion: The Future of Crime in Colombia
Colombia stands at a critical juncture. Traditional organized crime—honed through decades of drug trafficking, armed conflict, and human smuggling—is rapidly adapting to the digital age. The $18 million Medellín crypto scam represents not an isolated incident but a preview of Colombia’s criminal future: sophisticated, digitally enabled, internationally coordinated, and devastating to victims.
The Venezuelan refugee crisis has provided criminal organizations with a vast pool of vulnerable people to exploit as victims and, through desperation, sometimes recruit as perpetrators. Women face sexual exploitation, children are recruited into armed groups, families fall for job scams and predatory lending that destroys any hope of rebuilding their lives.
Yet Colombia has also shown resilience and compassion. The Temporary Protection Status program, when operational, represents one of Latin America’s most generous refugee policies. International organizations provide crucial support. Colombian citizens often welcome refugees despite economic strain. Prosecutors successfully dismantled the Medellín network, showing capability when resources permit.
The question is whether these positive forces can keep pace with criminal evolution. As cartels diversify portfolios beyond cocaine, as armed groups recruit faster than government can respond, as digital fraud enables global victimization from Medellín call centers, Colombia needs sustained international support, enhanced law enforcement capabilities, and most importantly, economic opportunities that offer alternatives to crime for both Colombians and the millions of Venezuelans who have sought refuge there.
The transformation of Colombian organized crime from jungle labs to digital fraud centers is complete. The response must be equally transformative.
Resources and Reporting
Report Fraud and Crime
Colombia:
- National Police Cybercrime Unit: Report internet crimes, fraud, hacking- Prosecutor’s Office: For serious organized crime involvement- Emergency: 123
Refugee and Migrant Support
Free Legitimate Services:
- UNHCR Colombia: Refugee registration, legal aid, protection services- International Rescue Committee (IRC): Emergency response, healthcare, economic support- HIAS: Legal services, economic empowerment, mental health careWarning: HIAS services are FREE. Report anyone charging fees claiming to represent HIAS: ethics@hias.org
Cryptocurrency Fraud
Reporting:
- National Police Cybercrime Division- Superintendencia Financiera (Financial Superintendency)- International: Report to IC3 (if U.S. citizens affected)
Human Trafficking
Immediate Help:
- National Trafficking Hotline: Report trafficking, get help- UNHCR Protection: Safe houses, legal aid, medical care- Police: 123 Emergency
For updates on Colombian fraud trends and scam alerts, visit www.scamwatchhq.com
Remember: If someone offers you a job that seems too good to be true, it probably is. Never give your documents to anyone. Report exploitation—you are not alone, and help is available from legitimate organizations that never charge fees.
© 2025 ScamWatchHQ. May be shared freely for educational purposes with attribution.
