Evolutionary Fraud, the Global Scamming Ecosystem and a Typology of Actors

How the Global Scamming Ecosystem Has Become More Complex, More Organized, and Harder to Stop

Fraud is no longer just a matter of a lone criminal sending out a few emails or making a few phone calls. The global scamming ecosystem has grown into a highly adaptive, multi-billion-dollar industry that now resembles legitimate business in its structure, specialization, and reach. A recent study published in the International Journal of Law, Crime and Justice describes this development as “evolutionary fraud” – a system in which scams and scam operations continually adapt under pressure from law enforcement, technology, competition, and the search for profit.

The key point is simple: the most effective scams survive, spread, and become more sophisticated. Weak scams disappear. Successful ones are copied, refined, and scaled. Over time, this has produced a global fraud economy that is both diverse and resilient.

From lone actors to criminal enterprises

One of the most useful contributions of the study is its typology of scam actors based on size and organizational structure. At the smallest end are “Demons” – lone actors working largely on their own. These are the fraudsters who create, run, and profit from scams independently, although they may still pay others for small support tasks. The study shows that many scam cases do fit this model, including romance fraudsters, credit card fraudsters, and identity thieves who operate with little visible structure.

Next are “Gorgons”, meaning small groups of fewer than ten people. These often involve friends, couples, or loosely connected collaborators with some division of labour. One person may lure the victim, another may close the deal, and another may handle technical support or money movement. These groups are small, but still more efficient than lone actors because they can share skills and distribute risk.

Then come “Ogres”, groups of between 10 and 50 people. These are more structured operations, often found in places such as West Africa, India, and Southeast Asia. In these settings, scam activity may involve several layers of control, training, infrastructure, and recruitment. The study points to call centres, fraud academies, and training hubs where the criminal business begins to look like a commercial enterprise.

At the top end are “Behemoths” and “Mega Behemoths”, which are large-scale scam operations with hundreds or even thousands of participants. These may include international fraud centres, coercive scam compounds, or criminal networks with multiple layers of management, laundering, and support. In some regions, these operations are so large they include not just scammers, but dormitories, security staff, recruitment teams, logistics, and even amenities such as clinics and restaurants. In other words, fraud has been industrialized.

Bastian Schwind-Wagner _Follow

"Fraud has evolved into a global ecosystem that mirrors legitimate business in both scale and structure. The latest research shows that scam operations can range from lone actors to highly organized enterprises with specialized roles, cross-border networks, and support from corrupt or indifferent insiders.

This matters because the threat is adapting faster than many enforcement systems can respond. To be effective, anti-fraud efforts must target not just individual offenders, but the wider networks, enablers, and conditions that allow scams to grow and spread."

Why specialization matters

As scam operations grow, they become more specialized. That is one of the clearest signs that this is not just opportunistic offending, but a mature criminal market. Larger groups divide labour just as legitimate firms do. Some actors focus on finding victims. Others handle first contact. Others are better at persuasion and are used to “close” the scam. Others manage websites, fake documents, recruitment, or money laundering.

The study shows that this specialization is visible across multiple fraud environments. In Indian call centres, for example, there may be data sellers, openers, closers, trainers, human resources staff, managers, and owners. In Southeast Asia, scam compounds may be divided into separate scam “departments”, with further support from logistics, security, and on-site services. In West African operations, there may be profilers, closers, herders, mules, and a central leader. The bigger the operation, the more it resembles a business.

This matters for financial crime professionals because it means disruption has to be targeted. Taking out one role may not be enough if the wider structure remains intact.

The supporting industries behind fraud

The study also highlights the wider ecosystem that makes fraud possible. Scam operations do not exist in isolation. They depend on supporting services, some criminal and some legal but compromised.

Website developers are a good example. Fraudsters need fake sites that look real, and those sites need to be hosted, moved, and rebuilt quickly after takedowns. Some providers operate as one-stop shops, supplying templates, hosting, and technical support to multiple syndicates at once. Others produce fake documents, such as invoices, bank statements, identity papers, and proof of ownership.

Social media is another key part of the system. Influencers, impersonated accounts, hacked accounts, and fake personas can all be used to promote scams or lend them false credibility. The study notes high-profile cases involving social media personalities who became part of money laundering or scam promotion, but also points out that many accounts used for these schemes are not what they seem. Some are fake. Some are stolen. Some are simply used to amplify fraudulent content.

There is also a cultural dimension in parts of West Africa, where some scammers use spiritual rituals or “juju” practices as part of their fraud routines. The study does not present this as a universal feature of fraud, but it does show that in some contexts, belief systems can shape how scammers view success, protection, and control. For some offenders, these rituals are not just symbolic. They are part of the method.

Corruption and indifference make the system stronger

A major reason fraud ecosystems endure is that they are often protected by corruption or indifference. The study shows that in some places, law enforcement officers, politicians, bankers, and insiders in legitimate firms may help scammers directly or indirectly. Sometimes they are bribed. Sometimes they are intimidated. Sometimes they simply choose not to ask questions.

In the most extreme cases, especially in parts of Southeast Asia, scam compounds operate under protective umbrellas provided by political and economic elites. That protection can include land access, toleration by local authorities, and a share of profits. In other cases, scammers rely on insiders in banks or companies who provide access to data, accounts, or internal procedures.

The study also notes that corruption can reach into courts, prisons, universities, and recruitment agencies. That makes fraud harder to detect and much harder to disrupt. It also blurs the line between legitimate systems and criminal ones, allowing fraud to benefit from the same infrastructure that should be stopping it.

Scamvolution: fraud as a process of selection

The paper’s concept of “scamvolution” is especially useful. It captures the idea that fraud is shaped by selection pressures. If a scam works, it gets repeated. If law enforcement starts detecting a method, fraudsters adjust. If a platform becomes less useful, they move to another. If fake images are easier to detect, they switch to AI-generated ones. If one country becomes riskier, operations migrate elsewhere.

This explains why fraud keeps changing. It is not random. It is adaptive.

The same process also drives spreading and replication. People recruited into scam operations may later set up their own schemes. Methods spread across borders. Tactics are observed, copied, and improved. In some cases, fraudsters move their operations to new countries and rebuild them there, bringing the same scripts, tools, and networks with them.

For financial crime teams, this means the threat is not static. It is evolving in real time.

Why law enforcement is still losing ground

One of the starkest findings in the study is that scammers often outnumber and out-resource the agencies trying to stop them. Economic crime units in many countries are small compared with the scale of the problem. Scam networks can hire lawyers, pay for better technology, bribe insiders, and move operations across borders. They can also absorb losses and recover quickly after disruption.

This gives fraudsters a major advantage. They are often better funded, more flexible, and more decentralized than the institutions trying to contain them.

The result is a long-term imbalance. If enforcement remains fragmented while fraud networks remain adaptive, the ecosystem will continue to expand.

What this means for the financial crime community

The study offers a practical message: anti-fraud efforts need to match the structure of the threat. A lone scammer, a small fraud group, and a multinational scam compound do not respond to the same tactics. Nor do the enablers around them. Effective response will require international cooperation, better intelligence, stronger oversight of enabling industries, and more attention to the wider ecosystem that supports fraud.

It also suggests that investigators should think in terms of networks, functions, and dependencies, not just individual offenders. Fraud is not only about who sends the message or calls the victim. It is also about who builds the site, moves the money, launders the proceeds, protects the group, and keeps the operation running.

That is the real lesson of evolutionary fraud. The scammer is no longer just a person. In many cases, the scammer is an organization, a supply chain, and a moving target.

Dive deeper

• Research ¦ Mark Button, Suleman Lazarus, Branislav Hock, Paul Gilmour, Durgesh Pandey, James Bugbilla Sabia, Evolutionary fraud, the global scamming ecosystem and a typology of actors, International Journal of Law, Crime and Justice, Volume 84, 2026, 100825, ISSN 1756-0616, https://doi.org/10.1016/j.ijlcj.2026.100825. ¦ Link ¦ licensed under the following terms, with no changes made: CC BY 4.0