A joint law enforcement operation in Cebu City led to the arrest of two Malaysian nationals on July 28, 2025, in connection with alleged cybercrime activities. The operation involved multiple agencies, including the National Bureau of Investigation-Central Visayas Regional Office (NBI-CEVRO), the Cybercrime Investigation and Coordinating Center (CICC), the Bureau of Immigration-Fugitive Search Unit, and Naval Intelligence and Security Group-Central.
During a search of the suspects’ hotel room, authorities confiscated various electronic devices, including laptops, radio frequency (RF) modules, routers, motherboards, and what appears to be an International Mobile Subscriber Identity (IMSI) capture device. IMSI catchers, also known as “stingrays” or “cell-site simulators,” are sophisticated surveillance tools that mimic legitimate cell towers to intercept mobile communications. The arrest matches a pattern of similar cases in the Philippines, including the recent arrest of another Malaysian national suspected of leading an IMSI catcher syndicate involved in SMS scam operations.
The NBI-CEVRO identified a notable shift in cybercriminal tactics, noting that operators are moving from traditional office buildings and residential locations to hotels and resorts. The tactical change reflects trends seen across Southeast Asia, where cybercrime groups increasingly adopt mobile operations to evade detection. The suspects have been transferred to Bureau of Immigration custody and will face charges under Republic Act 10175, known as the Cybercrime Prevention Act of 2012, which provides comprehensive legal framework for addressing technology-enabled crimes.
The operation was executed following the issuance of affidavits supporting a Cyber Warrant to Search, Seize, and Examine Computer Data (WSSECD), as confirmed by the CICC. The warrant was issued in accordance with provisions outlined in the Cybercrime Prevention Act of 2012. The CICC has been actively strengthening its technological capabilities, recently equipping law enforcement with specialized tools to detect and track unauthorized IMSI surveillance activities near sensitive locations.
The seized equipment will undergo forensic analysis at CICC’s cybercrime laboratory to support the case against the suspects and potentially reveal connections to wider criminal networks. The investigation is part of a broader regional effort to combat mobile-based fraud and unauthorized surveillance, with similar initiatives being implemented in neighboring countries like Malaysia, where authorities have recently strengthened their anti-fraud measures.
Sources: GMA Network Regional TV News, Newsbytes, ABS-CBN News
