A narrow tool aimed at an unambiguous harm
On July 23, 2026, at the close of ASEAN meetings in Manila, Secretary of State Marco Rubio announced a new visa restriction policy targeting people "responsible for, or complicit in, cybercrime and cyber-enabled crime, such as those involved in cyberscams, and sextortion" — and their immediate family members. Rubio named the intended targets plainly: the Chinese transnational criminal networks that run industrial-scale scam compounds across Cambodia, Myanmar, and Laos, which the U.S. government estimates cost Americans $10 billion in 2024 alone. He raised the issue directly with Cambodia's foreign minister the same day, while FBI Director Kash Patel met regional counterparts separately to press for enforcement cooperation, according to The Record.
The policy isn't freestanding. It executes Executive Order 14390, "Combating Cybercrime, Fraud, and Predatory Schemes Against American Citizens," which President Trump signed March 6, 2026. That order directed the State Department to impose consequences — including visa restrictions, targeted sanctions, and limits on foreign assistance — on governments that tolerate scam operations, and it explicitly named sextortion as a priority for Justice Department prosecution. Thursday's announcement is the visa piece of that mandate finally activated, four and a half months later.
The case for it, stated fairly
The strongest argument for this approach is that conventional law enforcement has structurally failed against this target. The scam centers operate from Cambodian, Myanmar, and Lao territory largely beyond U.S. jurisdiction, often with the tacit protection or indifference of local officials. A UNODC threat assessment published July 21, 2026 — two days before Rubio's announcement — found that Southeast Asia's once-fragmented scam syndicates have consolidated into a single interconnected criminal economy, with scam-related losses across East Asia, Southeast Asia, Australia, and New Zealand reaching an estimated $88–114 billion in 2025. Extradition is rarely available, arrests inside these compounds are politically fraught, and the operators are often themselves former trafficking victims managed by leadership that stays several layers removed from prosecutable evidence. A visa ban costs nothing to enforce, requires no foreign government's cooperation, and hits an asset the perpetrators plainly value: the ability to travel, park money, and send children to school in the West. Extending it to immediate family is not novel — the underlying authority, Section 212(a)(3)(C) of the Immigration and Nationality Act, has been used the same way for years against human-rights abusers and corrupt officials, on the theory that laundering proceeds through relatives' travel and residency is itself part of how these networks function.
Where proportionality gets strained
That said, family-inclusive visa bans are a blunt instrument, and their legitimacy depends entirely on how tightly "complicit" ends up being defined in practice. The State Department's announcement does not publish a standard of evidence, a family-member threshold, or an appeals mechanism — it is, structurally, a discretionary executive determination immune from the kind of adversarial process that constrains a criminal indictment. That is a feature when the target is a cartel boss directing trafficking and torture from behind a fence in Sihanoukville; it is a liability if the designation authority drifts toward relatives who had no operational role and no knowledge of the underlying crime, or toward low-level trafficked laborers coerced into scam work rather than the syndicate leadership actually profiting from it. Visa bans, unlike Treasury's OFAC sanctions regime, come with essentially no published designation criteria and no formal delisting process for people wrongly swept in.
The better comparison is the Global Magnitsky sanctions program, which pairs family-inclusive designations with a public rationale and a delisting petition process. If the State Department wants this tool to survive scrutiny — and to avoid becoming a precedent cited the next time an administration wants to sweep in relatives of journalists, activists, or political dissidents under a vague "complicit in cyber-enabled crime" standard — it should publish the evidentiary bar it's applying and a path for family members to contest inclusion. Congress, which has oversight over Section 212(a)(3)(C) use through immigration committees, should ask for exactly that before the policy scales beyond its first cohort of Southeast Asian scam bosses.
The actual leverage point is Phnom Penh, not Washington
None of this changes the more basic problem: a U.S. visa ban does nothing to close a scam compound operating with the acquiescence of a foreign government. The EO's own theory of the case is that visa restrictions are meant to pressure host governments into cooperation, not to substitute for it. Whether Thursday's move works depends less on how many individuals eventually get named and more on whether Cambodia, Myanmar's junta, and Laos face costs sufficient to change their calculus — something a travel ban on individuals, however well targeted, cannot do alone. The administration's own $10 billion figure is itself likely an undercount against the UNODC's regional loss estimate; measured against that gap, a visa policy is a useful, low-cost signal of seriousness, not the fix.