The abduction and murder of Chinese national Hao Song inside Colombo Port City has already received extensive media coverage. However, nearly a week after the killing, police investigations have taken a dramatic turn, exposing what authorities believe are sophisticated transnational cybercrime networks that have quietly established operations in Sri Lanka.
The latest developments before the Colombo Magistrate’s Court on Monday have transformed the case from a murder investigation into a wider probe into alleged international online fraud syndicates operating within the country.
Two Chinese nationals arrested at Bandaranaike International Airport while allegedly attempting to flee to Singapore were produced before court for a formal identification parade. Their identities have not been released because of the ongoing judicial proceedings.
Police have identified eight suspects believed to have been involved in the killing. While two suspects remain in custody, investigators say three others fled Sri Lanka shortly after the murder. Sri Lankan authorities are now working through international law enforcement channels to trace the fugitives and seek their extradition.
The murder itself has already been widely reported.
According to police investigations, three Chinese nationals travelled to Colombo Port City’s suspension bridge shortly before midnight on July 22 to go fishing. Around 2.00 a.m. on July 23, they were allegedly ambushed by approximately 20 fellow Chinese nationals who arrived in two vehicles.
Investigators say the victims were blindfolded, tied up and assaulted. Two were abandoned inside a van within Port City, while the third victim, Hao Song, was abducted.
Later that day, police conducting an unrelated operation in the Karandana area of Eheliyagoda discovered his body hidden beneath a pile of rocks. The post-mortem examination confirmed that he died from multiple stab wounds.
The investigation has since uncovered evidence that has significantly widened its scope.
Deputy Inspector General Nishantha de Zoysa has publicly stated that police believe both the deceased and several suspects were connected to rival international online fraud and cryptocurrency scam operations. Police have also confirmed that none of those directly involved held lawful employment in Sri Lanka, despite having entered the country on temporary visas approximately four months earlier.
The Colombo Crimes Division is also investigating possible links to organized Chinese criminal groups. Those inquiries remain ongoing and have not yet been tested before a court.
State intelligence officials say the investigation has highlighted how international cybercrime syndicates have adapted following major law enforcement crackdowns in Myanmar, Cambodia and Laos.
Instead of operating from large fortified scam compounds, investigators believe the networks now function through smaller, mobile groups scattered across Colombo. Intelligence reports indicate that members frequently move between luxury apartments, hotels and rented commercial office space while using companies registered as information technology firms as operational fronts.
Authorities believe these operations target victims around the world through cryptocurrency investment scams, romance fraud, fake online investment platforms and other cyber-enabled financial crimes.
Investigators are also examining allegations that some foreign nationals may have been trafficked into Sri Lanka and forced to participate in online scam operations under threats of violence.
The Government has responded by intensifying nationwide enforcement against foreign cybercrime networks. Hundreds of foreign nationals have been arrested or deported during operations carried out this year, including large-scale raids targeting suspected online fraud syndicates.
The Port City murder has also prompted immediate security reforms. Authorities have introduced stricter overnight access controls, biometric identity verification, enhanced vehicle screening and increased police patrols throughout the high-security economic zone.
Meanwhile, Sri Lanka and China have strengthened cooperation through criminal investigations, intelligence sharing and efforts to locate suspects who fled overseas.
For investigators, the Port City murder is no longer viewed as simply a violent dispute between foreign nationals.
Instead, authorities believe the case has exposed the growing challenge posed by transnational cybercrime networks seeking to exploit Sri Lanka’s strategic location, investment-friendly environment and immigration system. The outcome of the investigation is expected to influence future policy on border security, visa controls and the country’s wider response to international organized cybercrime.