The U.S. State Department announced a new visa restriction policy targeting foreign individuals responsible for or complicit in cybercrime and cyber-enabled crimes.
The restrictions may also apply to the immediate family members of those involved and are intended to disrupt overseas criminal networks.
The policy follows President Trump’s March executive order on combating cybercrime and fraud. According to the State Department, cyber scam operations cost Americans an estimated $10 billion in 2024.
John Carberry, Solution Sleuth, Xcape, Inc. had this comment:
“Deploying diplomatic tools like targeted visa denials raises the personal stakes for transnational cybercrime syndicates, even if it seems odd that a dedicated policy was necessary to keep known criminals out of the country in the first place. By extending travel restrictions to immediate family members under Executive Order 14390, the State Department squeezes the mobility and secondary benefits of operators working from non-extradition jurisdictions. While federal sanctions target overseas infrastructure over time, enterprise security leaders cannot rely on immigration enforcement for threat mitigation. Executives must prioritize immediate technical controls, including strict identity verification, automated transaction monitoring, and robust inbound communication filtering to defeat cyber-enabled fraud at the edge.
“Critical Takeaways
- Enforce borderless technical controls: Treat visa restrictions as a secondary diplomatic lever while maintaining strict identity verification, transaction monitoring, and inbound message filtering.
- Target criminal ecosystems: Recognize that expanding sanctions to immediate family members disrupts the lifestyle mobility that keeps transnational cyber syndicates motivated.
- Do not rely on state policy for defense: Focus enterprise security budgets on stopping fraud at the network edge rather than expecting federal travel bans to reduce attack volume.
“While denying visas to transnational scammers is a welcome step, it is remarkable that keeping international criminals out required a new policy in the first place.”
Jacob Krell, Senior Director: Secure AI Solutions & Cybersecurity, Suzu Labs had this to say:
“The State Department’s new visa restrictions on cybercriminals target people who chose their operating model specifically to avoid US jurisdiction. Scam compound operators in Cambodia, Myanmar, and Laos aren’t applying for US visas. They built fortified facilities in countries with weak governance because distance from Western oversight is the product feature.
“This is industrialized crime running on franchise economics, shared financial infrastructure, trafficking pipelines, specialized service divisions. Rubio cited $10 billion in US losses for 2024. Regional losses hit $88-114 billion in 2025, tripled from 2023. You don’t get to that number with individual bad actors. You get there with an industry.
“DOJ’s June seizure of Huione Group assets showed what effective disruption looks like at this scale, going after shared financial architecture that multiple franchises depend on. Visa restrictions are an individual-accountability tool applied to a problem that has outgrown individual accountability. The industry keeps running regardless of which operators can board a flight to JFK.”
This is an important step forward for sure. I for one would love to see it go further. Like arrest people that are involved in cybercrime and arrest their relatives in exchange for the criminals turning themselves in. That way either people don’t get involved in cybercrime, turn in the perpetrators, or distance themselves accordingly letting the authorities know about it. And other countries should follow suit.
Related
This entry was posted on July 27, 2026 at 3:45 pm and is filed under Commentary with tags USA. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
U.S. imposes visa restrictions on foreign cyber scammers
The U.S. State Department announced a new visa restriction policy targeting foreign individuals responsible for or complicit in cybercrime and cyber-enabled crimes.
The restrictions may also apply to the immediate family members of those involved and are intended to disrupt overseas criminal networks.
The policy follows President Trump’s March executive order on combating cybercrime and fraud. According to the State Department, cyber scam operations cost Americans an estimated $10 billion in 2024.
John Carberry, Solution Sleuth, Xcape, Inc. had this comment:
“Deploying diplomatic tools like targeted visa denials raises the personal stakes for transnational cybercrime syndicates, even if it seems odd that a dedicated policy was necessary to keep known criminals out of the country in the first place. By extending travel restrictions to immediate family members under Executive Order 14390, the State Department squeezes the mobility and secondary benefits of operators working from non-extradition jurisdictions. While federal sanctions target overseas infrastructure over time, enterprise security leaders cannot rely on immigration enforcement for threat mitigation. Executives must prioritize immediate technical controls, including strict identity verification, automated transaction monitoring, and robust inbound communication filtering to defeat cyber-enabled fraud at the edge.
“Critical Takeaways
“While denying visas to transnational scammers is a welcome step, it is remarkable that keeping international criminals out required a new policy in the first place.”
Jacob Krell, Senior Director: Secure AI Solutions & Cybersecurity, Suzu Labs had this to say:
“The State Department’s new visa restrictions on cybercriminals target people who chose their operating model specifically to avoid US jurisdiction. Scam compound operators in Cambodia, Myanmar, and Laos aren’t applying for US visas. They built fortified facilities in countries with weak governance because distance from Western oversight is the product feature.
“This is industrialized crime running on franchise economics, shared financial infrastructure, trafficking pipelines, specialized service divisions. Rubio cited $10 billion in US losses for 2024. Regional losses hit $88-114 billion in 2025, tripled from 2023. You don’t get to that number with individual bad actors. You get there with an industry.
“DOJ’s June seizure of Huione Group assets showed what effective disruption looks like at this scale, going after shared financial architecture that multiple franchises depend on. Visa restrictions are an individual-accountability tool applied to a problem that has outgrown individual accountability. The industry keeps running regardless of which operators can board a flight to JFK.”
This is an important step forward for sure. I for one would love to see it go further. Like arrest people that are involved in cybercrime and arrest their relatives in exchange for the criminals turning themselves in. That way either people don’t get involved in cybercrime, turn in the perpetrators, or distance themselves accordingly letting the authorities know about it. And other countries should follow suit.
Share this:
Like this:
Related
This entry was posted on July 27, 2026 at 3:45 pm and is filed under Commentary with tags USA. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.