Primary evidence archive documenting bulk SIM card sales linked to scam infrastructure in Southeast Asia, with redacted screenshots, videos, and records.
Archive Purpose:
To document, preserve, and contextualise verifiable evidence related to the sale and distribution of bulk SIM cards and their role in enabling scam operations.
Evidence Standard:
Each entry is atomic: one claim, one proof.
Archive Status: Active
Last Updated: January 2026
EA-SIM-SEA-001
Evidence Title
Telegram Advertisement Offering Bulk Pre-Registered SIM Cards
Type of Evidence
Screenshot
Date Collected
2026-01-03
Source
Telegram channel advertising bulk telecom resources
(Archived locally; original link preserved offline)
Description of Evidence
The screenshot shows a Telegram post advertising Bulk SIM cards, explicitly described as pre-registered. The seller lists quantity, country code, and claims long-term usability for verification and messaging purposes.
What this evidence shows:
- Bulk quantity availability
- Explicit claim of pre-registration
- Commercial framing rather than personal resale
What this evidence supports:
- Existence of large-scale SIM resale markets
- Seller marketing claims about registration status
What it does not prove:
- Legality or illegality of the SIMs
- Downstream use by scam operators
Method of Collection
Open-source monitoring (manual capture)
Verification Notes
- Channel history reviewed for consistency
- Seller claims cross-checked against other listings
- Image metadata preserved
Confidence Level: High
Redactions Applied
- Channel username partially obscured
- Contact handles removed
Reason for Redaction:
Protection of personal identifiers; public-interest documentation preserved.
Linked Dossiers
Legal & Ethical Notes
- Public commercial advertisement
- No private individual named
- Jurisdiction unspecified in seller claim
Evidence Status
Active
EA-SIM-SEA-002
Evidence Title
Video Showing Stacked Bulk SIM Inventory Advertised via Telegram
Type of Evidence
Video (redacted)
Date Collected
2026-01-06
Source
Telegram bulk SIM sale group
(Local archive copy retained)
Description of Evidence
The video shows large stacks of SIM cards arranged in bulk packaging. No individual faces are visible. The video corresponds temporally and contextually with Telegram listings advertising bulk SIM availability.
What this evidence shows:
- Physical existence of bulk SIM inventory
- Scale consistent with advertised quantities
What this evidence supports:
- Claims that listings correspond to real-world inventory
- Commercial readiness rather than a theoretical offering
What it does not prove:
- Registration method
- Intended or actual use
Method of Collection
Open-source monitoring; manual download
Verification Notes
- Cross-referenced with seller messages posted the same day
- Visual elements consistent with telecom packaging
Confidence Level: Medium-High
Redactions Applied
- Packaging serial numbers blurred
Reason for Redaction:
Avoid tracing to specific telecom batches without confirmation.
Linked Dossiers
Legal & Ethical Notes
- No individuals identifiable
- Material documented for investigative context
Evidence Status
Active
EA-SIM-SEA-003
Evidence Title
Seller Claim: SIMs Suitable for OTP and Messaging Platform Verification
Type of Evidence
Chat log (redacted)
Date Collected
2026-01-04
Source
Telegram private chat initiated from a bulk SIM listing
Description of Evidence
Chat messages show the seller stating that the SIM cards are “OTP-ready” and “usable for WhatsApp and Telegram verification.”
What this evidence shows:
- Explicit seller claims regarding functional use
What this evidence supports:
- Documented overlap between SIM resale and platform verification abuse
What it does not prove:
- Whether the SIMs were actually used for scams
- Whether verification bypass succeeded
Method of Collection
Manual observation following open listing
Verification Notes
- Seller language matches multiple other listings
- Chat timestamps preserved
Confidence Level: Medium
Redactions Applied
- Seller contact details removed
- Buyer identity removed
Linked Dossiers
Legal & Ethical Notes
- Commercial claim documented
- No personal data retained
Evidence Status
Active
EA-SIM-SEA-004
Evidence Title
Repeated SIM Range Usage Across Multiple Scam Reports (Pattern Indicator)
Type of Evidence
Analytical correlation (derived from open reports)
Date Collected
2026-01-02
Source
Cross-comparison of scam victim reports and OSINT datasets
Description of Evidence
Multiple scam reports reference phone numbers sharing identical prefixes and ranges, appearing across unrelated scam incidents.
What this evidence shows:
- Pattern consistency in number usage
What this evidence supports:
- Hypothesis of bulk SIM distribution enabling reuse
What it does not prove:
- Identity of SIM seller
- Centralized control
Method of Collection
Open-source aggregation and comparison
Verification Notes
- Prefix repetition verified across datasets
- Timeframes aligned
Confidence Level: Medium
Redactions Applied
- Full phone numbers masked
Linked Dossiers
Legal & Ethical Notes
- Derived analysis, not raw accusation
- No individuals named
Evidence Status
Corroborated
Archive-Level Notes
Evidence Prioritisation Applied
- Bulk advertisements with quantities and pricing
- Seller functional claims
- Physical inventory proof
- Regulatory baselines
Explicit Exclusions
- Naming private individuals
- Publishing raw personal data
- Assigning criminal intent
Archive Limitations
This archive does not establish:
- Direct seller-to-scammer attribution
- Full market scale
- Telecom internal compliance failures
Evidence is updated as verification progresses.
Update Logs
- January 2026: Initial archive populated (EA-SIM-SEA-001 → EA-SIM-SEA-005)
Closing Note
This Evidence Archive is designed to support scrutiny, not conclusions.
Each entry stands alone, but collectively they reveal a consistent infrastructure pattern.
This archive is intended to grow methodically without speculation.
For full context and methodology, read the complete investigation on Telegram’s SIM card supply chain in Southeast Asia.
Sources & References
- Europol – Internet Organised Crime Threat Assessment (IOCTA)
https://www.europol.europa.eu/publications-events/main-reports/internet-organised-crime-threat-assessment - GSMA – SIM Registration and Identity Policy
https://www.gsma.com/publicpolicy/spectrum/sim-registration - FBI Internet Crime Complaint Centre (IC3) – Annual Reports
https://www.ic3.gov/Media/PDF/AnnualReport - Telegram Transparency & Moderation Information
https://telegram.org/faq - Reuters Investigates – Cybercrime & Scam Compounds
https://www.reuters.com/investigates/section/cybercrime/ - RAND Corporation – Dark Web and Illicit Markets
https://www.rand.org/topics/cyber-and-data-sciences.html - Global Anti-Scam Alliance (GASA)
https://www.gasa.org/resources
