Secure DropDrop

EVIDENCE · The compound’s “New Customer / Recharge” board, tracking money taken from victims. Photographed inside by Redbull.

Independent investigations · The Redbull Leaks

Scam compounds run on secrets. We leak them.

Leaked scam scripts, a live map of scam compounds and a free scam checker, from cybercrime whistleblower Mohammad Muzahir (Redbull), the source behind WIRED’s award-winning investigation.

Leaked training material

This is the script they use on you.

Real lines from the training documents workers were given inside the compound, with names and personal details removed. Each one has its own breakdown: what it means, and how to defend yourself.

LEAKED · VERIFIED SOURCE
Exhibit 01 · Day one1ST_DAY_TO_4TH_DAY_CHATING_WITH_CUSTOMERS.docx

First, they decide if you are worth robbing.

“Judging whether the customer has money from the customer’s occupation, age, family situation, hobbies and interests.”

Read the full script breakdown →

Exhibit 02 · The mentorSUGGESTION_HOW_TO_TALK_WITH_CUSTOMERS.docx

The “aunt” is planted early, the money comes later.

“You can often mention that your aunt is an important mentor in your life… Later, we will tell him that it was the aunt who taught us to invest.”

Read the full script breakdown →

Exhibit 03 · The productABOUT_AI_ARBITRAG.docx

A product with “no chance of loss”.

“The highlight of Arbitrage is risk-free profitability.”

Read the full script breakdown →

Exhibit 04 · The bankBANK_CONVERSATION.docx

When your bank tries to save you, they turn you against it.

“But they denied it and delayed it, which made me very angry.” “I actually don’t think they wanted me to move my money elsewhere and thought I was being scammed.”

Read the full script breakdown →

Exhibit 05 · The warningAfter_wire_transfer.docx

They even script the FBI call.

“I also received an anti-fraud call from the FBI today, which wasted a lot of my time, but I can understand that the FBI did this to ensure the safety of my funds, so I am not angry.”

Read the full script breakdown →

Exhibit 06 · The cameraAsk_for_a_video_call_to_meet_and_teach_me.docx

A ready-made list of excuses to never meet you.

“I am here on a business trip. The phone I brought is for work. It is not convenient to give it to you because many people use this phone.”

Read the full script breakdown →

Open all 10 exhibits →

Compound map · 2026

Where the compounds are, and where they moved.

KK Park, Shwe Kokko, the Golden Triangle SEZ, Sihanoukville and dozens more: every publicly reported hub with its latest status and sources, plus field reports from the ground.

Open the full compound map →

Free tool · Runs only on your device

Got a message that feels off? Check it against their playbook.

Paste any WhatsApp, Telegram, SMS, email or dating-app chat. 29 patterns drawn from the leaked scripts. Nothing is sent or saved.

Open the scam checker →

Mohammad Muzahir, known as Redbull
REDBULL · Mohammad Muzahir. Cybercrime whistleblower. Computer engineer.

Who writes this

The source behind the leak. Now mapping the machine.

Mohammad Muzahir, known as Redbull, is a computer engineer and cybercrime whistleblower. He leaked a Golden Triangle scam compound’s scripts, org chart, chats and photos to WIRED, in an investigation that won the 2026 Online Journalism Award for Excellence in Technology Reporting. Today he maps the scam-compound industry and briefs banks, platforms and investigators.

About Redbull → Book a talk or briefing

For banks, platforms & investigators

Train your team on the real scripts.

Briefings and talks for fraud, trust & safety, compliance and recruitment teams, from the cybercrime whistleblower who saw the scripts from the inside. Free for survivor groups.

Talks & briefings → Press

Break the silence

Every compound runs on silence. Break it.

COPIED