Thailand’s facial recognition banking rules were meant to stop fraud. Instead, criminal syndicates now traffic people to Cambodia, hold them captive, and force them to scan their faces to authorise fraudulent transactions – then victims return home to face prosecution.