![A suspect involved in the KT unauthorized micro-payment scam leaves a detention cell at Suwon Yeongtong Police Station in Suwon, Gyeonggi on Sept. 18. [YONHAP]](https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1MNjJd.img)
An implicated suspect in the KT micro-payment fraud departs a detention facility at Suwon Yeongtong Police Station in Suwon, Gyeonggi on September 18. [YONHAP]
The investigation into the KT micro-payment fraud has revealed some intriguing insights. One of the key suspects disclosed to law enforcement on Thursday that he was following directions from superiors, raising questions about possible high-level orchestration from China.
The KT scam kicked off in late August 2025, catching the attention of residents in Gwangmyeong and throughout nearby areas, where unexpected small sums started disappearing from their mobile accounts. This scheme relied on hacking into mobile phones linked to KT, allowing perpetrators to make unauthorized micro-payments—petty online transactions that often go unnoticed due to their minimal amounts.
Important Related Developments
-
Police identify suspects hacking KT customer data for illegal transactions
-
Concerns rise as KT breach leaves key questions unanswered
-
After initial denials, KT admits around 5,561 subscribers were affected
A detention hearing was held at the Suwon District Court on Thursday morning involving two Chinese Korean suspects, aged 48 and 44. They have been charged with violations related to Information and Communications Network Use and fraud via computer-based means.
In contrast, the younger suspect evaded questions regarding potential collusion or connections with KT.
Authorities suspect the 48-year-old loaded unauthorized base station equipment into a van and operated in areas like Gwangmyeong, Bucheon, and southern Seoul’s Geumcheon District, as well as parts of Incheon.
Investigators insinuated he had hacked into KT clients’ phones to facilitate these small online charges. The 44-year-old also faced charges for cashing in mobile gift vouchers that were illegally obtained. It’s interesting to note that both suspects claimed never to have met each other.
Both reportedly hail from China and share Korean ancestry, with roles as day laborers. The 48-year-old is fluent in Korean, while the younger peer communicates solely in Chinese.
![A suspect involved in the KT unauthorized micro-payment scam leaves a detention cell at Suwon Yeongtong Police Station in Suwon, Gyeonggi on Sept. 18. [YONHAP]](https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1MN4To.img)
One of the suspects associated with the KT micro-payment scam is seen leaving a detention facility at Suwon Yeongtong Police Station, Gyeonggi on September 18. [YONHAP]
The cybercrime unit of Gyeonggi Nambu Police Agency started this investigation after local residents in Gwangmyeong reported mysteriously large charges between August 27 and 31.
Law enforcement agencies apprehended the 48-year-old at Incheon International Airport on Tuesday as he attempted to reenter Korea post-crime, while the other suspect was taken in nearby Yeongdeungpo District.
Talking to the police, the older suspect mentioned receiving instructions from Chinese superiors, claiming to have recently had dealings with them, and he even offered their details to the authorities.
Cops have tracked his movements and retrieved the gadgetry essential for executing the scheme. Investigators believe he was ordered to install and operate the gear from his van, which they confirmed was procured locally.
As of Monday, around 200 cases of fraudulent transactions were recorded, summing up to 120 million won ($86,500), whereas KT detailed 278 separate incidents accounting for 170 million won.
A police representative stated, “These suspects were simply day laborers with no links to KT or the IT sector. We’re particularly concentrating on uncovering any collaborators and understanding how they obtained their tech know-how and underlying motives.”
This article was initially crafted in Korean and translated by a bi-lingual reporter leveraging generative AI tools, followed by editing from a native English-speaking editor. All AI-dependent translations undergo scrutiny and refinement by our editorial team.
BY SON SUNG-BAE [paik.jihwan@joongang.co.kr]
