US Pulls the Visa Rug from Under Foreign Cybercriminals

Marco Rubio has announced that the United States will start denying visas to foreign nationals caught running cybercrime operations, with the possibility of extending those bans to their immediate families. The secretary of state made the announcement Thursday, pointing the finger squarely at Chinese transnational criminal organisations as the primary architects of what he described as a wave of investment scams targeting Americans.

The numbers Rubio cited are not trivial. US citizens lost over $10 billion to these schemes in 2024 alone. That's before accounting for sextortion operations targeting minors, which Rubio said can "devastate families and futures" — language that, for once, isn't entirely unwarranted given the scale of the problem.

The legal mechanism here is Section 212(a)(3)(C) of the Immigration and Nationality Act, which gives the State Department authority to block visas when someone's entry could trigger serious adverse foreign policy consequences. It's a broad and flexible tool, and Rubio has been reaching for it repeatedly. Earlier in 2025 he used the same provision to restrict foreign officials who suppress Americans' freedom of expression abroad, and before that to go after private sector workers facilitating illegal immigration. The Biden administration previously used it for the Khashoggi Ban, targeting foreign operatives suppressing dissidents on behalf of their governments.

So this isn't a new power, just a new application of an existing one. Whether it actually deters anyone operating from jurisdictions with zero interest in cooperating with US law enforcement is a different question entirely.

Rubio framed the move as part of a broader toolkit — sanctions, prosecutions, asset seizures, extraditions, international cooperation — all pointed at dismantling criminal scam networks. That's a reasonable-sounding list. The awkward reality is that most of the people running pig butchering scams and sextortion rings are sitting in countries that have little incentive to extradite them or freeze their assets.

The US already had other routes to keep convicted cybercriminals out. Section 212(a)(2) of the same act can bar foreign nationals from entry based on convictions for crimes involving moral turpitude, a category that covers fraud. The new policy presumably catches people who haven't been formally convicted yet, which is either a sensible pre-emptive measure or a fairly expansive use of executive authority depending on your perspective.

Extending restrictions to family members is the part most likely to raise eyebrows. The logic, presumably, is that it increases pressure on the individuals actually running the operations. Whether it works that way in practice, or just inconveniences relatives who have nothing to do with the schemes, remains to be seen.