We don’t build for the bear market; we build for the horizon.
Last week, Myanmar’s parliament approved a law targeting online scams—with a specific clause that punishes crypto-related fraud with 10 years to life imprisonment. The headlines read like a blunt instrument: a sovereign state declaring war on digital crimes. But as someone who spent 150 hours tracing the reentrancy vulnerability in the DAO hack back in 2017, I see something deeper. This isn’t just about punishing bad actors—it’s about the collision between decentralized trust and centralized fear. The bear market didn’t break crypto; it forced regulators to draw lines. And Myanmar just drew the heaviest one yet.
Context
To understand this law, you need to see Myanmar’s landscape. A nation under military rule since 2021, with a fractured economy and a growing number of scam compounds—often run by foreign syndicates—that use crypto as the settlement layer. These “scam centers” employ thousands, luring victims through social engineering and pig-butchering schemes. The new law targets the operators, not the users. It defines “crypto scam” as a distinct crime, carrying sentences that rival those for drug trafficking. For context, in most Western jurisdictions, crypto fraud typically falls under wire fraud or securities violations, with penalties of 5-20 years. Myanmar’s 10-to-life is a outlier—a statement that this regime sees crypto crime as an existential threat.
But here’s the nuance: the law does not ban cryptocurrency. It bans using cryptocurrency to defraud. That distinction matters. It’s a technical boundary that echoes the early days of the internet—when governments struggled to regulate speech without killing the medium. Myanmar is not throwing the baby out with the bathwater; it’s throwing the bathwater out with a sledgehammer.
Core
Let me walk you through the technical and philosophical implications. I’ve audited smart contracts for years, and I’ve seen how code amplifies human intent—both good and malignant. The DAO hack taught me that code is law only if the social layer enforces it. Myanmar’s law is a blunt social-layer enforcement. But the core insight here is: the law creates a perverse incentive for legitimate builders.
Imagine you’re a developer building a DeFi protocol in Yangon. Your contract is audited, your team is transparent. But a bad actor forks your code, tweaks a few variables, and runs a scam. Under this law, your original code could be seen as a “tool for fraud” if the prosecutor connects the dots. This is the chilling effect—not just on criminals, but on innovators. Based on my experience building decentralized protocols in Nairobi, I’ve seen how regulatory uncertainty can kill projects faster than a bug in the code. Myanmar’s law, in its extreme form, risks smothering the very ecosystem that could bring financial inclusion to a country where 70% of adults are unbanked.
But there’s a second layer: the law forces a choice between opacity and compliance. Scam centers thrive on anonymity—fake identities, unregulated OTC desks, offshore wallets. To survive, legitimate players must now embrace KYC/AML like never before. This is where my 2024 work bridging Wall Street and Web3 comes in. In a bear market, compliance becomes a competitive advantage. Projects that prioritize proof-of-personhood, on-chain identity, and zero-knowledge-based audits will stand out. The law doesn’t kill crypto; it kills the wild west. Myanmar’s parliament just put up a “No Outlaws” sign.
Let me illustrate with an analogy. In 2022, while others panicked, I dove into STARK proofs. I realized that cryptographic truth—mathematically verifiable—is the only defense against human lies. Myanmar’s law is a crude version of that: instead of mathematical proofs, it uses brute-force imprisonment. The elegant solution would be on-chain forensics—rules that prevent fraud by design, not by punishment. But that’s the contradiction: the state’s version of “truth” is still centralized, while crypto’s version is distributed.
Contrarian
Now, the contrarian angle: this law might actually accelerate compliance tech adoption in Southeast Asia. I see it as a market signal. The “scam centers” in Myanmar are a symptom of a larger problem: the lack of regulated crypto infrastructure in the region. Thailand, Vietnam, and Cambodia are watching. They’ll likely follow suit with similar laws. For the industry, this means that building compliant, transparent tools is no longer optional—it’s the only path to scale. Think about it: if every scam center in Myanmar shuts down tomorrow, where does the crime go? It migrates to less-regulated countries, but it also forces exchanges and OTC desks to tighten their filters. That’s a net positive for the ecosystem’s reputation.
But here’s the blind spot: selective enforcement. In a military junta, laws are often applied unevenly. A government that can steal an election can also label a political opponent’s crypto holdings as “scam proceeds.” The real risk isn’t the law itself—it’s its weaponization. As a human-centric technologist, I worry more about this than the technical impact. The bear market didn’t break crypto; it taught us to value resilience. But resilience against state capture requires a different kind of armor: decentralization that is robust enough to survive a hostile regulator.
Takeaway
So where does this leave us? Myanmar’s law is a warning shot. It tells every builder: the state is watching, and its patience is thin. But it also tells criminals: your sandbox just got smaller. For me, the takeaway is clear: the only way to survive the regulatory tightening is to make transparency a first-class citizen in our code. We don’t need to beg for permission; we need to prove, through math, that we are not the enemy. The horizon is still there—just a bit more rugged.
About me: I’m Chris Thompson, a decentralized protocol PM in Nairobi. I’ve been in the trenches since 2017, auditing code, surviving bear markets, and building bridges between geeks and suits. If you’re building in Southeast Asia, reach out. Let’s make compliance an engineering problem, not a political one.