Macau Security Report — September 29, 2026

Security analysis based on open-source intelligence and web research. Period: September 22 — September 29, 2026.

Executive Summary

Macau's security landscape during the period of September 22-29, 2026, was primarily shaped by significant developments in cybersecurity and the continued implementation of its national security framework. The week saw the conclusion of Macau's first national security trial, held behind closed doors, underscoring the government's firm stance on national security. Concurrently, authorities intensified efforts to bolster cybersecurity resilience following recent government website hacks and emphasized the critical link between digital security and national stability. Border security remained a focus with ongoing anti-smuggling operations, while a symbolic shift towards People's Liberation Army (PLA)-style drills for local security forces highlighted deepening integration with mainland China's defense posture. These internal developments, alongside broader China-US diplomatic engagements, signal a continued emphasis on internal stability and alignment with Beijing's strategic objectives.

Key Security Developments

• Cybersecurity Incidents on Government Websites
  Earlier this week, several Macau government websites, including those of the Secretary for Security, public security police, fire services department, and Security Forces Services Bureau, were targeted by a significant cyberattack, reportedly a distributed denial-of-service (DDoS) attack. Authorities initiated an emergency response in collaboration with telecommunication operators to restore services and launched a criminal investigation to identify the source of the attack. This incident highlights the persistent and evolving cybersecurity threats facing Macau's critical infrastructure.

• Enhanced Cybersecurity Policy and Initiatives
  On September 20, 2026, Macau hosted a sub-forum for the annual China Cybersecurity Week at the Macao Science Centre, bringing together officials and experts from Guangdong, Hong Kong, and Macau. Judiciary Police (PJ) Director Sit Chong Meng pledged the Macau government's commitment to improving compliance guidelines for AI security and data security, strengthening cybersecurity talent development, and enhancing the overall cybersecurity resilience of civil society.

• Integration of Cybersecurity and National Security
  Chief Executive Sam Hou Fai chaired the annual plenary meeting of the Cybersecurity Commission at Government Headquarters on September 21, 2026, emphasizing the crucial importance of strengthening coordination between cybersecurity and national security. He stated that cybersecurity is a fundamental pillar in consolidating Macau's defense line for safeguarding national security, aligning with Macau's 3rd Five-Year Plan and the nation's 15th Five-Year Plan.

• Conclusion of First National Security Trial
  Macau's first national security trial, involving former pro-democracy lawmaker Au Kam San, concluded behind closed doors on September 19, 2026, after proceedings began on September 17, 2026. Au Kam San, 69, was charged with allegedly providing false information to an overseas anti-China organization to incite hatred against Beijing and the Macau government, a case that could carry a sentence of up to 25 years in prison. The Court of First Instance announced that judgment would be issued at a later date.

• Increased Border Security and Anti-Smuggling Operations
  Macau Customs intercepted 16 smuggling cases and seized contraband valued at approximately MOP2.93 million during a weeklong enforcement operation conducted from September 18-24, 2026. The operation targeted cross-border smuggling activities at key checkpoints including Macau International Airport, the Macau checkpoint of the Hong Kong-Zhuhai-Macao Bridge, the Inner Harbour, and the Border Gate checkpoint.

• Adoption of PLA-Style Drills by Security Forces
  Starting October 1, 2026, Macau's security forces will adopt the Chinese People's Liberation Army's (PLA) salute and Chinese-style foot drill as their standard ceremonial procedures. The Portuguese-style drill will be retained for cultural preservation. This move signifies a further alignment of Macau's security forces with mainland China's military protocols.

• US Travel Advisory Reiteration
  The U.S. State Department reissued a Level 3 "Reconsider Travel" advisory for Macau on September 4, 2026. The advisory cited concerns over a limited ability to provide emergency consular services and the arbitrary enforcement of local laws, including restrictions on U.S. diplomatic personnel.

• Expansion of Smart Immigration Clearance
  While initiated slightly before the reporting period, "Smart Immigration Clearance" was officially rolled out at the joint inspection automated channels of Qingmao Port and the Zhuhai-Macao Hall of the Hong Kong-Zhuhai-Macao Bridge Port on June 26, 2026. This system allows eligible passengers to clear immigration using facial recognition and fingerprint scans without presenting physical travel documents, enhancing efficiency and border management.

• International Alliance Against Telecom and Online Fraud
  China is planning to establish an international alliance against telecom and online fraud, with its founding ceremony scheduled for September at the 2026 Conference of the Global Public Security Cooperation Forum in Lianyungang, Jiangsu Province. This broader Chinese initiative is relevant to Macau's efforts in combating cybercrime and cross-border fraud.

• Ransomware Attack on BN Law Macau (Portugal)
  On September 24, 2026, the ransomware group Incransom claimed responsibility for a cyberattack against BN Law Macau, a legal services firm based in Portugal. The group threatened to publish all data if negotiations were not initiated. While the direct target is in Portugal, the firm's name suggests potential ties to Macau, highlighting the global reach of cyber threats and the importance of robust cybersecurity for entities with international connections.

Geopolitical Impact and Regional Dynamics

Macau's security developments during this period are deeply intertwined with its status as a Special Administrative Region (SAR) of China and Beijing's broader strategic objectives. The conclusion of the first national security trial against former lawmaker Au Kam San, conducted behind closed doors, reinforces Beijing's tightening grip on national security in SARs and signals a reduced tolerance for dissent. This move has drawn criticism from the European Union, which condemned Au's arrest as an erosion of Macau's political pluralism and freedom of speech, though both local and central governments refuted these accusations. This diplomatic friction underscores the ongoing international scrutiny of human rights and legal autonomy in Macau under the "One Country, Two Systems" framework.

The emphasis on enhancing cybersecurity resilience and integrating it with national security, as highlighted by Chief Executive Sam Hou Fai, reflects China's holistic approach to national security, which encompasses digital sovereignty. Macau's participation in the China Cybersecurity Week sub-forum and its commitment to improving AI and data security guidelines align with Beijing's national strategy to safeguard critical information infrastructure and counter evolving cyber threats. This integration is further evident in the ongoing efforts to deepen Macau's development into the Guangdong-Hong Kong-Macao Greater Bay Area (GBA), where cybersecurity cooperation and seamless border management are crucial for regional economic and social integration.

Furthermore, the symbolic adoption of PLA-style drills by Macau's security forces, effective October 1, 2026, represents a visible alignment with mainland China's military culture and discipline. While Macau maintains its own security forces, this ceremonial shift reinforces the SAR's integration into the national defense system and underscores Beijing's ultimate authority. The broader context of President Xi Jinping's recent state visit to Washington, D.C., which focused on building a "constructive China-US relationship of strategic stability" and included agreements on reciprocal tariff reductions and an AI Dialogue, indirectly impacts Macau by shaping the overall geopolitical environment in which it operates. The US travel advisory, citing arbitrary enforcement of local laws, also reflects a persistent concern among Western powers regarding the rule of law in Macau.

Military and Defense Analysis

Macau, as a Special Administrative Region of China, does not maintain its own independent military force; its defense is primarily the responsibility of the People's Liberation Army (PLA) garrison stationed in the territory. During the reporting period, there were no direct reports of significant military activities, exercises, or defense acquisitions specific to Macau. However, a notable development indicating a symbolic shift in defense posture was the announcement that Macau's security forces will adopt the Chinese People's Liberation Army's (PLA) salute and Chinese-style foot drill as their standard ceremonial procedures starting October 1, 2026. This move, while ceremonial, signifies a deeper cultural and procedural alignment with the mainland Chinese military and reinforces the "One Country, Two Systems" principle with a stronger emphasis on the "One Country" aspect in terms of national identity and discipline within the security apparatus.

This adoption of PLA-style drills can be interpreted as part of a broader trend of integrating Macau more closely into the national framework, not just economically but also in terms of security and governance. It reflects Beijing's desire for greater standardization and a unified national image across its territories. While the Portuguese-style drill will be retained for cultural preservation, the shift in standard ceremonial procedures underscores a clear directive from the central government to foster a sense of national pride and military discipline consistent with the PLA. There were no indications of changes in force posture, modernization programs, or defense spending trends for the PLA garrison in Macau during this specific week.

Outlook and Forecast

Short-term trends (1-3 months): In the immediate future, Macau is likely to experience continued heightened focus on cybersecurity, particularly in the lead-up to and during China's upcoming National Day holiday (October 1). The recent government website hacks will likely prompt intensified efforts to implement the pledged improvements in AI and data security guidelines and strengthen the cybersecurity talent system. The outcome of the Au Kam San national security trial judgment, expected at a later date, will be a critical indicator of the future application and enforcement of Macau's national security laws, potentially influencing public discourse and international perceptions. Furthermore, the formal adoption of PLA-style drills by Macau's security forces from October 1, 2026, will be a visible manifestation of deeper integration with mainland China's security ethos.

Critical flashpoints and risk areas: A critical flashpoint remains the interpretation and enforcement of national security laws, particularly concerning freedom of speech and political activity, as highlighted by the EU's condemnation of Au Kam San's arrest and the US travel advisory. Any further high-profile national security cases or perceived curtailment of freedoms could exacerbate diplomatic tensions with Western nations. Cybersecurity vulnerabilities continue to pose a significant risk, with government infrastructure remaining a prime target for malicious actors. The increasing sophistication of cyberattacks, including ransomware, necessitates continuous vigilance and investment. While not directly reported in this period, the potential for cross-border criminal activities, including smuggling and online fraud, remains a persistent concern, requiring ongoing cooperation with mainland Chinese authorities.

Indicators to monitor: Key indicators to monitor include the judgment and sentencing in the Au Kam San case, which will set a precedent for future national security prosecutions. Progress in implementing Macau's cybersecurity enhancement initiatives, including the development of AI and data security guidelines and talent cultivation, should be closely watched. Any changes in US or EU travel advisories or diplomatic statements regarding Macau's autonomy and rule of law will also be important. Additionally, the frequency and nature of cybersecurity incidents targeting government or critical infrastructure will serve as a barometer of the evolving threat landscape.

Strategic recommendations: Macau should prioritize robust investment in cybersecurity infrastructure and human capital, focusing on advanced threat detection, incident response capabilities, and public-private partnerships to counter sophisticated cyberattacks. To mitigate international concerns, greater transparency in the application of national security laws, while respecting judicial processes, could be considered to foster confidence in Macau's legal system. Continued efforts to strengthen cross-border security cooperation with mainland China, particularly in combating cybercrime and smuggling, are essential for regional stability. Finally, Macau should strategically leverage its role within the Greater Bay Area to enhance economic diversification and regional security collaboration, while carefully managing its unique identity and international relations.

Sources

• cyberpeace.org
• macaupostdaily.com
• macaudailytimes.com.mo
• macaupostdaily.com
• macaudailytimes.com.mo
• rtl.lu
• securitystudies.info
• macaudailytimes.com.mo
• macaudailytimes.com.mo
• state.gov
• macaupostdaily.com
• agbrief.com
• www.gov.mo
• facebook.com
• dexpose.io
• macaudailytimes.com.mo
• macaupostdaily.com
• macaupostdaily.com
• www.gov.mo