INTERPOL Arrests 1,462 Suspects and Recovers Over $105 Million in African Cybercrime Crackdown

The International Criminal Police Organisation (INTERPOL) announced recently that a major cybercrime operation across Africa had resulted in 1,462 arrests and the recovery of more than US$105 million in illicit funds.

INTERPOL named it Operation Serengeti III that ran from June 29 to August 31, 2026, and involved law enforcement agencies from 21 countries. Authorities disrupted 10,909 malicious networks and identified 65,929 victims targeted by cybercriminal groups. Financial investigations linked the criminal activity to losses exceeding US$385 million.

The operation targeted several types of cybercrime, including online scams, ransomware, business email compromise (BEC), phishing, and digital extortion.

Major cases uncovered during the operation

Online investment and pension scams in Uganda

Authorities dismantled two fraud networks and arrested 365 foreign nationals linked to schemes targeting people across Asia. Illegal call centres were found that were using prepared scripts, fake trading platforms, and fraudulent websites to defraud people, including pensioners, into investing in opportunities that never existed.

Illegal cryptocurrency mining in Angola

Investigators shut down two illegal cryptocurrency mining centres and arrested nine suspects in Angola. Authorities seized more than 2,000 mining devices and six illegal power transformation stations, highlighting how cyber-related crime can also involve the misuse of physical infrastructure and electricity.

Phishing and business email compromise in Nigeria

Authorities arrested a suspect linked to a large-scale operation that collected login details and gathered approximately 2.1 million email addresses. Investigators also recovered a luxury vehicle suspected of having been purchased with criminal proceeds.

Authorities also examined another online investment scam promoted through messaging apps. The investigation traced more than US$2.4 million in suspected criminal proceeds, much of which was reportedly moved through cryptocurrency transactions.

Why this matters for financial crime prevention

Cybercrime often creates a financial trail across bank accounts, payment services, businesses, and cryptocurrency transactions. Criminals may use fraudulent investment platforms to collect funds, compromised business email accounts to divert payments, or other people’s accounts to move suspected proceeds.

INTERPOL said the operation relied on cooperation between law enforcement agencies and private-sector partners. Investigators received intelligence on suspicious internet domains, IP addresses, and other digital infrastructure to help identify targets and disrupt criminal networks.

The results show why cybercrime investigations and financial crime controls need to work together. Identifying suspicious digital activity is only part of the response; tracing the money and identifying connected accounts can help investigators understand the wider network.

Implications for Compliance Teams

• Watch for unusual payment patterns: Be alert to payments that do not match a customer’s normal activity, especially those linked to online investment schemes or unexpected third-party transfers.
• Look for possible money mule activity: Accounts receiving and quickly forwarding funds may need closer review when other risk indicators are present.
• Investigate business email compromise risks: Unexpected changes to supplier bank details, unusual payment requests, or pressure to make urgent transfers should be checked independently.
• Assess cryptocurrency-related exposure: Where relevant, review transfers involving crypto-related businesses or services for links to suspected fraud and unexplained sources of funds.
• Share information and report suspicion: Follow applicable suspicious activity reporting requirements and internal escalation procedures when evidence raises concerns.

The operation reinforces a key lesson for AML teams that cybercrime and money laundering can be closely connected. Effective monitoring, careful investigations, and cooperation across organisations can help identify suspicious funds and support efforts to disrupt criminal networks.