INTERPOL Arrests 1,462 Suspects and Disrupts 10,909 Cybercrime Networks in Global Crackdown

INTERPOL has announced the results of Operation Serengeti III, a coordinated cybercrime crackdown that resulted in 1,462 arrests, the disruption of 10,909 malicious networks, and the recovery of more than $105 million in illicit funds.

The operation took place between June 29 and August 31, 2026, involving law enforcement agencies from 21 countries. Investigators identified 65,929 victims targeted by cybercriminal networks, while financial investigations linked criminal activity to losses exceeding $385 million.

According to INTERPOL’s official announcement, the operation targeted a range of online crimes, including investment fraud, phishing, business email compromise, and other financially motivated cybercriminal activities.

What Is Operation Serengeti III?

Operation Serengeti III is an international law enforcement initiative designed to identify cybercriminals, disrupt malicious infrastructure, investigate financial crimes, and protect victims.

Participating countries included Angola, Benin, Cameroon, the Republic of Congo, Côte d’Ivoire, the Democratic Republic of Congo, Ghana, Kenya, Nigeria, South Africa, Tanzania, Uganda, the United States, Zambia, and others.

Private-sector cybersecurity companies also supported the operation by sharing threat intelligence about phishing infrastructure, botnets, and other resources used to conduct cyberattacks.

Group-IB and Team Cymru were among the partners that contributed intelligence to help investigators identify malicious infrastructure and support enforcement actions.

Major Cybercrime Operations and Arrests

INTERPOL highlighted several investigations that demonstrate the variety of threats addressed during the crackdown.

Investment and Pension Fraud in Uganda

Authorities arrested 365 foreign nationals in Uganda in connection with two transnational fraud networks. The schemes reportedly involved sophisticated online investment and pension fraud targeting victims across Asia.

The case illustrates how criminal groups can operate across borders, using online communications and financial systems to reach victims far from the locations where the suspects operate.

Illegal Cryptocurrency Mining in Angola

Authorities in Angola dismantled two illegal cryptocurrency mining facilities and arrested nine suspects. Investigators seized approximately 2,000 cryptocurrency mining devices and six illegal power transformation stations, with the seized equipment and infrastructure valued at more than $1 million.

The operation highlights the physical infrastructure that can support some cryptocurrency-related crimes, including large-scale mining operations using unauthorized power facilities.

Phishing and Business Email Compromise in Nigeria

In Nigeria, investigators arrested a suspect linked to a large-scale phishing and business email compromise operation. The operation reportedly collected software credentials and accumulated approximately 2.1 million email addresses.

Business email compromise attacks often involve impersonating trusted individuals or organizations to deceive victims into disclosing information or transferring money. Stolen credentials can also provide access to business systems and email accounts.

International Investment Fraud

Nigerian authorities also arrested a suspect connected to an international investment fraud scheme advertised through messaging applications.

Investigators linked the operation to the movement of more than $2.4 million in suspected criminal proceeds, with a substantial portion reportedly laundered through cryptocurrency transactions.

Authorities also arrested 30 suspects connected to a cybercrime operation in the Republic of Congo.

Why International Cybercrime Cooperation Matters

Cybercriminal networks can distribute their infrastructure, operators, financial accounts, and victims across multiple countries. This makes investigations difficult when law enforcement agencies work independently.

Operation Serengeti III demonstrates the importance of sharing threat intelligence, coordinating investigations, and tracing financial activity across jurisdictions.

INTERPOL Director of Cybercrime Neal Jetton emphasized international cooperation as an important tool for disrupting criminal networks, recovering assets, and protecting communities from digital threats.

The operation also highlights the value of collaboration between law enforcement and private cybersecurity organizations, which can help investigators identify suspicious domains, malicious servers, phishing campaigns, and other technical evidence.

How Individuals and Businesses Can Reduce Cybercrime Risks

Although international law enforcement operations can disrupt criminal infrastructure, individuals and organizations should continue taking precautions against online fraud.

• Verify investment opportunities: Be cautious of guaranteed returns, urgent payment requests, and unsolicited investment offers.
• Protect email accounts: Use multifactor authentication and strong, unique passwords.
• Check unexpected messages: Independently verify payment requests and links before responding.
• Secure business systems: Restrict account permissions and monitor unusual login activity.
• Report suspected fraud: Preserve relevant messages and transaction records, then contact the appropriate financial institution or local authorities.

Conclusion

Operation Serengeti III resulted in 1,462 arrests, the disruption of 10,909 malicious networks, and the recovery of more than $105 million, according to INTERPOL. The operation also identified tens of thousands of victims connected to cybercriminal activity.

The results underscore the scale of cross-border cybercrime and the importance of cooperation between law enforcement, cybersecurity researchers, and affected organizations. Continued intelligence sharing, effective investigations, and stronger digital security practices remain important in reducing the impact of online fraud and malicious networks.

Official source: INTERPOL — Cybercrime crackdown in Africa nets 1,462 arrests and recovers over USD 105 million

Additional source: Group-IB — Operation Serengeti III