INTERPOL Dismantles Massive African Cybercrime & Fraud Networks | #cybercrime | #infosec

In a sweeping INTERPOL-coordinated operation, authorities across Africa arrested 1,209 cybercriminals who had targeted nearly 88,000 victims.

The crackdown recovered USD 97.4 million and dismantled 11,432 malicious infrastructures, underscoring the global reach of cybercrime and the urgent need for cross-border cooperation.

Held between June and August 2025, Operation Serengeti 2.0 brought together investigators from 18 African countries and the United Kingdom. The focus was on high-impact cybercrimes such as ransomware, online scams, and business email compromise (BEC)—all identified as top threats in the recent INTERPOL Africa Cyberthreat Assessment Report.

The operation was strengthened by private sector partners who provided intelligence, training, and guidance, helping investigators identify offenders more effectively.

Ahead of the operation, critical intelligence was shared with participating countries, including:

• Suspicious IP addresses
• Malicious domains
• Command-and-control (C2) servers

Investigators also attended workshops covering:

• Open-source intelligence tools
• Cryptocurrency investigations
• Ransomware analysis

This training significantly boosted their ability to detect and dismantle cybercriminal networks.

• 25 cryptocurrency mining centres dismantled.
• 60 Chinese nationals arrested for illegal blockchain validation.
• 45 illicit power stations confiscated, worth USD 37 million, now repurposed to support vulnerable communities.

• Authorities exposed a large-scale investment fraud affecting 65,000 victims who lost USD 300 million.
• 15 suspects arrested, and digital evidence seized (domains, bank accounts, mobile numbers).
• A scam centre was shut down, linked to human trafficking.
• 372 forged passports seized, representing seven countries.

• Authorities dismantled a transnational inheritance scam originating in Germany.
• Primary suspect arrested.
• Assets seized: electronics, jewellery, cash, vehicles, and documents.
• Estimated victim losses: USD 1.6 million.

INTERPOL Secretary General Valdecy Urquiza emphasized the growing impact of international operations, highlighting how cooperation, information sharing, and expertise continue to expand effectiveness.

“Each INTERPOL-coordinated operation builds on the last, deepening cooperation, increasing information sharing and developing investigative skills across member countries. With more contributions and shared expertise, the results keep growing in scale and impact. This global network is stronger than ever, delivering real outcomes and safeguarding victims.”

Additionally, the operation integrated prevention efforts through the International Cyber Offender Prevention Network (InterCOP), a consortium of law enforcement agencies from 36 countries. The initiative, led by the Netherlands, focuses on stopping cybercriminal activity before it occurs.

Operation Serengeti 2.0 was held under the umbrella of the African Joint Operation against Cybercrime, funded by the United Kingdom’s Foreign, Commonwealth and Development Office.

• Cybercrime Atlas
• Fortinet
• Group-IB
• Kaspersky
• The Shadowserver Foundation
• Team Cymru
• Trend Micro
• TRM Labs
• Uppsala Security

Angola, Benin, Cameroon, Chad, Côte D’Ivoire, Democratic Republic of Congo, Gabon, Ghana, Kenya, Mauritius, Nigeria, Rwanda, Senegal, South Africa, Seychelles, Tanzania, United Kingdom, Zambia, Zimbabwe.