Multi-Nation Cyber Sweep Recovers Over $105 Million

A sweeping law enforcement initiative across 21 nations has resulted in the arrest of 1,462 individuals and the recovery of more than $105 million in illicit funds. The joint effort, running from June 29 to August 31, 2026, targeted a range of digital threats, including cryptocurrency laundering, ransomware, digital extortion, and online scams.

Coordinated under the banner of Operation Serengeti III, the task force disrupted 10,909 malicious networks. According to financial investigations associated with the sweep, criminal activities were linked to overall losses exceeding $385 million, impacting 65,929 identified victims. The operation relied on intelligence sharing between authorities from 20 African nations and the United States, targeting malicious infrastructure such as suspicious domains and command-and-control networks.

Digital Asset Scams and Illegal Mining

Cryptocurrency featured heavily in several of the regional busts. In Angola, law enforcement agencies took down a pair of unlawful cryptocurrency mining operations. The raid led to the arrest of nine individuals and the seizure of more than 2,000 crypto mining units. Authorities also confiscated six illegal power transformation stations, noting that the seized electrical equipment alone was worth over $1 million.

Meanwhile, Nigerian investigators arrested a suspect connected to a global investment fraud scheme propagated through messaging applications. Law enforcement traced the movement of more than $2.4 million in suspected illicit funds, discovering that a large portion of the capital was laundered using cryptocurrency transactions. A separate investigation in Nigeria dismantled a massive business email compromise and phishing campaign that had gathered approximately 2.1 million email addresses.

Digital fraud schemes were also intercepted in Uganda, where officials arrested 365 foreign nationals running two transnational fraud syndicates. These groups targeted victims in Asia through a rotating call-center system, utilizing fake trading platforms, fraudulent websites, and scripted interactions to siphon money under the guise of pension and investment opportunities. Further actions included shutting down a mobile loan app scheme in Tanzania, stopping a vehicle import fraud ring in Gabon, and apprehending 30 cybercrime suspects in the Republic of Congo.

AI and Evolving Threats

The initiative was launched against a backdrop of rising digital threats. INTERPOL’s African Cyber Threat Assessment Report 2026 indicated that artificial intelligence is increasingly fueling cybercrime operations across the continent, driving up financial losses.

"Cybercrime networks operate without regard for borders, exploiting technology to target victims on an unprecedented scale," said Neal Jetton, INTERPOL's Director of Cybercrime.

"Operation Serengeti III reinforces a clear message: while cybercrime is increasingly borderless, international cooperation remains one of the most effective tools for disrupting criminal networks, recovering criminal assets and protecting communities from digital harm," Jetton added.

A coalition of private-sector entities, including Team Cymru, Kaspersky, Meta, TrendAI, Fortinet, Group-IB, and Uppsala Security, provided technical analysis and intelligence mapping for the crackdown. Co-funded by the European Union and the Council of Europe through the GLACY-e project, numerous investigations initiated during the operation remain active as authorities continue to trace digital assets and identify additional suspects.