Interpol said a multinational operation targeting cybercrime in Africa led to 1,462 arrests, the disruption of 10,909 malicious networks and the recovery of more than $105 million.
Operation targets scams and cyber-enabled fraud
Operation Serengeti III ran from June 29 through August 31, 2026, with police agencies from 21 countries taking part. The operation focused on ransomware, online scams, business email compromise, digital extortion and other forms of fraud carried out or enabled through digital networks.
According to Decrypt, investigators identified 65,929 victims and connected the criminal networks to losses exceeding $385 million. The figures cover suspected activity uncovered during the operation, while several investigations remain open as authorities continue looking for additional suspects and tracing proceeds.
Interpol said the operation recovered more than $105 million in illicit funds. Private-sector partners supporting the investigation included cybersecurity companies Group-IB and Kaspersky, blockchain analytics firm Uppsala Security and Meta.
Interpol’s director of cybercrime, Neal Jetton, said criminal networks were operating across borders and using technology to reach victims on an unprecedented scale. The multinational structure of the operation reflects the difficulty of investigating schemes whose victims, operators and financial transactions can be spread across several countries.
Illegal crypto mining centers shut in Angola
In Angola, authorities dismantled two illegal cryptocurrency mining centers and arrested nine people. Investigators seized more than 2,000 mining devices and six illegal power transformation stations.
Interpol said the electrical equipment alone was worth more than $1 million. Crypto mining uses specialized computing equipment and substantial electricity, making the seizure relevant not only to the suspected illegal activity but also to the infrastructure supporting it.
The Angolan action was one part of a broader operation that included online fraud and financial investigations in other countries. It also illustrates that the crackdown covered physical facilities, not only digital networks and financial transfers.
Fraud proceeds traced through crypto transactions
Nigerian authorities arrested a suspect linked to an international investment fraud scheme promoted through messaging applications. Investigators traced more than $2.4 million in suspected criminal proceeds, with much of the money allegedly laundered through cryptocurrency transactions.
Ugandan authorities, meanwhile, dismantled two transnational fraud rings and arrested 365 foreign nationals. The groups allegedly targeted victims in Asia with online investment and pension scams, using rotating call centers, scripts, fake trading platforms and fraudulent websites to persuade pensioners to invest in nonexistent opportunities.
Other cases included a Nigerian suspect accused of operating a phishing and business email compromise scheme that collected about 2.1 million email addresses. In the Republic of Congo, 30 people were arrested in connection with a cybercrime operation.
Market picture
Moneyiar market data at 08:13-08:14 on October 24, 2026, showed declines among the tracked crypto assets. Cronos (CRO) was priced at $0.0547993323, down 4.13% over 24 hours and 5.08% over seven days. Polygon (prev. MATIC), now listed as POL, stood at $0.0895303415, down 2.6% in 24 hours and 4.52% over seven days. Sei (SEI) traded at $0.0548720686, down 6.4% over 24 hours and 13.58% over seven days.
The operation follows Operation Catalyst, an Interpol and Afripol initiative in 2025 that arrested 83 people across six African countries and flagged $260 million in illicit cryptocurrency and fiat currency. Interpol said $600,000 was seized in that operation and identified several high-value wallets potentially linked to terrorist financing. An Interpol expert previously said crypto use by criminals in Africa was increasing, although it was not yet the primary method for most cybercrime proceeds.
