An INTERPOL-led operation has arrested 1,209 cybercriminals across Africa in a major crackdown, recovering USD 97.4 million targeted at nearly 88,000 victims.
The three-month operation, dubbed Operation Serengeti 2.0, ran from June to August 2025 and dismantled 11,432 malicious infrastructures linked to ransomware, online scams and business email compromise (BEC).
It follows Operation Serengeti 1.0, which recorded 1,006 arrests, 134,089 network takedowns and USD 190 million in recovered funds.
The latest operation brought together investigators from 18 African countries and the United Kingdom, highlighting growing international collaboration against cybercrime.
Private sector partners supplied critical intelligence including suspicious IP addresses, domain data and command-and-control servers, enabling precise enforcement actions before and during the raids.
Major Takedowns
- Angola: Authorities shut down 25 illegal cryptocurrency mining centres run by 60 Chinese nationals and seized 45 illicit power stations valued at over USD 37 million. The assets will be used to boost national power distribution.
- Zambia: A large-scale investment fraud scheme affecting 65,000 victims was dismantled, with losses estimated at USD 300 million. Fifteen suspects were arrested, and investigators seized domains, bank accounts and mobile numbers tied to the scheme. In a separate action, authorities disrupted a human trafficking ring, confiscating 372 forged passports from seven nations.
- Côte d’Ivoire: Law enforcement dismantled a transnational inheritance scam linked to Germany, arresting the ringleader and seizing cash, electronics and vehicles worth USD 1.6 million.
Building Capacity and Partnerships
Before the crackdown, investigators participated in specialized training workshops on open-source intelligence, cryptocurrency investigations and ransomware analysis.
The operation was conducted under the African Joint Operation against Cybercrime, funded by the United Kingdom’s Foreign, Commonwealth and Development Office, with support from partners including Cybercrime Atlas, Fortinet, Group-IB, Kaspersky, The Shadowserver Foundation, Team Cymru, Trend Micro, TRM Labs and Uppsala Security.
“Each INTERPOL-coordinated operation builds on the last, deepening cooperation and developing investigative skills across member countries. This global network is stronger than ever, delivering real outcomes and safeguarding victims,” said Valdecy Urquiza, INTERPOL Secretary General.
About Author
