Interpol-led operation Serengeti III Nets 1,462 suspects, Recovers $105 million in African cybercrime Sweep

Illegal crypto mines shut down in Angola; fraud rings targeting Asian pensioners dismantled in Uganda

By LineZotpaper

Published23 October 2026

Read Time2 min

Sources2 outlets

Interpol announced Thursday that Operation Serengeti III, a coordinated cybercrime crackdown across 21 African countries from June to August, resulted in 1,462 arrests and the recovery of more than $105 million in illicit funds. Authorities disrupted 10,909 malicious networks and identified 65,929 victims linked to losses exceeding $385 million.

Law enforcement agencies from 21 African countries participated in Operation Serengeti III, which ran from June 29 to August 31, 2026, targeting ransomware, online scams, business email compromise, digital extortion and other cyber-enabled fraud, Interpol said.

In Angola, investigators dismantled two illegal crypto mining centers, arresting nine people and seizing more than 2,000 mining devices along with six illegal power transformation stations. The electrical equipment alone was valued at over $1 million.

In Nigeria, a suspect was arrested over an international investment fraud scheme promoted through messaging apps. Investigators traced more than $2.4 million in suspected criminal proceeds, much of which was laundered through crypto transactions. Another Nigerian suspect was arrested for running a phishing and business email compromise operation that collected around 2.1 million email addresses.

Ugandan authorities dismantled two transnational fraud rings and arrested 365 foreign nationals linked to online investment and pension scams aimed at victims in Asia. The rings operated a rotating call-center model using scripts, fake trading platforms and fraudulent websites to convince pensioners to invest in nonexistent opportunities.

Another 30 suspects were arrested in connection with a cybercrime operation in the Republic of Congo.

"Cybercrime networks operate without regard for borders, exploiting technology to target victims on an unprecedented scale," said Neal Jetton, Interpol's director of cybercrime.

Private-sector partners including Group-IB, Kaspersky, blockchain analytics firm Uppsala Security and Meta supported the operation. Interpol said several investigations remain active as authorities work to identify more suspects and trace illicit proceeds.

The operation follows Operation Catalyst, a joint Interpol and Afripol crackdown on terrorist financing and cybercrime in 2025 that saw 83 people arrested across six African countries and flagged $260 million in illicit crypto and fiat.

Analysis

Why This Matters

The operation demonstrates growing international cooperation to combat cybercrime in Africa, where digital financial fraud is increasingly sophisticated.
Crypto mining and cryptocurrency laundering are emerging as significant vectors for illicit finance in the region, prompting targeted enforcement.
The scale of victim identification (over 65,000) and losses ($385 million) underscores the real-world impact of these crimes on individuals and economies.

Background

Operation Serengeti III is the latest in a series of Interpol-backed initiatives targeting cyber-enabled crime in Africa. A prior operation, Operation Catalyst run jointly with Afripol in 2025, resulted in 83 arrests and flagged $260 million in potentially illicit funds. Cybercriminals in Africa have been observed increasingly using cryptocurrency for money laundering and investment fraud, though traditional fiat channels still dominate most proceeds.

Key Perspectives

Interpol: The organization positions the operation as a success in cross-border policing, with the recovery of over $105 million and the dismantling of major fraud networks. Director Neal Jetton highlighted the borderless nature of the threat. Private sector partners: Companies like Group-IB, Kaspersky and Uppsala Security provided technical expertise in threat intelligence, blockchain analytics and investigative support, reflecting the growing role of commercial firms in law enforcement. Critics and skeptics: The operation's long-term deterrence effect remains uncertain. Cybercriminal networks are adaptable, and the recovery of $105 million is only a fraction of the estimated $385 million in losses, suggesting many illicit flows remain undetected.

What to Watch

Whether ongoing investigations lead to further arrests or the identification of high-value targets behind the fraud rings.
How effectively authorities can trace and freeze additional cryptocurrency wallets linked to the networks.
The potential for similar coordinated operations to expand into other regions or target new types of cybercrime.

Sources

Authorities disrupt nearly 11,000 cybercrime networks in Africa · BleepingComputer
Interpol Recovers $105M in African Cybercrime Sweep That Shut Illegal Crypto Mines · Decrypt

Checked

12 claims in this story checked against 1 source: 11 supported.

Show each claim

SupportedOperation Serengeti III resulted in 1,462 arrests.Decrypt: “Law enforcement agencies from 21 countries arrested 1,462 suspects”
SupportedThe operation recovered more than $105 million in illicit funds.Decrypt: “recovered more than $$105 million in illicit funds”
SupportedThe operation disrupted 10,909 malicious networks.Decrypt: “disrupted 10,909 malicious networks”
SupportedAuthorities identified 65,929 victims.Decrypt: “Authorities identified 65,929 victims”
SupportedFinancial investigations linked the networks to losses exceeding $385 million.Decrypt: “financial investigations linked the networks to losses of more than $385 million”
SupportedOperation Serengeti III ran from June 29 to August 31, 2026, across 21 African countries.Decrypt: “Law enforcement agencies from 21 countries arrested 1,462 suspects ... Operation Serengeti III ran from June 29 to August 31, 2026”
SupportedNeal Jetton said, “Cybercrime networks operate without regard for borders, exploiting technology to target victims on an unprecedented scale.”Decrypt: “"Cybercrime networks operate without regard for borders, exploiting technology to target victims on an unprecedented scale," said Neal Jetton, Interpol's director of cybercrime.”
SupportedAngolan investigators dismantled two illegal crypto-mining centres.Decrypt: “In Angola, investigators dismantled two illegal crypto mining centers”
SupportedUgandan authorities arrested 365 foreign nationals linked to online investment and pension scams aimed at victims in Asia.Decrypt: “Ugandan authorities dismantled two transnational fraud rings and arrested 365 foreign nationals linked to online investment and pension scams aimed at victims in Asia.”
SupportedIn Nigeria, investigators traced more than $2.4 million in suspected criminal proceeds, much of it laundered through crypto transactions.Decrypt: “Investigators traced more than $2.4 million in suspected criminal proceeds, much of which was laundered through crypto transactions.”
Not in the sourcesOperation Catalyst saw 83 people arrested across six African countries in 2025.Decrypt: “The operation follows Operation Catalyst, a joint Interpol and Afripol crackdown on terrorist financing and cybercrime in which authorities 83 people across six African countries in 2025.”
SupportedOperation Catalyst flagged $260 million in illicit crypto and fiat.Decrypt: “That operation flagged $260 million in illicit crypto and fiat”