Operation Serengeti III marks a new stage in the fight against cybercrime in Africa. Coordinated by Interpol, this international campaign led to 1,462 arrests and enabled the recovery of over
Operation Serengeti III marks a new stage in the fight against cybercrime in Africa. Coordinated by Interpol, this international campaign led to 1,462 arrests and enabled the recovery of over 105 million dollars. In Nigeria, an investigation notably revealed the use of crypto transactions to launder part of the funds stemming from an investment scam. Authorities also targeted fraudulent networks and illegal mining facilities.
Operation Serengeti III took place from June 29 to August 31, with the participation of law enforcement from 20 African countries and the United States. Interpol announced the results on October 22, after several weeks of coordinated investigations. Authorities targeted various forms of digital crime, including online fraud, extortion, ransomware, and attacks targeting professional communications.
In total, investigations established a link between these activities and losses exceeding 385 million dollars. Investigators recorded 65,929 victims across the cases examined. Simultaneously, operations recovered well over 105 million dollars and dismantled 10,909 malicious networks. These results illustrate the scale of criminal activities that authorities seek to combat.
Interpol’s head of cybercrime fighting services, Neal Jetton, emphasized the international dimension of this threat.
Cybercrime networks operate without regard for borders, exploiting technology to target victims on an unprecedented scale.
Neal Jetton, head of Interpol’s cybercrime fighting services. Source: Interpol press release.
According to him, criminal networks exploit technologies to reach their victims regardless of borders. This reality complicates the investigators’ work, who must trace financial flows, identify perpetrators, and gather digital evidence from several territories.
Start your crypto adventure safely with MEXCThis link uses an affiliate program.In Nigeria, an investigation traced over 2.4 million dollars, presumably from criminal activities. The funds originated from an international investment scam, organized notably through messaging applications. A suspect was arrested in this case. Investigations later revealed that a large part of the money passed through crypto transactions.
This discovery shows how digital payments can be involved in financial circuits linked to scams. Investigators sought to track fund movements to understand their origin and destination. However, the information provided does not specify the platforms used or the digital assets involved. Therefore, it does not allow for a precise determination of how the suspects transferred or converted the sums in question.
The Nigerian case is part of a broader set of scams targeting victims beyond national borders. Scammers use digital services to contact their targets and present false investment opportunities. In this context, transaction tracking is an important element of financial investigations. Authorities must correlate digital data, fund movements, and other collected evidence to establish responsibilities.
Cybersecurity company Group-IB also supported investigators by providing intelligence on malicious infrastructures and suspected fraudsters. This information included data on tools used to steal sensitive information, networks of compromised devices, and social accounts linked to suspicious activities. This cooperation between cybersecurity experts and law enforcement helps investigators better understand methods employed by criminal networks.
In Uganda, authorities dismantled two transnational fraud networks and arrested 365 foreign nationals. These groups targeted victims in Asia, using prerecorded calls, fake trading platforms, and fraudulent websites. Their goal was to convince retirees to invest in non-existent opportunities. This case illustrates scammers’ ability to organize activities in one country while targeting victims elsewhere.
In Nigeria, another investigation concerned a suspect involved in phishing and compromising professional messaging systems. This person allegedly obtained software credentials and accumulated about 2.1 million email addresses. Authorities also seized a luxury vehicle suspected to have been purchased with criminal proceeds. These elements should help investigators reconstruct the suspect’s activities and trace the funds involved.
Other interventions targeted malicious mobile loan applications in Tanzania and vehicle import fraud in Gabon. In the Republic of Congo, authorities arrested 30 suspects. Several investigations remain open, while relevant services continue analyzing seized digital evidence. They also seek to identify possible accomplices and recover sums from the alleged activities. These efforts may clarify the scope of networks and their financial connections.
In Angola, authorities arrested nine suspects and discovered two illegal crypto mining centers. Investigators seized more than 2,000 devices used for this activity. They also confiscated six illegally installed electrical transformation stations. This equipment, used to modify electrical voltage for distribution, alone represented a value exceeding one million dollars.
This operation fits into a policy to restrict mining begun before Operation Serengeti III. In December 2023, the Angolan National Assembly had approved measures targeting this activity. Authorities cited energy security, environmental concerns, and monetary sovereignty. The ban came into effect in 2024, thus limiting mining activities in the country.
After this decision, the Chinese Embassy in Angola advised Chinese nationals and institutions to respect local rules. It also warned against offers related to virtual currencies that promise quick enrichment or guaranteed returns. This warning highlights risks associated with deceptive financial proposals in a context where authorities seek to better regulate activities linked to digital assets.
Operation Serengeti 2.0, conducted separately in 2025, had already led to the dismantling of 25 mining centers in Angola. Authorities then seized 45 illegal power plants as well as computer and mining equipment valued at over 37 million dollars. The new seizures show that controls continue despite previous measures. They also place electricity consumption at the center of efforts against illegal mining.
The next steps will depend on the continuation of investigations and authorities’ capacity to trace suspicious funds. In Africa, the fight against cybercrime will notably require international cooperation, financial analysis, and control of illegal infrastructures. Tracking crypto transactions will remain an important focus when investigators suspect their use in laundering circuits. Outcomes of ongoing procedures will help clarify responsibilities and amounts likely to be recovered.
