Authorities disrupt nearly 11,000 cybercrime networks in Africa
Operation Serengeti III, coordinated by Interpol, has disrupted nearly 11,000 cybercrime networks across Africa, leading to 1,462 arrests and the recovery of over $105 million. The operation targeted various cybercrimes including BEC, ransomware, and online scams.
Intelligence analysis by Gemini 2.5 Flash Lite

Interpol's Operation Serengeti III, a multi-national effort involving 21 African countries and private cybersecurity firms, has successfully dismantled a vast number of cybercriminal networks. The operation resulted in significant arrests and the recovery of substantial funds, highlighting a concerted push against cyber threats on the continent.
Imagine a big police operation across many African countries, like a detective team working together. They found and shut down almost 11,000 secret online hideouts used by bad guys who steal money and information. They also caught over 1,400 of these criminals and got back over $105 million that was stolen, which is like finding a lot of lost treasure!
Analysis
Operation Serengeti III
Operation Serengeti III represents a significant, coordinated international effort to combat the burgeoning cybercrime problem across the African continent. Spanning from late June to the end of August, this initiative saw law enforcement agencies from 21 countries collaborate with private cybersecurity partners such as Team Cymru, Kaspersky, Group-IB, and Fortinet. The operation's scope was broad, focusing on prevalent cyber threats including Business Email Compromise (BEC) schemes, ransomware attacks, and various forms of online scams. The tangible results are substantial: nearly 11,000 malicious networks were dismantled, and 1,462 suspected cybercriminals were apprehended. This success is further underscored by the recovery of over $105 million in illicit funds, though the estimated total financial losses to victims reached a staggering $385 million, indicating the scale of the ongoing challenge.
Uganda and Angola Highlights
Specific successes within Operation Serengeti III highlight the diverse nature of cybercrime in Africa. In Uganda, authorities successfully dismantled two transnational fraud rings, leading to the arrest of 365 individuals implicated in online investment and pension fraud. This operation targeted sophisticated schemes designed to defraud citizens of their savings and retirement funds. Meanwhile, in Angola, the focus shifted to the exploitation of cryptocurrency, with law enforcement shutting down illegal cryptocurrency mining centers. Nine suspects were arrested in this crackdown, and over 2,000 mining devices were seized, disrupting operations that likely leveraged illicitly obtained electricity or resources.
Phishing and Mobile Lending Scams
The operation also made significant inroads against phishing and Business Email Compromise (BEC) operations. In Nigeria, one individual was arrested for allegedly running a large-scale phishing and BEC operation that compromised software credentials and amassed approximately 2.1 million email addresses. This highlights the persistent threat of credential harvesting, which often serves as a gateway for more extensive network intrusions. Furthermore, Interpol noted that Operation Serengeti III's actions extended to impacting malicious mobile lending applications, fraudulent vehicle import schemes, and cryptocurrency investment scams. The involvement of private partners like Team Cymru, providing crucial intelligence on suspicious domains and infrastructure, was instrumental in mapping these complex criminal networks and enabling effective law enforcement action.
Key points
- Interpol's Operation Serengeti III disrupted nearly 11,000 cybercrime networks across Africa.
- The operation resulted in 1,462 arrests and the recovery of over $105 million in illicit funds.
- Key targets included Business Email Compromise (BEC), ransomware, online scams, and illegal cryptocurrency mining.
- Authorities in Uganda dismantled fraud rings, while Angola targeted illegal crypto mining operations.
- Private cybersecurity firms provided crucial intelligence and technical support to law enforcement agencies.
The success of Operation Serengeti III could deter future cybercriminal activities in Africa by demonstrating a strong, coordinated international response. It may encourage more African nations to bolster their cybersecurity infrastructure and foster greater collaboration with international law enforcement agencies, leading to a more secure digital environment on the continent.
Despite the disruption, the sheer scale of estimated financial losses ($385 million) indicates that cybercrime remains a pervasive and lucrative enterprise in Africa. The arrested individuals may be replaced by new actors, and the underlying vulnerabilities exploited by these networks might persist, requiring continuous and evolving efforts to combat them effectively.



