- INTERPOL said law enforcement agencies from 21 countries arrested 1,462 suspects and disrupted 10,909 malicious networks.
- INTERPOL said authorities identified 65,929 victims and linked the criminal activity to losses exceeding USD 385 million.
- INTERPOL said the operation ran from 29 June to 31 August 2026 against cyber-enabled fraud, ransomware, business email compromise, online scams and digital extortion.
Authorities identified 65,929 victims and linked the activity to losses exceeding USD 385 million. The operation targeted cyber-enabled fraud, ransomware, business email compromise, online scams and digital extortion.
INTERPOL said artificial intelligence is increasingly enabling cybercrime activity across Africa as cyber-enabled financial losses continue to rise. Before the operation, investigators received intelligence on suspicious domains, IP addresses and command-and-control infrastructure.
On this page
Uganda arrests 365 foreign nationals in two fraud rings
INTERPOL said authorities in Uganda dismantled two transnational fraud rings and arrested 365 foreign nationals linked to online investment and pension fraud schemes targeting victims across Asia. It said investigators found a rotating call-centre model that used scripted communications, fake trading platforms and fraudulent websites to deceive pensioners.
INTERPOL said investigators in Angola dismantled two cryptocurrency mining centres, arrested nine suspects and seized more than 2,000 mining devices and six illegal power transformation stations. It said the seized electrical infrastructure was valued at more than USD 1 million.
Nigeria case links phishing operation to 2.1 million email addresses
INTERPOL said authorities in Nigeria arrested a suspect behind a phishing and business email compromise operation that harvested software credentials and amassed approximately 2.1 million email addresses. It said investigators also recovered a luxury vehicle suspected to have been purchased with criminal proceeds.
INTERPOL said authorities dismantled a malicious mobile loan application scheme in Tanzania, disrupted a social media-based vehicle import fraud network in Gabon and arrested 30 suspects linked to a cybercrime operation in the Republic of Congo.
What happened
INTERPOL said investigators from 20 African countries and the United States received actionable intelligence on suspicious domains, IP addresses and command-and-control infrastructure before the operation.
INTERPOL said its African Cyber Threat Assessment Report 2026 identified artificial intelligence as an increasing enabler of cybercrime activity across the continent. Hackread said the earlier Operation Serengeti 2.0 in 2025 resulted in 1,209 arrests, the disruption of 11,432 malicious networks and recovery of USD 97.4 million.
INTERPOL said several investigations remain active. Authorities are continuing to identify suspects, trace illicit proceeds and analyze digital evidence seized during the operation.
FAQ
What happened in Operation Serengeti III?
INTERPOL said law enforcement agencies from 21 countries arrested 1,462 suspects, disrupted 10,909 malicious networks and recovered more than USD 105 million.
When did Operation Serengeti III take place?
INTERPOL said investigators conducted the operation between 29 June and 31 August 2026.
What types of cybercrime did Operation Serengeti III target?
INTERPOL said the operation targeted cyber-enabled fraud, ransomware, business email compromise, online scams and digital extortion.
How many victims were identified in Operation Serengeti III?
INTERPOL said authorities identified 65,929 victims, and financial investigations linked the criminal activity to losses exceeding USD 385 million.
Are the Operation Serengeti III investigations finished?
INTERPOL said several investigations remain active while authorities identify additional suspects, trace illicit proceeds and analyze seized digital evidence.
Sources
- Over 200 illegal immigrants arrested in Kampala, Adjumani crackdowns, Uganda Ministry of Internal AffairsPrimary
- Cybercrime crackdown in Africa nets 1,462 arrests, recovers over USD 105 million, INTERPOLPrimary
- Africa cybercrime crackdown nets 1,462 arrests and over $105 million, Help Net Security
- Authorities disrupt nearly 11,000 cybercrime networks in Africa, BleepingComputer
- Operation Serengeti III Nets 1,462 Arrests and $105M in Cybercrime Crackdown, Hackread
How we checked this story
| Claim | Source | Status |
|---|---|---|
| INTERPOL said law enforcement agencies from 21 countries arrested 1,462 suspects, disrupted 10,909 malicious networks and recovered more than USD 105 million. | INTERPOL | Attributed |
| INTERPOL said investigators conducted Operation Serengeti III between 29 June and 31 August 2026 against cyber-enabled fraud, ransomware, BEC, online scams and digital extortion. | INTERPOL | Attributed |
| INTERPOL said authorities identified 65,929 victims and linked the criminal activity to losses exceeding USD 385 million. | INTERPOL | Attributed |
| INTERPOL said artificial intelligence is increasingly enabling cybercrime activity across the continent. | INTERPOL | Attributed |
| INTERPOL said investigators from 20 African countries and the United States received intelligence on suspicious domains, IP addresses and command-and-control infrastructure. | INTERPOL | Attributed |
| INTERPOL said authorities in Uganda dismantled two fraud rings and arrested 365 foreign nationals linked to investment and pension fraud schemes targeting victims across Asia. | INTERPOL | Attributed |
| INTERPOL said Ugandan investigators found a rotating call-centre model using scripts, fake trading platforms and fraudulent websites to deceive pensioners. | INTERPOL | Attributed |
| INTERPOL said Angolan investigators dismantled two illegal cryptocurrency mining centres, arrested nine suspects and seized more than 2,000 mining devices. | INTERPOL | Attributed |
| INTERPOL said the seized electrical infrastructure in Angola was valued at more than USD 1 million. | INTERPOL | Attributed |
| INTERPOL said Nigerian authorities arrested a suspect behind a phishing and BEC operation that harvested software credentials and amassed approximately 2.1 million email addresses. | INTERPOL | Attributed |
| INTERPOL said Nigerian investigators recovered a luxury vehicle suspected to have been purchased with criminal proceeds. | INTERPOL | Attributed |
| INTERPOL said authorities dismantled a malicious mobile loan application scheme in Tanzania, disrupted vehicle import fraud in Gabon and arrested 30 suspects in the Republic of Congo. | INTERPOL | Attributed |
| INTERPOL said several investigations remain active while authorities identify suspects, trace illicit proceeds and analyze seized digital evidence. | INTERPOL | Attributed |
| Team Cymru contributed intelligence on suspicious domains, IP addresses and command-and-control infrastructure. | Team Cymru, via Hackread | Attributed |
| Hackread said operation Serengeti 2.0 in 2025 resulted in 1,209 arrests, the disruption of 11,432 malicious networks and recovery of $97.4 million. | Hackread | Attributed |
| Help Net Security reported that the operation made 1,462 arrests across 21 countries, recovered over $105 million and was linked to losses exceeding $385 million. | Help Net Security | Attributed |
| BleepingComputer reported that authorities disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people. | BleepingComputer | Attributed |
| Uganda’s Ministry of Internal Affairs said an April crackdown recovered computers and IT equipment used for illegal gaming, betting and organized scamming. | Uganda Ministry of Internal Affairs | Attributed |
| Uganda’s ministry said the apartment complex had facilities designed to restrict movement and very strict access and exit. | Uganda Ministry of Internal Affairs | Attributed |
| monitor.co.ug published its report on Apr 28, 2026. | monitor.co.ug | Confirmed |
Could not verify
- Whether any Operation Serengeti III arrests or networks disrupted were linked to exploitation of a specific vulnerability is not established
- Whether the operation led to prosecutions or convictions is not established
- How many victims or losses were attributable to each individual cybercrime network is not established
- Whether the reported arrests in Uganda were part of the same operation is not established
Related stories
AI-Powered AttacksCISA guidance aims to help organizations manage AI token consumption
AI Supply ChainRank Math PRO malware could compromise WordPress sites
Vulns & PatchesSiemens Industrial Edge flaws could expose sensitive information