Interpol Recovers $105M in African Cybercrime Sweep That Shut Illegal Crypto Mines
Interpol's Operation Serengeti III, involving 21 countries, led to 1,462 arrests and the recovery of over $105 million in illicit funds from cybercrime in Africa. The sweep also shut down illegal crypto mining centers in Angola and traced laundered crypto proceeds in Nige…
Intelligence analysis by Gemini 2.5 Flash

A major Interpol-coordinated cybercrime crackdown across 21 African nations, dubbed Operation Serengeti III, successfully disrupted thousands of malicious networks and recovered significant illicit funds. The operation specifically targeted ransomware, online scams, and digital extortion, uncovering instances of illegal crypto mining and the use of cryptocurrency for money laundering,…
Imagine a global police team, like the Avengers but for digital bad guys, who just finished a big mission in Africa. They caught over a thousand criminals who were tricking people online and stealing money. They even found secret factories where people were making digital money illegally, using stolen electricity, and stopped them. It's like catching robbers who use a special kind of digital cash to hide their loot, making the internet a bit safer for everyone.
Analysis
Operation Serengeti III
Operation Serengeti III represents a significant international law enforcement effort against cybercrime across the African continent. Coordinated by Interpol, this extensive sweep involved police forces from 21 countries, leading to a substantial number of arrests and the disruption of numerous malicious networks. The operation's success in recovering over $105 million in illicit funds highlights the scale of financial crime being perpetrated through digital means.
The initiative, which ran from late June to late August 2026, targeted a broad spectrum of cyber-enabled fraud, including ransomware, online scams, business email compromise, and digital extortion. Authorities identified nearly 66,000 victims, with financial investigations linking the criminal networks to estimated losses exceeding $385 million. This demonstrates the pervasive impact of cybercrime on individuals and businesses globally, necessitating coordinated international responses.
Angola
In Angola, Operation Serengeti III achieved a notable success by dismantling two illegal cryptocurrency mining centers. This specific action led to the arrest of nine individuals and the seizure of more than 2,000 mining devices, alongside six illegal power transformation stations. The value of the seized electrical equipment alone was estimated at over $1 million, indicating a sophisticated and well-resourced illicit operation.
The shutdown of these mining centers highlights a particular facet of crypto-related crime: the illegal acquisition of resources, primarily electricity, to generate digital assets. Such operations not only facilitate illicit financial gains but also place undue strain on national infrastructure and often operate outside regulatory frameworks, posing environmental and economic challenges. The focus on these physical sites demonstrates a broadening scope of cybercrime enforcement beyond purely digital investigations.
Nigeria
Nigeria featured prominently in the operation, with authorities making a key arrest related to an international investment fraud scheme. This particular scheme was promoted through messaging applications, showcasing how criminals leverage popular communication platforms to ensnare victims. Investigators successfully traced over $2.4 million in suspected criminal proceeds, a significant portion of which was laundered through cryptocurrency transactions.
This case from Nigeria underscores the persistent challenge of money laundering using digital currencies. While cryptocurrencies offer transparency on the blockchain, criminals employ various techniques to obscure the origins and destinations of funds, making tracing and recovery complex. The involvement of private-sector partners, including blockchain analytics firms like Uppsala Security, was crucial in following these digital trails and linking them back to the perpetrators.
Key points
- Interpol's Operation Serengeti III involved 21 African countries, leading to 1,462 arrests.
- The operation recovered over $105 million in illicit funds and disrupted 10,909 malicious networks.
- Illegal crypto mining centers were shut down in Angola, with over 2,000 devices seized.
- In Nigeria, over $2.4 million in investment fraud proceeds, largely laundered via crypto, was traced.
- The operation targeted ransomware, online scams, business email compromise, and digital extortion.
This large-scale operation demonstrates the growing capability and commitment of international law enforcement to combat cybercrime, including its crypto-related facets. Increased cooperation and the use of advanced analytics could lead to a safer digital environment and deter criminals from using cryptocurrencies for illicit activities, fostering greater trust in the legitimate crypto ecosystem.
Despite the significant recovery and arrests, the estimated losses linked to these networks were far higher, indicating that a substantial amount of illicit funds remains unrecovered. The constant evolution of cybercrime tactics and the adaptability of criminals mean that law enforcement faces an ongoing, uphill battle, requiring continuous resource allocation and technological advancements to keep pace.



