Article Details
Scrape Timestamp (UTC): 2025-08-22 14:30:44.865
Source: https://www.theregister.com/2025/08/22/interpol_serengeti_20/
Original Article Text
Click to Toggle View
Interpol bags 1,209 suspects, $97M in cybercrime operation focused on Africa. Crypto mines, BEC scams, fake passports, and a $300M fraud empire allegedly brought down during Serengeti 2.0. Interpol's latest clampdown on cybercrime resulted in 1,209 arrests across the African continent, from ransomware crooks to business email compromise (BEC) scammers, the agency says. Operation Serengeti 2.0 took place between June and August this year, and the global policing coordinator confirmed today that it seized $97.4 million gained from cybercriminal enterprises across the continent. About $37 million was recovered in Angola, where authorities shut down 25 cryptocurrency mining centers allegedly run by 60 Chinese nationals using illegal power stations to validate blockchain transactions. Illegal power station established in Angola to support crypto mining – Credit Interpol Interpol did not explain what it meant by illegal power stations, but these are known to be established in countries without the proper licenses, siphoning power from the national grid to mine cryptocurrency without paying for the substantial resources used to do so. The seized cash in Angola will be redistributed to support power delivery in vulnerable areas, it said. Trickery beats insecurity? Ransomware often makes the headlines for various reasons, be it the large amounts of pilfered data or the exorbitant ransom demands, but according to the FBI, various types of online scams are still more lucrative for cybercriminals. The bureau said last year that annual losses for investment scams alone exceeded $4 billion, whereas ransomware losses were pegged at just $59.6 million. These figures seemed off to us. Considering the huge ransom payments reported by major organizations, and the fact that its own data indicates the average payment was $1.5 million, and that there were 2,825 ransomware cases reported to it that year, these claims did not align. We asked the Feds about this. That's also not considering the number of ransomware cases that go unreported. So, it's worth keeping in mind that the FBI's figures are probably significantly underselling the financial rewards of ransomware. However, with scammers profiting billions of dollars from just one country, there is certainly serious money to be made without the technical skills of ransomware affiliates. However, the assets seized by police pale in comparison to the sums lost by victims of criminal enterprises in Zambia, which Interpol said exceeded $300 million. Local authorities dismantled a large-scale crypto-investment fraud scheme, which claimed around 65,000 victims who were duped into handing over their money via broad advertising campaigns promising large returns. Fifteen people associated with this scheme were arrested, Interpol said, and police seized related domains, mobile numbers, and bank accounts, which contributed to the wider operation's total 11,432 infrastructure takedowns. A separate investigation, also carried out in Zambia with the help of Lusaka's immigration department, led to the disruption of another scam center and suspected human trafficking network. Here, 372 forged passports for seven different countries were also seized. The Register asked Interpol for more information about this suspected human trafficking network, including whether it was connected to the trafficking of people to Southeast Asian scam compounds – another growing trend it has worked in recent years to quash. It responded: "We tend to highlight the most notable cases in our releases, typically those involving major arrests, significant financial losses, or large numbers of victims. '"That said, ransomware, malware, and business email compromise (BEC) cases were definitely a priority in Operation Serengeti 2.0. These were part of the 11,432 malicious network take-downs. Much of the intelligence on command-and-control servers came from our private sector partners, while national authorities decided how best to use that intelligence and where to focus their resources. In most cases, they concentrated on take-downs." Interpol told The Register that, in total, it had made "112 arrests across eight countries specifically linked to BEC schemes, with Zambia, Benin, and Nigeria accounting for about three-quarters of those." Officers in Côte d'Ivoire played a substantial role in Serengeti 2.0's success too, first by arresting a key figure connected to a global inheritance scam that started in Germany. Passports seized by Zambian authorities. Credit Interpol With inheritance scams, cybercriminals reach out to victims claiming that someone has left them a sizable sum of money as an inheritance, and once they've got a victim on their hook, they ask for a payment to release the funds that never existed. Suspected cybercriminals arrested after Angolan authorities dismantle cybercrime compounds. Credit Interpol This operation racked up losses of around $1.6 million, but police recovered various assets such as electronics, jewelry, cash, vehicles, and other documents. Valdecy Urquiza, secretary general at Interpol, said: "Each Interpol-coordinated operation builds on the last, deepening cooperation, increasing information sharing, and developing investigative skills across member countries. "With more contributions and shared expertise, the results keep growing in scale and impact. This global network is stronger than ever, delivering real outcomes and safeguarding victims."
Daily Brief Summary
Interpol's Serengeti 2.0 operation led to the arrest of 1,209 individuals across Africa, targeting cybercriminals involved in ransomware, BEC scams, and cryptocurrency fraud.
The operation, conducted between June and August, resulted in the seizure of $97.4 million from criminal enterprises, with significant recoveries in Angola and Zambia.
Authorities in Angola dismantled 25 illegal cryptocurrency mining centers, recovering $37 million, which will be used to improve power delivery in vulnerable regions.
In Zambia, a large-scale crypto-investment fraud scheme was dismantled, affecting 65,000 victims and resulting in the arrest of 15 individuals and the seizure of related infrastructure.
The operation included 11,432 takedowns of malicious networks, supported by intelligence from private sector partners and focused on dismantling command-and-control servers.
Interpol's coordinated efforts highlight the importance of international collaboration and information sharing in combating cybercrime and protecting victims globally.
The operation underscores the ongoing threat of online scams, which continue to generate significant financial losses despite the technical complexity of ransomware attacks.