What Happened
On October 22, 2026, INTERPOL announced outcomes from Operation Serengeti III, a multi-country campaign against cyber-enabled fraud, ransomware, business email compromise, online scams and digital extortion. Investigators from 21 participating countries operated between June 29 and August 31. INTERPOL reported 1,462 arrests, disruption of 10,909 malicious networks and recovery of more than US$105 million. The operation identified 65,929 victims and financial investigations connected criminal activity to losses exceeding US$385 million.
Examples From The Operation
INTERPOL said Ugandan authorities dismantled two cross-border online investment and pension fraud groups and arrested 365 foreign nationals. Officials described scripted call-centre approaches and fake trading platforms used to persuade victims to transfer money. Nigerian investigations involved phishing and business-email-compromise activity, including a case connected to about 2.1 million harvested email addresses. Other operations targeted malicious loan applications and online marketplace-related fraud. Some investigations remain active.
What The Numbers Mean
Arrest totals, victim counts and recovered funds are operational figures published by INTERPOL. They should not be confused with convictions, complete recovery of losses or proof that every accused person has been found guilty. The campaign's geographic scope illustrates how digital fraud operations can recruit people, move payments and target victims across multiple countries.
Why It Matters Internationally
Business email compromise and online investment scams rely on familiar weaknesses: convincing impersonation, payment redirection, fake investment interfaces and compromised communications. Their victims are not restricted to one territory. Organisations should treat unusual changes in payment instructions as an investigation trigger and verify requests using a separately established communication channel.
Protective Measures
Use strong authentication on business email, require dual authorisation for high-value payments and maintain an out-of-band verification procedure for bank-detail changes. Consumers should independently check financial-service registration and avoid sending funds on the strength of unsolicited messages or promises of guaranteed profits. Preserve evidence and notify the relevant law-enforcement and financial institutions if fraud is suspected.
Source And Limitations
This report summarises INTERPOL's October 22 operation announcement. Individual cases may continue through judicial processes, and the reported recovery and disruption figures are not an assurance that cybercrime activity has stopped.