Serengeti III: Interpol reports over $105 million recovered in cybercrime crackdown

The record

A coordinated cybercrime operation involving agencies from 20 African countries and the United States led to 1,462 arrests and the recovery of more than $105 million, Interpol announced on 22 October. Investigators identified 65,929 victims and linked the activity under investigation to losses exceeding $385 million. [1]

The results concern Operation Serengeti III, conducted between 29 June and 31 August 2026. The October announcement reports the outcome of that earlier enforcement period; it is not an account of 1,462 arrests made on a single day. [1]

Following the infrastructure

The operation targeted online fraud, ransomware, business email compromise and digital extortion. Before enforcement began, investigators received intelligence about suspicious domains, internet addresses and command-and-control infrastructure. Interpol reported disruption of 10,909 malicious networks. [1]

Team Cymru, one of the participating private-sector partners, confirmed its involvement in a separate statement. It described infrastructure analysis as a way to connect activity across networks and jurisdictions and help investigators prioritise targets. That statement provides an account of a partner's role; it is not an independent audit of the operation's financial totals. [2]

Different cases, different money trails

In Uganda, authorities dismantled two alleged transnational fraud rings and arrested 365 foreign nationals in investigations involving online investment and pension scams targeting people in Asia. In Angola, investigators shut down two illegal cryptocurrency-mining centres and seized more than 2,000 mining devices, according to the operational accounts. [1][2]

These examples show why the announcement should be read as an aggregation of national investigations. Equipment seizures, alleged investor losses and recovered funds describe different financial events. They should not be added together as though they were a single pot of stolen money.

Recovery is not the same as restitution

The announcement does not provide a country-by-country breakdown of the $105 million-plus recovery or specify how much has been returned to victims. It also does not establish that every recovered dollar corresponds to the same population or period covered by the $385 million-plus loss estimate. A victim-repayment rate cannot therefore be derived reliably from those two headline figures. [1]

Arrests were made by national authorities under their own laws; Interpol's role was coordination and investigative support. Several investigations remain active. The next material question is how the recovered funds move through national proceedings and whether they reach victims. [1][3]

Based on reporting from: INTERPOL — Operation Serengeti III results, 22 October 2026; Team Cymru — statement on its participation, 22 October 2026; INTERPOL — Information for journalists; Photo source — The National Archives (UK) / Wikimedia Commons — CC BY 3.0; Photo licence — CC BY 3.0.