Interpol says nearly 11,000 malicious cybercrime networks and infrastructure have been dismantled in a major operation across Africa. Operation Serengeti III ran from 29 June to 31 August 2026, with police and investigators from 21 countries taking part. The effort produced 1,462 arrests and more than $105 million linked to criminal activity, while authorities identified up to 65,929 victims and put losses linked to the cases at more than $385 million. Investigators targeted groups behind online scams, ransomware attacks and fraud against businesses. The operation also focused on schemes using digital platforms to offer what appeared to be legitimate investment opportunities, including bogus investment and pension schemes in Uganda. In Uganda, police dismantled two internationally operating networks tied to deception through those investment and pension offers. A total of 365 people were arrested. The investigation also went after other fraud, including scams involving mobile loan apps, bogus vehicle imports and cryptocurrency investment schemes. In Angola, authorities located facilities used for illegal cryptocurrency mining. The intervention led to nine arrests and the seizure of more than 2,000 pieces of computer equipment. In Nigeria, a suspect was arrested over a phishing operation and attacks on corporate email accounts. Interpol said the suspect allegedly harvested software login credentials and compiled around 2.1 million email addresses, which could be used for impersonation campaigns and fraudulent messaging at scale or to attempt access to corporate systems. Interpol worked with cybersecurity companies including Team Cymru, Kaspersky, Group-IB and Fortinet. They provided technical intelligence on IP addresses, suspicious domains and servers used to control criminal operations, helping investigators trace infrastructure links and identify suspects. The operation was Serengeti III, the third major Interpol-coordinated operation of its kind in Africa since 2024. In 2025, a previous operation led to 1,209 arrests and the dismantling of 11,432 pieces of malicious infrastructure, with $97.4 million seized, while the 2024 operation resulted in 1,006 arrests, more than 134,089 malicious networks taken down and around $44 million recovered.