INTERPOL’s Operation Serengeti III, supported by Group-IB, has led to 1,462 arrests and the recovery of more than USD 105 million in illicit funds. The multinational operation ran from June 29 to August 31, 2026, and involved law-enforcement agencies from 21 countries targeting cyber-enabled fraud, ransomware, business email compromise, online scams and digital extortion. Authorities identified 65,929 victims, and financial investigations linked criminal activity to losses exceeding USD 385 million. Group-IB supplied threat intelligence data on malicious infrastructure used across Africa, including phishing kits, botnets and other resources. The company also shared intelligence on threat actors involved in fraudulent activity, including identified social media accounts linked to suspected fraudsters. Operations included major takedowns in multiple African countries. In Uganda, authorities dismantled two transnational fraud rings and arrested 365 foreign nationals tied to online investment and pension fraud schemes. Investigators described a rotating call-center model with scripted communications, fraudulent trading platforms and fake websites. In Angola, law-enforcement agencies dismantled two illegal cryptocurrency mining centers, arresting nine suspects and seizing more than 2,000 cryptocurrency mining devices. They also seized six illegal power transformation stations, valued at more than USD 1 million. In Nigeria, a suspect linked to a large-scale phishing and business email compromise operation was arrested. Investigators said the operation collected about 2.1 million email addresses and harvested software credentials. A separate Nigeria investigation targeted an international investment fraud scheme promoted through messaging applications, uncovering the movement of more than USD 2.4 million in suspected criminal proceeds, with much of it laundered through cryptocurrency transactions. Elsewhere, authorities dismantled a malicious mobile loan application scheme in Tanzania, disrupted a social media-based vehicle import fraud network in Gabon, and arrested 30 suspects linked to a cybercrime operation in the Republic of Congo. Several investigations remain ongoing as authorities identify suspects and trace illicit proceeds and digital evidence. legal status: Investigation