Interpol’s Serengeti 2.0: 1,200 Arrests, $97M Recovered in Cyber Bust

Interpol's Operation Serengeti 2.0 arrested over 1,200 suspects, recovered $97.4 million, and shut down 11,432 malicious infrastructures across 18 African nations and the UK. Targeting ransomware and scams affecting 88,000 victims, it highlights escalating cyber threats and the need for sustained international collaboration.
Interpol’s Serengeti 2.0: 1,200 Arrests, $97M Recovered in Cyber Bust
Written by Mike Johnson

In a landmark crackdown that underscores the escalating battle against digital threats in Africa, international law enforcement agencies have dismantled vast cybercrime networks, arresting over 1,200 suspects and recovering nearly $100 million in illicit funds. Coordinated by Interpol, Operation Serengeti 2.0 spanned from June to August 2025, involving 18 African nations and the United Kingdom in a concerted effort to target ransomware, online scams, and business email compromise schemes that have plagued the continent.

The operation’s scale was unprecedented, with authorities identifying nearly 88,000 victims and shutting down 11,432 malicious infrastructures, including servers and phishing sites. According to details from Interpol’s official announcement, the recovered sum of $97.4 million highlights the financial devastation wrought by these crimes, often perpetrated through sophisticated tactics like cryptocurrency fraud and illegal mining operations.

Escalating Threats and Regional Vulnerabilities

This surge in cybercrime aligns with findings from Interpol’s 2025 Africa Cyberthreat Assessment Report, which warned that cyber-related offenses now constitute over 30% of reported crimes in Western and Eastern Africa. The report, as detailed in a June 2025 publication on Interpol’s site, identifies online scams via phishing, ransomware attacks, and digital sextortion as the most prevalent threats, with 90% of surveyed African countries admitting significant gaps in law enforcement and prosecution capabilities.

Industry insiders note that these vulnerabilities stem from rapid digital adoption without commensurate security infrastructure. For instance, posts on X from users like BitKE emphasized the operation’s focus on cryptocurrency-related fraud, where suspects exploited volatile digital assets to launder money, a tactic that has evolved from earlier schemes documented in Interpol’s 2024 assessments.

Collaborative Efforts and Private Sector Role

What set Serengeti 2.0 apart was its integration of private sector expertise, with companies providing intelligence and training to bolster investigations. This collaboration, as reported in Infosecurity Magazine, enabled the takedown of networks responsible for $485 million in global losses, including those linked to illegal crypto mining in countries like Angola, which has strained regional power grids.

The operation built on the success of its predecessor, the original Serengeti in 2024, which netted over 1,000 arrests and disrupted infrastructures targeting 35,000 victims. A San Diego Union-Tribune article from August 22, 2025, highlights how this iteration expanded to address emerging threats like inheritance scams and fraudulent investments, with arrests spanning from Zambia to Zimbabwe.

Global Implications for Cyber Defense

For cybersecurity professionals, the operation reveals critical insights into the transnational nature of these crimes, often orchestrated by groups with ties to West African syndicates like Black Axe, as referenced in historical X posts from Sahara Reporters dating back to 2022. The involvement of Chinese nationals in some networks, noted in recent X discussions by AVSEC Pro, points to the need for broader international protocols.

Yet, challenges persist: many African nations lack the forensic tools to prosecute complex cases, leading to calls for enhanced capacity building. As Cybernews reported on August 22, 2025, the operation’s success recovered funds but also exposed how cybercriminals adapt quickly, shifting to decentralized finance platforms.

Looking Ahead: Sustaining Momentum

Experts argue that while Serengeti 2.0 marks a victory, sustained investment in technology and cross-border alliances is essential. Interpol’s partnerships with AfrIPOL and entities like the UK’s National Crime Agency could serve as models for future initiatives, potentially integrating AI-driven threat detection to preempt attacks.

Ultimately, this operation not only disrupts immediate threats but signals a maturing response to cybercrime in Africa, where economic growth increasingly hinges on secure digital ecosystems. As one insider told African Law & Business in June 2025, the real measure of success will be in preventing the next wave of sophisticated exploits.

Subscribe for Updates

CybersecurityUpdate Newsletter

The CybersecurityUpdate Email Newsletter is your essential source for the latest in cybersecurity news, threat intelligence, and risk management strategies. Perfect for IT security professionals and business leaders focused on protecting their organizations.

By signing up for our newsletter you agree to receive content related to ientry.com / webpronews.com and our affiliate partners. For additional information refer to our terms of service.

Notice an error?

Help us improve our content by reporting any issues you find.

Get the WebProNews newsletter delivered to your inbox

Get the free daily newsletter read by decision makers

Subscribe
Advertise with Us

Ready to get started?

Get our media kit

Advertise with Us