INTERPOL’s latest operation exposes the scale of AI-enabled financial crime as African governments face pressure to turn cybersecurity agreements into funded, operational defences.
A multinational crackdown on cybercrime across Africa has resulted in 1,462 arrests and the recovery of more than $105 million, increasing pressure on governments to establish permanent cross-border security arrangements ahead of the Cyber Africa Forum in Cotonou, Benin, on November 16–17.
INTERPOL announced on October 22 that Operation Serengeti III, conducted between June 29 and August 31 with law-enforcement agencies from 20 African countries and the United States, disrupted 10,909 malicious networks, identified 65,929 victims and linked criminal activity to financial losses exceeding $385 million.
The operation targeted online investment fraud, ransomware, business email compromise and digital extortion. Investigations dismantled investment-fraud networks in Uganda, illegal cryptocurrency-mining operations in Angola and phishing schemes in Nigeria, demonstrating the reach of criminal networks operating across national borders.
The $385 million represents losses linked to cases investigated during the operation, while the $105 million reflects recovered illicit funds. Neither figure measures Africa’s total annual cybercrime losses.
INTERPOL Cybercrime Director Neal Jetton said international cooperation remained among the most effective ways to disrupt criminal networks and recover stolen assets.
AI Expands Threat as Security Capacity Falls Behind
The operation followed INTERPOL’s African Cyberthreat Assessment Report 2026, released in August, which found that artificial intelligence was involved in 55% of cybercrime cases reported in its 2025 survey.
Drawing on responses from 36 African countries, the assessment identified severe enforcement weaknesses:
- 94% of surveyed agencies reported insufficient digital-forensics tools.
- 78% cited inadequate resources, including budgets, equipment and specialist personnel.
- 89% identified cross-border cooperation as a major obstacle to successful investigations.
A further 72% reported slow information exchange between agencies, while 92% cited insufficient technical expertise as a principal barrier to adopting AI investigative tools.
These weaknesses allow criminal groups to exploit inconsistent legislation, delayed investigations and gaps between banking, telecommunications and law-enforcement systems.
INTERPOL also reported cybercrime-related losses rising from $192 million in 2024 to $484 million in 2025, although the figures do not constitute a comprehensive accounting of the continent’s financial exposure.
Its assessment separately cited an estimated $5 billion in annual economic damage, based on cybersecurity consultancy Serianu’s model. That estimate, developed using an assumed loss-to-security-spending ratio, is not an audited total of verified losses.
Cybercrime Becomes an Economic and Investment Risk
The economic threat extends beyond stolen funds.
Africa’s growing dependence on digital banking, mobile payments, electronic identification and cloud-based public services is increasing exposure to financial fraud and operational disruption.
For banks and fintech companies, cyberattacks can raise transaction-monitoring, compliance and recovery costs. For businesses and infrastructure operators, ransomware and data breaches can interrupt production, payments and essential services.
Weak cybersecurity can also undermine confidence in digital transactions and increase perceived investment risks, particularly in markets where insurance, forensic expertise and regulatory protection remain limited.
The resulting challenge is economic as much as technological: Africa’s expanding digital infrastructure requires a comparable commitment to security if financial inclusion, cross-border commerce and investment are to develop sustainably.
Cooperation Expands, but Delivery Remains Uncertain
African institutions have begun developing a coordinated response.
In April, Smart Africa’s African Network of Cybersecurity Authorities (ANCA) outlined a continental programme covering regulatory harmonisation, shared cybersecurity training and interconnected threat-intelligence infrastructure.
The initiative set objectives including two or three joint pilot projects by the third quarter of 2026 and a cybersecurity cooperation roadmap for 2026–2028. Publicly available announcements have not yet established the implementation status of those pilot targets.
On November 2, Smart Africa signed a three-year cybersecurity cooperation agreement with e-Crime Bureau in Accra, Ghana, covering skills development, stronger institutional coordination and protection of critical digital infrastructure.
Smart Africa Director-General Lacina Koné said Africa’s digital transformation required stronger cooperation and sustained investment in the institutions responsible for protecting it.
Separately, US and Nigerian officials reinforced cooperation against transnational online fraud, including romance scams and financial sextortion, with greater emphasis on intelligence-sharing, investigations and dismantling criminal financing networks.
These developments demonstrate expanding political and operational cooperation. However, the latest Smart Africa agreement has not publicly specified programme financing, country-level deployment budgets or binding delivery milestones.
Four Tests for the Cotonou Forum
The sixth Cyber Africa Forum, expected to bring together more than 1,500 policymakers, technology executives and investors, will meet under the theme Building the Future of Digital Trust.
Its significance will depend less on new declarations than on whether participating governments, financial institutions and technology partners announce commitments addressing four priorities.
First, concrete financing. Governments, development-finance institutions and private investors should identify committed funding, recipient countries and implementation deadlines for cybercrime investigation units, specialist training, forensic laboratories and critical-infrastructure protection.
Second, operational cooperation. National cybersecurity authorities should establish or strengthen formal arrangements for joint investigations, rapid intelligence-sharing and coordinated incident response, supported by named institutions, permanent contact points and measurable performance targets.
Third, cross-border electronic evidence. Participating authorities should advance compatible procedures for preserving and exchanging digital evidence, accelerating lawful international requests and ensuring admissibility in national courts while protecting privacy and due-process rights.
Fourth, shared protection infrastructure. Regional cybersecurity networks should move towards funded implementation of interconnected computer emergency response teams, threat-intelligence platforms and digital-forensic facilities, with identified pilot countries and deployment schedules.
These priorities closely reflect INTERPOL’s recommendations and Smart Africa’s existing continental plans. The forum cannot itself impose binding legislation across participating countries, but it can provide a platform for governments and financing partners to formalise operational agreements and commitments.
The immediate test will be whether ANCA’s previously announced pilot projects have progressed, whether financing can be attached to shared infrastructure and whether governments agree on practical mechanisms for investigating crimes that cross borders in seconds.
Africa has demonstrated that coordinated enforcement can disrupt cybercriminal networks and recover substantial funds. Cotonou’s challenge is to translate those successes into a permanent, sustainable security system capable of protecting the continent’s digital economy.
Related news:
- Africa’s Cybercrime Losses Rise 152% as AI Expands Criminal Reach
- The Cost of Going Digital: Egypt’s Cybersecurity Test
Read Also:
