INTERPOL Uncovers Nigerian Email Fraud Operation With 2.1 Million Email Addresses | Sahara Reporters

Investigators found that the operation had harvested software credentials and amassed approximately 2.1 million email addresses.

The International Criminal Police Organisation (INTERPOL) has announced the arrest of a suspect linked to a large-scale phishing and business email compromise operation in Nigeria, where investigators uncovered approximately 2.1 million email addresses.

The arrest was part of an Africa-wide cybercrime crackdown that resulted in 1,462 arrests, the disruption of 10,909 malicious networks and the recovery of more than $105 million in illicit funds across 21 countries.

According to an INTERPOL statement, the Nigerian investigation targeted an operation involved in phishing and business email compromise, a form of cybercrime in which criminals exploit email systems and impersonate legitimate individuals or organisations to facilitate fraud.

Investigators found that the operation had harvested software credentials and amassed approximately 2.1 million email addresses.

Authorities also recovered a luxury vehicle suspected to have been purchased with criminal proceeds.

INTERPOL did not disclose the identity of the suspect, the specific organisations or individuals targeted by the operation, or the precise financial losses associated with the Nigerian email fraud investigation.

The Nigerian case was one of several investigations conducted under Operation Serengeti III, an international law enforcement initiative coordinated by INTERPOL to combat cyber-enabled fraud, ransomware, business email compromise, online scams and digital extortion.

The operation ran from June 29 to August 31, 2026, with law enforcement agencies from 21 countries participating.

Before the operation began, investigators from 20 African countries and the United States received intelligence on suspicious domains, internet protocol addresses and command-and-control infrastructure linked to suspected criminal activities.

INTERPOL said private-sector partners provided intelligence, technical analysis and operational expertise to help authorities identify targets, map criminal networks and support investigations.

The organisation’s Director of Cybercrime, Neal Jetton, said cybercriminal networks operated across national borders and exploited technology to target victims on a large scale.

“Operation Serengeti III reinforces a clear message: while cybercrime is increasingly borderless, international cooperation remains one of the most effective tools for disrupting criminal networks, recovering criminal assets and protecting communities from digital harm,” Jetton said.

INTERPOL said authorities identified 65,929 victims targeted by cybercriminal networks during the operation, while financial investigations linked criminal activities to losses exceeding $385 million.

The crackdown also led to arrests and seizures in several other African countries.

In Uganda, authorities dismantled two transnational fraud rings and arrested 365 foreign nationals allegedly linked to sophisticated online investment and pension fraud schemes targeting victims across Asia.

Investigators uncovered a call-centre operation that used scripted communications, fake trading platforms and fraudulent websites to deceive pensioners into investing in non-existent opportunities.

In Angola, authorities dismantled two illegal cryptocurrency mining centres, arrested nine suspects and seized more than 2,000 cryptocurrency mining devices, alongside six illegal power transformation stations.

The seized electrical infrastructure was valued at more than $1 million.

Other investigations targeted a malicious mobile loan application scheme in Tanzania and a social media-based vehicle import fraud network in Gabon. Authorities also arrested 30 suspects linked to a cybercrime operation in the Republic of Congo.

INTERPOL said several investigations stemming from Operation Serengeti III remained active, with authorities continuing efforts to identify additional suspects, trace illicit proceeds and analyse seized digital evidence.