Group-IB supports INTERPOL’s “Operation Serengeti 2.0” resulting in 1,209 cybercriminals arrested and $97.4M recovered

In an impressive joint effort, Group-IB, a leader in cybersecurity, has made contributions to INTERPOL's "Operation Serengeti 2.0". Between June and August 2025, this wide-ranging operation led to the arrest of 1,209 cybercriminals across Africa and the thwarting of potential threats to nearly 88,000 victims globally. More notably, authorities recovered a staggering US$97.4 million and dismantled over 11,000 malicious infrastructures linked to devastating scams like ransomware and business email compromise (BEC).

As an INTERPOL Gateway Partner, Group-IB offered vital intelligence on a cryptocurrency scam and the networking infrastructure underlying BEC campaigns. This intelligence helped in steering the multinational teams across 18 African countries and the UK during the operation. Group-IB's prior workshops on open-source intelligence greatly augmented investigators' proficiency, bolstering the operation's success.

Operational Highlights

• In Angola, authorities dismantled 25 illegal cryptocurrency mining centres operated by 60 Chinese nationals. This operation led to the confiscation of mining equipment worth over $37 million, with the government now pivoting the assets to improve power distribution in underprivileged areas.
• Zambia tackled an extensive online investment scam that deceived 65,000 victims, amassing $300 million in losses. 15 individuals were arrested and vital evidence was seized including mobile numbers and bank accounts.
• In Côte d'Ivoire, a long-running inheritance scam was eviscerated, with suspects’ assets like electronics, jewellery, and cash being seized. Victims were hoodwinked into paying fees for fake inheritances, resulting in $1.6 million in losses.

Zambia further thwarted a suspected human trafficking network, uncovering 372 forged passports from 7 countries, attesting to the scope and impact of these criminal enterprises.

The success of "Operation Serengeti 2.0" extends beyond its immediate effects. It highlights the strength of international cooperation in combating cyber crime, as underscored in statements by INTERPOL's Valdecy Urquiza and Group-IB's CEO, Dmitry Volkov. Both emphasised the necessity of joint action and shared expertise in fortifying the integrity of global digital ecosystems.

This initiative follows its precursor, the original "Operation Serengeti", hosted across 19 African countries in late 2024. The previous campaign identified thousands of fraudulent infrastructures while saving countless potential victims from catastrophic losses. Group-IB's contributions across both operations underscore the crucial role of cybersecurity firms in the investigative fold, promising ongoing vigilance against emerging digital threats.