Desk live·
ForensicPost
Breaches/Enforcement/File 25-0524

Five Hundred and Seventy-Four Arrests, Three Million Dollars Recovered

A coordinated operation across African jurisdictions produced 574 arrests and recovered around $3 million. Set against the losses in this database, the recovery figure is the striking part.

Constructed geometry · not a chart of case data
TargetAfrican cybercrime networks
ActorMultiple
S. Rosler11 min readConfidence: high2 sources reviewed

A coordinated cybercrime operation across African jurisdictions in 2025 produced 574 arrests and recovered approximately $3 million.

Arrest Volume Is The Inverse Of The Pattern Elsewhere

The enforcement files in this corpus record small numbers of arrests against large criminal operations: seven arrests connected to one cluster at 25-1205, one conviction at 25-0812, four in the UK at 25-0724.

574 is a different kind of operation. It reflects an enforcement posture aimed at volume fraud — the scam and BEC economy at 25-0602 and 25-1122 — rather than at a small number of technically sophisticated operators.

That is arguably better matched to the actual harm. This desk filed at 25-1202 that fraud against individuals is the largest category of cybercrime by count and the one the corpus is structurally incapable of covering.

Three Million Dollars Is The Number To Sit With

A single business email compromise at 25-0602 took $7.9 million. One ransom payment at 25-0728 was $75 million. A continental operation recovered $3 million.

That is not a criticism of the operation, which is a real result requiring cross-border cooperation across many jurisdictions. It is the same proportion finding as the US forfeiture at 25-0811: asset recovery operates orders of magnitude below the flows it is trying to reverse.

And It Is One Of The Few Places Enforcement Is The Visible Mechanism

Where mandatory disclosure is limited and collective redress largely absent, the accountability routes this corpus documents — notification, regulatory penalty, class action — mostly do not operate.

Policing is what remains. Whether it is more effective than the litigation-led approach at 25-1228 is not something this corpus can determine, and it is a genuinely open comparative question.

How we reported this

Compiled from INTERPOL’s published announcement, listed below. Charging and conviction outcomes are not established. Corrections: corrections@forensicpost.com.

Sources
  1. 574 arrests and USD 3 million recovered in coordinated cybercrime operation across AfricaINTERPOL
  2. Continent experiences sharp rise in cybercrimeAfrica Defense Forum
S. Rosler
Covers extortion groups and leak-site economics. Verifies our sample sets.
// the chain of custody — tuesdays

Get the next file first.

One incident a week, taken apart properly. Logs, timelines, and what the filing left out.

PGP-signed edition · no tracking pixels · one-click unsubscribe
© 2026 ForensicPost Media · the desk · newsletter · searchGlossary