Overview

• Operation Serengeti 2.0 ran from June to August 2025 with investigators from 18 African countries and the United Kingdom targeting ransomware, online scams and business email compromise.
• Authorities dismantled 11,432 malicious infrastructures linked to attacks that hit nearly 88,000 victims worldwide.
• Angola shut down 25 illicit crypto-mining centers, uncovered 45 illegal power stations and seized equipment worth more than $37 million earmarked for public power distribution.
• Zambia exposed an online investment fraud affecting 65,000 people with estimated losses of $300 million, arrested 15 suspects and seized domains, bank accounts and mobile numbers while tracking overseas collaborators.
• Further actions included disrupting a suspected trafficking-linked scam center in Lusaka with 372 forged passports seized and arresting the lead suspect in a Côte d’Ivoire inheritance scheme tied to $1.6 million in losses.