INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Interpol Cybercrime Crackdown Nets 5,800 Suspects Worldwide
| 2026-07-09 11:45 LOW HIGH LAW ENFORCEMENT
Executive Summary
AI-generated
A global anti-fraud operation, dubbed Operation First Light 2026, was conducted from January 15 to April 30, 2026, involving law enforcement agencies from 97 countries and territories. The operation, coordinated by Interpol with the help of Aseanapol, GGCPol, and Europol, received funding from China's Ministry of Public Security, and targeted social engineering scams including romance scams and business email compromise schemes, as well as associated money laundering activities. Over 15,000 suspects were identified globally, while authorities seized $300m in illicit assets and arrested 5,811 individuals, with on-the-ground operations occurring in Brazil, Eswatini, China's territory Macao, Oman, Palau, Singapore, and Thailand; in Eswatini, 240 electronic devices, foreign currency, and a realistic replica of a Brazilian police station were seized.
Technical Mitigations AI-generated
• Block or freeze 31,014 bank accounts and many cryptocurrency wallets to prevent illicit financial flows.
• Utilize INTERPOL's Global Rapid Intervention of Payments (I-GRIP) stop-payment mechanism to swiftly block illicit financial flows of both fiat and virtual assets.
• Detect romance scams by identifying individuals posing as law enforcement agencies via video call, tricking targets into transferring funds for 'safekeeping.'
• Analyze 152,808 individual fraud and scam cases using techniques such as Diffusions to identify patterns and connections between suspects.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Operation Synergia IIOperation Synergia IIOperation Synergia IIIOperation Synergia IIIOperation Africa CyberOperation Africa CyberOperation SerengetiOperation SerengetiOperation SynergiaOperation SynergiaOperation Red CardOperation Red Card
Target & Sectors
ASEAN
ASEAN
financefinance
governmentgovernment
Incident Timeline
April 30, 2026
Interpol's Operation First Light, funded by China's Ministry of Public Security and coordinated with Aseanapol, GGCPol, and Europol, resulted in the arrest of 5,811 individuals globally.
Click on any entity below to view its context and source!
infrastructure
240 electronic devices
In the Southern African nation of Eswatini, authorities seized 240 electronic devices, foreign currency and a realistic replica of a Brazilian police station, complete with fake uniforms, signage and equipment.
victims
142,000 victims
This large-scale operation resulted in identifying 15,606 suspects and over 142,000 victims globally as well as the arrest of 5,811 individuals and the interception of $293m in illicit assets.
financial
$293 Stolen / Extorted Funds
This large-scale operation resulted in identifying 15,606 suspects and over 142,000 victims globally as well as the arrest of 5,811 individuals and the interception of $293m in illicit assets.
2026/07/09
Interpol-coordinated joint law enforcement operations, including Operation Synergia II and Operation First Light 2026, led to the arrest of over 5,800 suspects and the seizure of $293 million in illicit assets globally.
Click on any entity below to view its context and source!
victims
142,000 victims
"Over 142,000 victims globally were identified during Operation First Light 2026, highlighting the extent to which social engineering scams and fraud have escalated into a major transnational threat, affecting individuals, businesses and governments.
"
Throughout the operation, investigators identified more than 142,000 victims worldwide, blocked 31,014 bank accounts, analyzed 152,808 cases, and identified 15,606 suspects beyond those arrested.
financial
$300 Stolen / Extorted Funds
A new global anti-fraud operation against cybercrime has led to the arrest of over 5800 people and the interception of almost $300m in illicit assets.
financial
$293 Stolen / Extorted Funds
Law enforcement agencies have arrested 5,811 suspects and seized $293 million in illicit assets in a global anti-fraud operation spanning 97 countries.
infrastructure
1,300 servers
During the
first stage of Operation Synergia
, investigators identified an additional 70 cybercrime suspects and took down 1,300 command-and-control servers that were used by cybercriminals in ransomware, phishing, and malware campaigns.
infrastructure
1,037 servers
…Operation Synergia II
, another joint law enforcement operation that led to the arrest of 41 suspects between April and August 2024 and the seizure of 1,037 servers and other cybercrime infrastructure operating across more than 22,000 IP addresses.
infrastructure
22,000 IP addresses
…Operation Synergia II
, another joint law enforcement operation that led to the arrest of 41 suspects between April and August 2024 and the seizure of 1,037 servers and other cybercrime infrastructure operating across more than 22,000 IP addresses.
Tactical Metrics
Metrics
infrastructure
240
Electronic Devices
Click for context!
In the Southern African nation of Eswatini, authorities seized 240 electronic devices, foreign currency and a realistic replica of a Brazilian police station, complete with fake uniforms, signage and equipment.
Metrics
financial
300,000,000
Stolen / Extorted Funds
A new global anti-fraud operation against cybercrime has led to the arrest of over 5800 people and the interception of almost $300m in illicit assets.
Metrics
victims
142,000
Victims
This large-scale operation resulted in identifying 15,606 suspects and over 142,000 victims globally as well as the arrest of 5,811 individuals and the interception of $293m in illicit assets.
"Over 142,000 victims globally were identified during Operation First Light 2026, highlighting the extent to which social engineering scams and fraud have escalated into a major transnational threat, affecting individuals, businesses and governments.
"
Throughout the operation, investigators identified more than 142,000 victims worldwide, blocked 31,014 bank accounts, analyzed 152,808 cases, and identified 15,606 suspects beyond those arrested.
Metrics
financial
293,000,000
Stolen / Extorted Funds
This large-scale operation resulted in identifying 15,606 suspects and over 142,000 victims globally as well as the arrest of 5,811 individuals and the interception of $293m in illicit assets.
Law enforcement agencies have arrested 5,811 suspects and seized $293 million in illicit assets in a global anti-fraud operation spanning 97 countries.
Metrics
infrastructure
1,300
Servers
During the
first stage of Operation Synergia
, investigators identified an additional 70 cybercrime suspects and took down 1,300 command-and-control servers that were used by cybercriminals in ransomware, phishing, and malware campaigns.
Metrics
infrastructure
1,037
Servers
…Operation Synergia II
, another joint law enforcement operation that led to the arrest of 41 suspects between April and August 2024 and the seizure of 1,037 servers and other cybercrime infrastructure operating across more than 22,000 IP addresses.
Metrics
infrastructure
22,000
Ip Addresses
…Operation Synergia II
, another joint law enforcement operation that led to the arrest of 41 suspects between April and August 2024 and the seizure of 1,037 servers and other cybercrime infrastructure operating across more than 22,000 IP addresses.
Intelligence Sources
Infosecurity-Magazine
2026-07-09
Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests
Infosecurity-Magazine
BleepingComputer
2026-07-09
Police arrests 5,800 suspects in global anti-fraud crackdown
BleepingComputer
Unpublish from Social Media?
Are you sure you want to delete this podcast video from all synchronized social networks (YouTube, Facebook, Threads)?
Important:
Due to Meta API restrictions, Instagram Reels cannot be deleted automatically via API by third-party apps.
View Profile to Delete Manually
View Profile to Delete Manually
Tactical Intelligence
Report Intelligence Issue
Podcast Options
Generate
Incident Version History
CURRENT VERSION
Last Updated: 2026-10-05T11:40
Comprehensive Tactical Telemetry
Highly Correlated Entities
16x
organisation
Identified Entity
Interpol
entity
8x
target region
Target Country
China
country
8x
timeline
Temporal Reference
July 9
date
7x
campaign
Campaign
Operation First Light
operation
4x
tactic
Cyber Operation Type
Social Engineering
tactic
4x
general metric
Suspects
15,000
suspects
2x
general metric
Countries
97
countries
2x
financial
Stolen / Extorted Funds
300,000,000
$
2x
infrastructure
Servers
1,300
servers
2x
attribution
Attributing Entity
Interpol
authority
2x
general metric
%
54
%
Contextual Telemetry
Context Block
14 METRICS
source region
Origin Country
Eswatini
country
infrastructure
Electronic Devices
240
electronic devices
general metric
Operation First Light
2,026
operation first light
general metric
Arrests
5,800
arrests
general metric
Interpol Notices
99
interpol notices
general metric
Bank Accounts
31,014
bank accounts
victims
Victims
142,000
victims
general metric
Individuals
5,811
individuals
general metric
Individual Fraud
152,808
individual fraud
general metric
Cases
23,715
cases
general metric
Additional Cybercrime Suspects
70
additional cybercrime suspects
infrastructure
Ip Addresses
22,000
ip addresses
source region
Origin Region
AFRICA
region
general metric
Operation Red Card
2
operation red card
Click on any entity below to view its context in the main text!
Selective Unpublish
Selecciona las redes de las que quieres eliminar esta publicación. El sistema intentará borrar el post real de la API y limpiará la base de datos para que puedas volver a lanzarlo.
By navigating this website, you accept the use of strictly necessary technical cookies for session security and basic platform functionality. We do not use tracking or advertising cookies.
Read our Privacy Policy.