Operation Sentinel: Inside Africa’s Largest Cybercrime Takedown

In the dark hours before dawn, law enforcement teams across Africa moved in. By sunrise, hundreds of cybercriminals were in custody, millions in illicit funds frozen, and the region’s largest digital crime syndicates were reeling. The operation, months in the making and codenamed “Sentinel,” marks a dramatic escalation in the continent’s battle against cybercrime - a fight that spans boardrooms, banks, and the back alleys of the internet.

Fast Facts

• 574 suspects arrested across 19 African countries
• $3 million in criminal proceeds seized
• Over $21 million in attempted financial losses identified
• 100+ devices and 30 servers seized in Ghana alone
• Six ransomware variants decrypted during the operation

Interpol’s Operation Sentinel targeted the full spectrum of cybercrime: business email compromise (BEC), ransomware, extortion, phishing, and elaborate online fraud. In Senegal, investigators thwarted a sophisticated BEC scam that nearly siphoned $7.9 million from a major petroleum company. The attackers, who had infiltrated internal email systems and impersonated company leadership, were stopped only after authorities froze the destination accounts just in time.

Ghana faced its own digital siege. A major financial institution was hit by a ransomware attack, paralyzing critical services and resulting in the theft of $120,000. Hackers encrypted a staggering 100 terabytes of data. However, local authorities, aided by Interpol, developed a custom decryption tool, restoring access to 30 terabytes and arresting multiple suspects. In total, six distinct ransomware strains were neutralized during the sweep.

But the cybercriminals’ tactics weren’t limited to high-profile targets. In Ghana and Nigeria, a sprawling fraud network used fake fast-food websites and mobile apps to lure unsuspecting customers, collecting more than $400,000 in payments for meals that never arrived. Police seized 100 devices and dismantled 30 servers, bringing down a criminal enterprise with over 200 known victims.

Elsewhere, Benin authorities arrested 106 suspects linked to extortion and online scams, shuttered 43 fraudulent domains, and wiped over 4,300 scam social media accounts. In Cameroon, law enforcement tracked a phishing campaign through a compromised vehicle sales platform, freezing bank accounts to stanch the financial bleed.

Operation Sentinel signals a new era of cross-border cyber policing in Africa, with law enforcement agencies sharing intelligence and technical expertise at unprecedented levels. Yet, as digital access expands, so does the threat surface - raising questions about how long the advantage will last.

As the dust settles, authorities celebrate a rare win in the relentless war against cybercrime. But with each disruption, new threats mutate and emerge. For Africa’s defenders, Operation Sentinel is both a victory and a warning: the battle for cyberspace is far from over.

WIKICROOK

• Business Email Compromise (BEC): Business Email Compromise (BEC) is a scam where criminals hack or impersonate business emails to trick companies into sending money to fraudulent accounts.
• Ransomware: Ransomware is malicious software that encrypts or locks data, demanding payment from victims to restore access to their files or systems.
• Phishing: Phishing is a cybercrime where attackers send fake messages to trick users into revealing sensitive data or clicking malicious links.
• Decryption Tool: A decryption tool is software that reverses encryption, restoring access to locked or protected data using cryptographic keys or algorithms.
• Server: A server is a computer or software that provides data, resources, or services to other computers, called clients, over a network.