Global Law Enforcement Cracks Down on West African Cybercrime Syndicates, 58 Arrested in Operation Jackal IV
An international coalition of law enforcement agencies spanning 22 countries has successfully concluded "Operation Jackal IV," targeting sophisticated West African cybercrime networks. The operation resulted in 58 arrests and the identification of 263 suspects, significantly disrupting groups known for global financial fraud, including romance, investment, and business email compromise scams.
Law enforcement agencies from 22 countries have collaborated in a major international crackdown, "Operation Jackal IV," to dismantle West African cybercrime networks. Between November 2025 and June 2026, the operation led to the identification of 263 suspects and the arrest of 58 individuals.
The primary focus of the operation was to disrupt the **Black Axe** cybercrime syndicate, a group notorious for its involvement in global-scale cyber-enabled financial fraud. These criminal rings commonly target victims through romance scams, cryptocurrency and investment scams, and business email compromise (BEC) fraud. They have also been linked to violent crimes.
### Key Takedowns Across Continents
During **Operation Jackal IV**, **Argentinian** law enforcement made 17 arrests and linked 196 suspects to a significant Crime-as-a-Service (CaaS) network. This network provided West African organized crime groups with crucial infrastructure, including web domains and money-laundering support.
**South African** authorities also played a pivotal role, arresting 39 individuals, blocking 257 bank accounts, and seizing $2.67 million. These assets were tied to a syndicate that primarily targeted retirees in English-speaking countries with elaborate investment and romance scams.
Meanwhile, **Romanian** police arrested 11 suspects connected to a call center that lured victims into sophisticated investment scams by promising high returns on stocks or cryptocurrencies. **Italian** authorities identified one suspect linked to a pan-European money laundering network that utilized shell companies, remittance services, and cash withdrawals to clean illicit funds.
### Dark Web and Coercion Tactics
**INTERPOL** highlighted the evolving tactics of these groups, stating: "Offenders typically contact minors via social media, build trust and coerce them into sharing explicit images or videos. They then threaten to distribute this material to the victim's contacts unless a ransom is paid."
Furthermore, some syndicates were observed procuring CaaS from external providers, often via the dark web, to outsource critical operations like money laundering.
### Broader International Efforts
This operation is part of a broader, sustained international effort against cybercrime. Between December 8 and January 30, African authorities, in another **INTERPOL**-coordinated action dubbed "Operation Red Card 2.0," arrested 651 suspects across 16 countries.
More recently, in July, **INTERPOL** announced that law enforcement agencies had arrested 5,811 suspects and seized $293 million in illicit assets during "Operation First Light 2026," a global anti-fraud operation involving investigators from 97 countries.

### The Blue Report 2026: Post-Initial Access Defenses Lagging
While these operations demonstrate significant success in disrupting criminal networks, a recent report underscores persistent challenges in cybersecurity defenses. The **Blue Report 2026** indicates that once attackers gain valid credentials, only 37% of their subsequent actions are blocked. This highlights a critical gap where overall prevention scores often mask vulnerabilities in post-initial access security. The report measures defenses technique by technique across 338 million simulations run in customer production environments, urging organizations to bolster their defenses beyond initial access points.