Interpol and law enforcement agencies arrest 5,811 suspects and seize $293M in an operation combating social engineering scams and fraud across 97 countries
Context & Ripple Effects
Interpol’s recent cybercrime actions have paired cross-border arrests with infrastructure disruption: Operation Secure targeted infostealer infrastructure in 26 countries, while a separate 95-country operation removed malicious IP addresses and servers.
The new fraud-focused operation extends that operating model to social-engineering scams across 97 countries. Its scale—both in suspects arrested and assets seized—makes it a meaningful escalation from prior Interpol actions centered on specific regions or technical infrastructure.
First-order effects
- Law-enforcement agencies in the participating countries have removed 5,811 suspected scam and fraud operators from active operations and seized $293M that may otherwise have remained available to criminal networks.
- Social-engineering scam networks operating across the 97-country coalition face immediate disruption to personnel, funds, and cross-border operating channels.
Second-order effects
- The operation reinforces the need for scam networks to replace intermediaries and move funds or operations after coordinated arrests, while investigators can use seized assets and detainees to identify additional participants.
- The breadth of the action increases pressure for tighter cooperation among national police forces and for private-sector partners that can identify scam infrastructure, payment flows, or compromised accounts.
Third-order effects
- If repeated, large multinational operations could shift cyber-fraud enforcement from isolated national cases toward persistent, network-level campaigns that target both operators and their financial proceeds.
- The pattern also suggests that combating social engineering will increasingly require coordination across jurisdictions and across technical, investigative, and asset-recovery functions, rather than infrastructure takedowns alone.
The trend: Cross-border cybercrime enforcement is evolving into broader coordinated campaigns that combine arrests, infrastructure disruption, and asset seizure against globally distributed fraud networks.