24 Kenyans Arrested in Ksh 1.1 Billion Credit Card Fraud as Operation Serengeti Unveils Global Cybercrime Network

In total, the joint operation, codenamed Operation Serengeti, spanned 19 African countries, resulting in 1,006 arrests and the dismantling of 134,089 malicious networks and infrastructures. In Kenya, Afripol worked closely with local authorities, guided by the country’s Inspector General of Police, Douglas Kanja, who currently chairs the Afripol team

A total of 24 Kenyans were arrested in a high-profile international joint operation targeting an online credit card fraud scheme valued at Sh1.1 billion. The scheme primarily targeted Kenyan financial institutions and was part of a larger operation spearheaded by the International Criminal Police Organization (Interpol) and the African Union police body (Afripol).

The investigation revealed that the fraudsters used altered banking system security protocols to execute fraudulent scripts, stealing USD 8.6 million. These funds were swiftly funnelled via SWIFT to entities in the United Arab Emirates, Nigeria, and China. From there, the money was further distributed to digital asset platforms offering financial services in multiple regulated jurisdictions.

In total, the joint operation, codenamed Operation Serengeti, spanned 19 African countries, resulting in 1,006 arrests and the dismantling of 134,089 malicious networks and infrastructures. In Kenya, Afripol worked closely with local authorities, guided by the country’s Inspector General of Police, Douglas Kanja, who currently chairs the Afripol team.

The operation targeted cybercriminal activities including ransomware, business email compromise (BEC), digital extortion, and online scams, threats highlighted in the 2024 Africa Cyber Threat Assessment Report.

Alarming Scale of Global Cybercrime

According to Interpol, Operation Serengeti identified more than 35,000 victims globally, linked to nearly USD 193 million in financial losses. Intelligence gathered during the operation fueled 65 Cyber Analytical Reports, enabling targeted actions against high-profile cybercriminals. Private sector partners, including internet service providers, played a critical role by sharing intelligence, providing on-site and remote support, and securing critical infrastructures.

These partnerships helped patch vulnerabilities and disrupt ongoing criminal activities. “From industrial-scale credit card fraud to sophisticated multi-level marketing scams, the growing volume and sophistication of cybercrime is of significant concern,” Interpol stated.

Cases Unveiled Across Africa

The operation uncovered shocking cases across the continent. In Senegal, eight suspects—including five Chinese nationals—were arrested for operating a USD 6 million online Ponzi scheme that defrauded 1,811 victims. Authorities recovered over 900 SIM cards, cash, electronic devices, and copies of victims’ identification documents. In Nigeria, a man running online investment scams lured victims with promises of high cryptocurrency returns, amassing upwards of USD 300,000.

Kenya’s Efforts in Cybersecurity

Kenya has stepped up its fight against cybercrime by joining the Council of Europe’s Budapest Convention on Cybercrime. The Convention seeks to harmonize cybercrime laws, enhance investigative capabilities, and foster international cooperation in combating online threats.

Internal Security Principal Secretary Dr. Raymond Omollo emphasized the importance of safeguarding Kenya’s digital future. He highlighted that the country faces a wide range of cyber threats, including state-sponsored actors, hackers, and malicious insiders.

“Joining the Budapest Convention provides Kenya with a legal framework for international cooperation on cybercrime and electronic evidence, while preparing us to face emerging cyber threats head-on,” said Dr. Omollo.

The operation underscores the growing threat of cybercrime in Africa and the need for robust international cooperation to combat increasingly sophisticated attacks. As the digital landscape evolves, Kenyan authorities remain committed to building a secure cyberspace and protecting its citizens from malicious actors.