Interpol's Jackal IV Disrupts West African Crime Infrastructure

Breaking cybersecurity news, news analysis, commentary, and other content from around the world, with an initial focus on the Middle East & Africa, the Asia Pacific, Europe, and Latin America.

The international law enforcement operation focused on disrupting crime-as-a-service networks and supporting infrastructure behind groups like Black Axe.

Law enforcement agencies snared several West African crime syndicates as part of an ongoing series of investigations taking aim at fraud and cybercrime.

Interpol today announced preliminary results of Jackal IV, a coordinated international operation targeting organized crime groups in West Africa, with a particular focus on fraud and cybercrime. Law enforcement from 22 countries across six continents worked together to arrest 58 suspects and identify 263 more.

Global law enforcement has been targeting African cybercrime in these Jackal operations for years. Jackal III, which concluded in 2024 , led to hundreds of arrests and approximately $3 million in seized assets. The first two Jackal operations in 2022 and 2023 led to approximately 200 arrests in total and millions of dollars more in seized assets.

While multiple organizations have been targeted in these operations, authorities behind Jackal took particular interest in Black Axe, a transnational organized crime network of Nigerian -origin that has been linked to business email compromise , romance scams, cryptocurrency and investment fraud, money laundering, and other cyber-enabled financial crimes.

Interpol said in a press release that Black Axe and similar West African groups "are responsible for a significant of the world's cyber-enabled financial fraud."

Participating nations included Austria, Argentina, Australia, Canada, Côte d'Ivoire, France, Germany, Indonesia, Ireland, Italy, Japan, Malaysia, Netherlands, Nigeria, Portugal, South Africa, Spain, Sweden, Switzerland, United Arab Emirates, United Kingdom, and the US. For Jackal IV, Interpol highlighted action taken across four countries — Argentina, South Africa, Romania and Italy — targeting individuals and operations that supported West African organized crime outfits.

In Argentina, 17 individuals were arrested and 196 were identified for possibly participating in "a major Crime-as-a-Service network." The network is suspected of providing website domains and money laundering support to West African organized crime groups.

In South Africa, authorities raided seven locations in Johannesburg linked to a syndicate accused of running romance and investment scams targeting retirees in English-speaking countries. Interpol described the structure supporting the schemes as elaborate, "with members designated as 'conversion' or 'retention' agents and tasked with different stages of the scam." Authorities seized $2.67 million, blocked 257 bank accounts, and arrested 39 people.

In Italy, authorities identified one individual as possibly connected to a "pan-European money laundering network that used shell companies, remittance services and cash withdrawals to obscure fund origins." According to Interpol, one account laundered $736,000.

And in Romania, police dismantled a group running a call center-based investment scam touting high returns on stocks or cryptocurrencies. Authorities arrested 11 individuals and seized approximately $379,000 in cash and cryptocurrency, as well as "six real estate properties and several luxury watches."

Beyond these four countries, Interpol said the operation enabled the identification of multiple emerging trends such as a rise in West African organized crime groups targeting minors with sextortion schemes.

While Jackal IV led to fewer arrests than operations, it placed stronger emphasis on intelligence gathering and disruption of criminal support networks.

Rafe Pilling, senior director of threat intelligence at Sophos, tells Dark Reading the operation appeared to be designed to "map and disrupt," arguing that identifying facilitators and infrastructure providers can sometimes be more valuable than arrest totals.

Alexander Leslie, principal intelligence analyst at Recorded Future, similarly said the operation's emphasis on infrastructure may ultimately prove more significant than arrest figures. "Arresting an individual fraudster removes one operator. Understanding and disrupting the infrastructure that dozens of operators depend on can degrade an entire ecosystem."

On the intelligence front, work in Argentina led to identifying a crime-as-a-service network, reflecting a wider trend of threat actors increasingly relying on external providers. As Interpol noted, this occurs "often through the dark web , to outsource key activities like money laundering and other critical operations."

Results are also preliminary; many cases in Operation Jackal IV remain under active investigation, according to Interpol.

Pilling says operations like Jackal IV are unlikely to eliminate criminal threats overnight, but they do increase the operational cost and complexity for criminal groups. For African businesses, he says, the value is twofold.

"First, it reduces some of the immediate criminal capability of the networks being targeted," Pilling explains. "Second, and perhaps more importantly, it improves international law enforcement visibility into how these groups operate, who supports them, and where their infrastructure exists. That intelligence can support future investigations and more targeted disruption efforts."

Senior News Writer, Dark Reading

Alex is an award-winning writer, journalist, and podcast host based in Boston. After cutting his teeth writing for independent gaming publications as a teenager, he graduated from Emerson College in 2016 with a Bachelor of Science in journalism. He has previously been published on VentureFizz, Security, Nintendo World Report, and elsewhere.

At Dark Reading, he covers a variety of cybersecurity topics, including the cybercrime ecosystem, open source security, and the intersection between AI and threat actors. In his spare time, Alex hosts the weekly Nintendo podcast, "Talk Nintendo Podcast," and works on personal writing projects, including two previously self-published science fiction novels.

He has received numerous awards, including TechTarget's Writer of the Year in 2022 as well as more than 10 Azbee awards for his reporting between 2022 and today.

The State of Cloud Security: The Latest Challenges

How Organizations Are Managing Incident Response

How Enterprises Are Developing Secure Applications

Inside RSAC 2026: security leaders reveal the risks redefining your defense strategy

Essential News & Insights from Black Hat USA 2025

Beyond the Login: Key Considerations for Evaluating Identity Security

SASE Pivot and Trends 2026: A Gartner Keynote

What Every Enterprise Should Know Securing Cloud Assets In the Age of AI

The Dos and Don'ts of a Cybersecurity Awareness Month People Actually Remember

Building a Secure AI Strategy for the Enterprise