By: Nana Karikari, Senior Global Affairs Correspondent
A massive law enforcement sweep, coordinated by INTERPOL, has dealt a crushing blow to cybercriminal networks across the continent. Operation Sentinel, a month-long initiative spanning 19 countries, resulted in 574 arrests and the recovery of approximately USD 3 million (approx. GHS 32.85 million).
The operation targeted business email compromise (BEC), digital extortion, and ransomware—threats highlighted in INTERPOL’s 2025 Africa Cyber Threat Assessment Report. Across the region, investigators took down over 6,000 malicious links and successfully decrypted six distinct ransomware variants. The investigated cases were linked to staggering financial losses exceeding USD 21 million (approx. GHS 230 million).
“The scale and sophistication of cyberattacks across Africa are accelerating,” stated Neal Jetton, INTERPOL’s Director of Cybercrime. He noted that these actions “successfully protected livelihoods” and preserved critical infrastructure.
Sophisticated Schemes Halted in West Africa
In Senegal, authorities prevented a catastrophic loss for a major petroleum company. Fraudsters had infiltrated internal email systems to authorize a fraudulent wire transfer of USD 7.9 million (approx. GHS 86.5 million).
Swift intervention by Senegalese law enforcement froze the destination accounts just in time. Similarly, in Benin, the crackdown led to 106 arrests. Authorities there dismantled 43 malicious domains and shut down over 4,300 social media accounts used for extortion.
“Cybersecurity is no longer a technical luxury; it is the bedrock of our economic survival,” says Dr. Albert Antwi-Boasiako, a leading African cyber expert. He emphasized that regional cooperation is the only way to outpace “borderless criminals.”
Ghana and the Fight Against the Sakawa Scourge
Ghanaian law enforcement emerged as a central pillar of the operation. Authorities successfully tackled a ransomware attack on a local financial institution that saw 100 terabytes of data encrypted. Hackers had already stolen USD 120,000 (approx. GHS 1.31 million) from the institution.
Ghanaian experts conducted advanced malware analysis to develop a decryption tool. This allowed them to recover nearly 30 terabytes of data. A significant highlight was the dismantling of a cross-border fraud network operating between Ghana and Nigeria.
This syndicate defrauded over 200 victims using fake fast-food websites. They collected over USD 400,000 (approx. GHS 4.38 million) in payments. In Ghana, 10 suspects were arrested, and 30 fraudulent servers were taken offline.
“The message is loud and clear: we will come after you,” warned Hon. Samuel Nartey George, Minister for Communication, Digital Technology, and Innovation. He recently announced the establishment of a Cyber Security Fund and amendments to the Cybersecurity Act (Act 1038) to further tighten the noose around online predators.
Cameroon and Nigeria: Regional Hotbeds under Pressure
Beyond Ghana, Cameroon demonstrated remarkable speed in neutralizing a phishing campaign. Two victims reported being targeted by a fake online vehicle sales platform. Cameroonian investigators traced the attack to a compromised server and issued an emergency bank freeze within hours.
Nigeria remains a focal point as a hub for both cybercriminal activity and sophisticated law enforcement responses. INTERPOL data indicates that Nigeria, alongside South Africa and Egypt, continues to see high volumes of ransomware detections.
The cooperation between Ghanaian and Nigerian authorities in the fast-food scam case signals a shift toward a unified West African front. This synergy is crucial as criminals increasingly exploit the seamless digital borders within the ECOWAS region.
From Serengeti to Sentinel: A Sustained Crackdown
Operation Sentinel is the second major blow to African cybercrime this year. It follows Operation Serengeti (August 2025), which led to 1,209 arrests and recovered over USD 97 million (approx. GHS 1.06 billion).
These operations, part of the African Joint Operation against Cybercrime (AFJOC), demonstrate that INTERPOL is moving from sporadic raids to a continuous “hunting” model. By targeting the financial infrastructure of gangs, law enforcement is making cybercrime a high-risk, low-reward venture for local youth.
The Rising Financial Toll on Ghanaians
The Cyber Security Authority (CSA) reports that Ghana lost over GHS 19 million in the first nine months of 2025 alone. This marks a troubling rise in online criminal activity, with online fraud emerging as the most widespread threat.
The stakes are high for national infrastructure. For instance, a major ransomware attack on the Electricity Company of Ghana (ECG) recently resulted in losses estimated between GHS 400 million and GHS 500 million, highlighting the vulnerability of critical services.
“Life left me that day,” recalled Gerard Asagi, a teacher who lost USD 1,200 (approx. GHS 13,140) to online scammers. His story is one of thousands. Experts note that local scammers now combine internet fraud with spiritual rituals, known as the “Sakawa” phenomenon, making it a complex social and technical challenge.
Ghana Business Cyber Incident Response Plan
Every Ghanaian business must have a clear roadmap for when an attack occurs. Preparation starts with identifying your most critical data. Assign a dedicated lead to monitor security alerts and track unusual activity.
If an attack happens, immediately disconnect all devices from the network to stop the spread. Suspend employee account access to prevent further data theft. Reach out to the Cyber Security Authority (CSA) via the 292 shortcode or WhatsApp (0501603111) to report the breach.
Change all passwords across the organization and enforce multi-factor authentication (MFA). Restore your systems only from clean, offline backups. Finally, conduct a review to patch the vulnerability that allowed the hackers in.
Strengthening the Digital Future
Operation Sentinel was made possible through close coordination with private sector partners including Team Cymru, The Shadowserver Foundation, Trend Micro, TRM Labs, and Uppsala Security.
Supported by the UK’s Foreign, Commonwealth and Development Office and the European Union’s GLACY-e project, this operation sends a clear message: African
borders are no longer easy to exploit. However, the fight requires more than just police work. It demands a culture of digital accountability where every citizen remains vigilant. Only through this shared responsibility can we ensure that Africa’s digital transformation remains a tool for empowerment rather than a playground for predators
