In the Southern African nation of Eswatini, authorities seized 240 electronic devices, foreign currency and a realistic replica of a Brazilian police station, complete with fake uniforms, signage and equipment.
Operation First Light 2026: scope, partners and funding
Interpol says the operational phase of a global anti-fraud effort, called Operation First Light 2026, ran from January 15 to April 30, 2026. The operation involved law enforcement agencies from 97 countries and territories and was coordinated by Interpol with the assistance of Aseanapol, GGCPol and Europol. Interpol’s statement on July 9 also notes that the operation received funding from China’s Ministry of Public Security, described in the release as the country’s primary law enforcement agency.
Tactics targeted: social engineering, romance scams and BEC
According to Interpol, Operation First Light focused on combatting social engineering scams, including romance scams and business email compromise (BEC) schemes, and the money laundering activities that support them. Those categories were the explicit targets named in the agency’s July 9 statement.
Disruption tools used: I-GRIP, notices, account freezes and crypto actions
The operational phase combined investigative actions with financial interdiction. Interpol said teams requested 99 Interpol Notices and Diffusions and made proactive use of the agency’s Global Rapid Intervention of Payments (I-GRIP), a stop-payment mechanism the agency described as facilitating the swift blocking of illicit financial flows of both fiat and virtual assets. On the financial side, authorities blocked or froze 31,014 bank accounts and targeted many cryptocurrency wallets during the operation.
On-the-ground actions and measured outcomes
Field actions during the operational phase included raids on identified premises and interventions against high-value targets. Interpol listed on-the-ground operations in Brazil, Eswatini, China’s territory Macao, Oman, Palau, Singapore and Thailand. The Eswatini example included the seizure of a mock Brazilian police station used to deceive victims, and Interpol summarized the scammers’ technique: “Posing as Brazil’s Federal Police via video call, the scammers deceived their targets into believing they were victims of a crime, tricking them into transferring funds for ‘safekeeping,’ which were then stolen.”
Interpol reported that the operation identified 15,606 suspects and more than 142,000 victims globally. The agency said 5,811 people were arrested and that authorities intercepted $293 million in illicit assets. Interpol also reported that of 152,808 individual fraud and scam cases analyzed during the effort, 23,715 were solved thanks to the operation.
What this means for law enforcement, victims, and financial institutions
- Law enforcement: Agencies from 97 countries and territories coordinated under Interpol’s lead, using 99 Notices and I-GRIP to target cross-border flows. Those procedural tools — combined with asset freezes and raids — demonstrate the operational toolkit used during the January–April phase.
- Victims: Interpol’s numbers show the scope of impact: more than 142,000 victims identified and 15,606 suspects flagged. The Eswatini case illustrates how social engineering leverages realistic staging and impersonation to extract funds from individuals.
- Financial institutions: The freezing of 31,014 bank accounts and actions against cryptocurrency wallets underline the practical role payment systems and crypto-hosting entities played in the disruption phase and their potential operational exposure to stop-payment requests under international coordination.
Operation First Light 2026 presents a densely quantified effort: nearly $300 million intercepted, 5,811 arrests, and tens of thousands of accounts and cases processed across seven named jurisdictions and many more through the 97-country network. Interpol framed the work as a coordinated strike on social engineering and the laundering networks that enable it. The operation’s funding source — China’s Ministry of Public Security — and the scale of international instruments deployed raise concrete questions about how such financing and cross-border mechanisms will be used in future coordinated actions.
https://www.infosecurity-magazine.com/news/china-interpol-cybercrime-crackdown/
