"Following illicit financial flows across borders" — that is how Tomonobu Kaya, director of the Interpol Financial Crime and Anti-Corruption Centre, described the operational logic behind a recent multinational effort to dismantle networks that finance and enable cyber-enabled fraud.
Operation Jackal IV: scope, timeline and headline numbers
Operation Jackal IV ran for eight months, from November 2025 to June 2026, and spanned 22 countries on six continents, Interpol announced on August 25. The operation identified 263 suspects and — across the entire effort — secured 58 arrests. Interpol said the operation was designed to disrupt money laundering, identify high-value targets, seize assets and support arrests and prosecutions. The campaign builds on Operation Jackal III, which led to 300 arrests in 2024, and on subsequent Interpol-led operations targeting African cybercrime.
South Africa raids: romance and investment scams against retirees
In South Africa, police executed raids at seven locations linked to a syndicate Interpol described as running romance and investment scams that targeted retirees in English-speaking countries. Authorities arrested 39 people, blocked 257 bank accounts and seized $2.67m. Interpol framed these actions as part of following the financial flows that sustain organized criminal networks.
Your town's IT department is one person. Maybe.
Ransomware crews target small municipalities because nobody's watching. Nubivance gives Maine and New Hampshire towns a security program sized to a town budget.
Protect the town officeRomania enforcement: call-centre investment scam and a €143m estimate
Romanian authorities dismantled a group that operated an investment scam from a call centre, promoting supposed high returns from stocks and cryptocurrencies. Interpol attributed an estimated €143m in stolen and laundered funds to the network. Romanian police arrested 11 people and seized about €330,000 (reported as $385,000) in cash and cryptocurrency, along with six properties and luxury watches.
Argentina: a 196-person Crime-as-a-Service network
Investigators identified in Argentina a 196-person Crime-as-a-Service (CaaS) network alleged to have supplied website domains and money-laundering support to West African organized crime groups. Argentine authorities arrested 17 people in connection with that network. Interpol also noted that some criminal networks obtain CaaS capabilities from external providers to outsource activities including money laundering, underlining the transnational supply chain dimension of the fraud ecosystem.
Sextortion targeting minors and reporting irregularities
Beyond investment and romance fraud, Interpol investigators recorded an increase in sextortion that included victims as young as 14. The agency highlighted that criminal networks are diversifying both targets and services, combining extortion, romance scams and investment fraud with outsourced technical and financial capabilities. Interpol also observed that country-level arrest figures reported by participating authorities add up to more than the 58 arrests Interpol reported as the operation’s overall arrest count, a point the agency made when summarizing cross-border contributions to the effort.
What this means for technologists, prosecutors, and victims
- Technologists and security teams: the identification of a large CaaS network in Argentina and reports that groups purchased external money-laundering and domain services indicate that defenders should watch for commoditization of fraud infrastructure — domain provisioning and laundering-support services that can be rented or bought by remote syndicates.
- Policymakers and prosecutors: Interpol framed follow-the-money activity as central to disruption. The operation’s stated aims — to seize assets, identify high-value targets and support prosecutions — put cross-border financial investigation and mutual legal assistance at the center of enforcement strategy.
- Victims and affected communities: the operation underscores two persistent risks. Retirees were specifically named as targets of romance and investment scams, and minors — including 14-year-olds — were identified among sextortion victims, signaling both demographic breadth and the emotional as well as financial harm these schemes cause.
Operation Jackal IV stitches together law enforcement actions from multiple continents and highlights two recurring themes: law enforcement’s emphasis on disrupting the financial underpinnings of organized cyber-enabled crime, and the increasing role of outsourced "services" — domains, call centres and laundering support — that allow distant syndicates to scale. Interpol’s public summary leaves a clear throughline: the lifeblood of these networks is money, and following those flows remains the central tactic reported during this eight-month sweep.
