Interpol cybercrime crackdown leads to 94 arrests, 45,000 IP takedowns
Operation Synergia's third season is the most productive to date
Ninety-four people were arrested as part of a global, multi-month cybercrime crackdown, Interpol revealed today.
Announcing the results of Operation Synergia III, the third iteration of the counter-cybercrime initiative that began in 2023, Interpol also said 110 individuals remain under investigation.
Operation Synergia III ran between July 18, 2025, and January 31, 2026, focusing on crimes including phishing, romance scams, and credit card fraud.
The headline figures are 212 devices seized and more than 45,000 malicious IP addresses associated with suspects sinkholed by law enforcement.
Neal Jetton, Interpol's director of the cybercrime directorate, said: "Cybercrime in 2026 is more sophisticated and destructive than ever before, but Operation Synergia III stands as a powerful testament to what global cooperation can achieve.
"Interpol remains at the forefront of this fight, uniting law enforcement agencies and private sector experts to dismantle criminal networks, disrupt emerging threats, and protect victims around the world."
A large portion of the arrests and seizures were in Bangladesh. A total of 40 suspects were arrested locally, and 134 of their devices were seized for further examination after authorities tied them to "a large range of cybercrime schemes."
These included loan and employment scams, identity theft, and credit card fraud.
Police in Togo contributed to an additional ten arrests, all of whom were suspected of assuming lead roles in a fraud ring operating within a residential area.
Interpol said each had different areas of specialism. Some were more technical and carried out crimes such as compromising social media accounts, while others were more adept at the social engineering side of things, running romance and sextortion scams, for example.
Police in Macau were responsible for the vast majority of the IP takedowns, with more than 33,000 phishing and fraud websites identified by the force.
The phishing sites impersonated legitimate organizations such as banks, government departments, and payment services, and victims had their details swiped after interacting with them.
The fraud websites here were mainly categorized as fake online casinos that would encourage victims to add money to their balances, which they would never be able to use to gamble.
Seventy-two countries participated in Operation Synergia III, with private sector support coming from Group-IB, S2W, and Trend Micro.
Robert McArdle, director of cybercrime research at Trend Micro's TrendAI unit, said: "This kind of international operation highlights the value of close collaboration between law enforcement and the cybersecurity community.
"Behind every malicious server or phishing kit sits a wider criminal ecosystem that needs to be mapped and understood before arrests become possible.
"Our support for investigations such as Tycoon2FA, and contributions to operations like this one led by Interpol, demonstrates how actionable threat intelligence can help authorities identify infrastructure, connect actors, and disrupt cybercriminal networks at scale."
When Interpol first launched Operation Synergia, it said the global effort was necessary to counter "the clear growth, escalation, and professionalism of transnational cybercrime."
Interpol announced the results of the operation's first wave (which took place between September and November 2023) in February 2024. More than two years later, the number of countries involved has grown from 52 to 72, and the number of IP seizures rose from 1,300 in Synergia I to more than 45,000 in Synergia III.
Synergia II continued the earlier campaign's focus on phishing, infostealers, and ransomware at the end of 2024, and saw 95 countries contribute to the 41 arrests. ®