Technology giants Meta, Google, Microsoft and OpenAI have spearheaded a major international operation to disable West African scam networks, dismantling more than 3.7 million Facebook and Instagram accounts, pages and groups tied to fraud. The crackdown also revealed human trafficking, recovered victims, and seized both funds and devices. The effort was formally announced on October 13, 2026, following a week-long Joint Disruption Week that began October 6. Hosted in London by the United Kingdom’s National Crime Agency (NCA), the initiative united law enforcement and tech firms in operations across Nigeria, Ghana, and other countries. Through the sweep, 28 suspects were arrested, and 117 individuals coerced into scam work were liberated. £
Multiple Fraud Methods, Not Technical Hacks
Rather than deploying malware, these networks relied on classic social engineering schemes including romance scams, impersonation, advance-fee investments and fake job offers. Perpetrators befriended victims under false pretenses—romantic, professional, or otherwise—then lured them into sham investments or pressured them with fake law enforcement threats. Military impersonation, bogus goods, and promises to recover stolen money were also part of their toolbox. Job schemes demanded fees up front or involved identity theft and financial exploitation. The frauds rarely involved vulnerabilities or exploits—trust, fear and false authority were the attackers’ main weapons.
Behind the scenes, analysts mapped over 35,000 malicious domains and nearly 700 communication channels tied to African scam centers. By tracking web infrastructure, financial flows, communication links and online accounts, law enforcement linked digital operations with physical locations. A raid in Sasaabi, near Accra, Ghana, led to 19 arrests, the seizure of 303 electronic devices, and the identification of 117 trafficking victims, many lacking freedom, food and basic security. In Nigeria, nine more arrests were made and 53 devices seized. In total, at least 89 fraud victims have been identified with reported losses of approximately US $8.3 million.
Platforms, Funds and Collaborations
Meta removed millions of perpetrating accounts, particularly those masquerading as US or British users targeting people in the United States and United Kingdom. Microsoft, Google, and OpenAI also suspended suspected entities, although platform-specific removal numbers were not disclosed for all. OpenAI additionally leveraged artificial intelligence to help detect scam networks and provided intelligence leads. Financial tracing uncovered over $11 million in potentially freezable funds. Coinbase halted at least $415,000 in potential victim losses, and continued investigations suggest not all illicit funds have been seized.
Those trafficking victims freed in Ghana were found in harsh conditions, detained against their will, and exposed to physical and psychological abuse. Authorities stressed that some people facilitating scam messages are victims themselves.
Investigators cautioned that the disrupted networks may not represent the whole picture. Some organizations may remain active despite closures or arrests. Victims and potential victims are encouraged to preserve communications, payment records, and transaction data. They are advised to report fraud, stop sending money, and avoid schemes that promise to return stolen cryptocurrency for more payments.
Indicators of compromise such as malware samples, IP addresses, domains, or file hashes were not publicly shared, though firms did map domains and communication channels. All sensitive data remains under wraps to prevent misuse.
Authorities describe this operation not as a single takedown but a coordinated chokehold: account removals, financial tracing, arrests, device seizures, and victim rescues. It’s a holistic disruption rather than a surgical strike.
This global intervention underscores the evolving tactics of online fraud—less about technical hacking, more about relationship building, manipulation and systemic exploitation. It also highlights that interdiction must span platforms, financial systems, and geographies. Going forward, timely intelligence sharing, rigorous financial tracing, and careful victim identification will remain essential tools. What’s being controlled today may rebound tomorrow if the infrastructure remains resilient. Stay alert, document every correspondence, scrutinize claims of authority, and never pay for promised recoveries—especially in cryptocurrency.
