Section
cybercrime
Crime Watch Global publishes international crime news, wanted-person alerts, court updates and law-enforcement reports.
Breaking news · 15 October 2026
SOURCE-LINKED COVERAGE—FBI / DOJ / INTERPOL / Europol / NCA / EFCC·See the cited source for current information
DATABASE: CYBER-GLOBAL-FRAUD-BUSTS
CYBERCRIME, FRAUD & ENFORCEMENT BUSTS
Global intelligence on cybercrime arrests, romance scam syndicates, tech-support fraud networks, business email compromise operations, drug trafficking organisations, cartel material-support prosecutions, and transnational criminal busts. Cases sourced from FBI, DOJ, EFCC, INTERPOL, NCA, HSI, DEA, Europol and partner agencies.
Cybercrime report · 24 September 2026 · Claim under investigation
Illustrative photo supplied with the report · Anadolu via Getty Images; not an image of the alleged incident.
FBI investigates ShinyHunters claim of stolen staff data
The FBI says it is investigating claims of unauthorized activity affecting FBIJobs.gov. ShinyHunters alleges it obtained sensitive details about FBI personnel and job applicants. The bureau has not confirmed the claimed theft of records on all agents, the full scope of any exposure, or the hackers' account of how the data was accessed.
Reuters said it could partially verify a sample of information but could not establish its source; the BBC also reported seeing a small sample that appeared genuine. Neither finding confirms that all FBI staff records were taken or that the bureau's internal systems were breached. No personal details from the alleged leak are reproduced here.
BBC report Reuters report FBI advisory on ShinyHunters
This is a reported investigation, not an arrest or a confirmed breach; it is not included in the enforcement-case count below.
33
Total Cases
20+
Countries
1,500+
Suspects Documented
$2.6B+
Estimated Losses
INTELLIGENCE NOTICE: All records are based on verified law enforcement press releases, court documents, and accredited news sources. Individuals are presumed innocent unless convicted. Contact relevant agencies directly to report tips or related intelligence.
MPB officers during the forced-entry raid in Nonthaburi, 22 May 2026
ARRESTEDCYBER-THAI-2026-001
Six Nigerians Arrested in Thailand Over AI-Powered Romance Scam
Date22 May 2026
LocationNonthaburi (near Bangkok), Thailand
AgencyThai Metropolitan Police Bureau (MPB)
SuspectsSix Nigerian nationals (names withheld pending charges)
Charges / Offences
Immigration violations, unlawful association; fraud charges pending
Intelligence Summary
Thai police raided three luxury condominium units near Phra Nangklao Bridge in Nonthaburi on 22 May 2026. The operation followed an earlier April 2026 cocaine trafficking arrest of a suspect identified only as 'Patrick,' whose bank accounts showed suspicious transfers linking him to a romance scam network. Officers forced entry after suspects barricaded themselves — one attempted to escape via the balcony; another hid in a bathroom texting accomplices. Devices seized were actively running scam conversations at the time of the raid. The group deployed AI-generated images and conducted fake video calls using deepfake Western identities — posing as US military personnel, pilots, doctors and engineers — to lure older Thai women into fraudulent relationships, then requested money under fabricated customs clearance fees. All six entered Thailand on student visas but attended no institutions and had no legitimate employment.
Items Seized
18 mobile phones, 3 laptops, 3 bank books, financial documents
Outcome / Status
In custody; additional fraud charges to be filed
Intelligence Report
Suspects processed at Nonthaburi condominium following the MPB raid
ARRESTEDCYBER-THAI-2026-002
Thai Police Arrest 6 Nigerians at Luxury Riverside Condo — AI Deepfake Video Calls Used
Date22 May 2026
LocationNonthaburi, Thailand
AgencyThai Metropolitan Police Bureau
SuspectsSix Nigerian nationals
Charges / Offences
Romance fraud, identity fraud, immigration violations
Intelligence Summary
A second team of Thai police arrested six Nigerians at a high-rise condominium on the Chao Phraya River in Nonthaburi. The suspects were running deepfake romance operations using AI-generated human profiles and fake premium subscription video calls. The Thai Police had originally been tracking a cocaine trafficking syndicate before discovering the romance scammers operating from the same building. Patrick and three associates were first arrested on April 18 on narcotics charges; cocaine and 2.5 million baht in assets were confiscated before the follow-up operation uncovered the wider fraud network.
Items Seized
18 cellphones, 3 computer notebooks, 3 bank books
Outcome / Status
Six individuals in custody
Intelligence Report
Chinedu Theophilus Ezike, 24, arrested in Thailand
ARRESTEDCYBER-THAI-2025-003
24-Year-Old Nigerian Arrested in Thailand Over Alleged Romance Scam
Date2025
LocationBang Sri Muang, Thailand
AgencyThai Police
SuspectsChinedu Theophilus Ezike, 24 (Nigerian national)
Charges / Offences
Romance fraud, unlawful possession of payment cards
Intelligence Summary
Thai authorities became suspicious of Ezike after he was observed acting nervously while withdrawing money. A search of his bag revealed six mobile phones, 10 ATM cards bearing different names, and 20,000 baht in cash. A subsequent raid on his apartment in Bang Sri Muang recovered 40 additional phones believed used in scam operations. Investigators linked Ezike and his Thai wife to approximately 20 related fraud cases. Ezike allegedly posed online as a wealthy Nigerian prince to deceive women into sending money. He denied unlawfully possessing other people's electronic payment cards. He was held pending completion of investigations before transfer to immigration authorities.
Items Seized
46 mobile phones total, 10 ATM cards, 20,000 baht cash
Intelligence Report
Some of the 792 suspects escorted from the Big Leaf Building, Lagos — December 2024
ARRESTEDCYBER-LAGOS-2024-001
EFCC Arrests 792 Suspects in Lagos Crypto-Romance Scam Raid — Big Leaf Building
Date10 December 2024
LocationLagos, Nigeria
AgencyEconomic and Financial Crimes Commission (EFCC)
Suspects792 suspects — including 148 Chinese nationals, 40 Filipino nationals, 1 Pakistani, 1 Indonesian
Charges / Offences
Cybercrime, identity theft, money laundering, conspiracy to commit fraud
Intelligence Summary
Nigerian authorities conducted a sweeping raid on the seven-storey Big Leaf Building in Lagos, believed to be a hub where fraudsters lured victims with romantic promises then pressured them to hand over cash for phoney cryptocurrency investments. The luxury building housed a call centre predominantly targeting victims from the Americas and Europe. Nigerian accomplices were recruited by foreign kingpins to prospect online through phishing, targeting Americans, Canadians, Mexicans and Europeans. Once victims were hooked, the foreign operatives took over the actual deception. Staff used social media platforms including WhatsApp and Instagram to seduce targets. By February 2025, 40 Chinese nationals had pleaded guilty; in January, 11 others were arraigned and pleaded not guilty. A Nigerian court heard testimony from Rowland Turaki, a cybersecurity student who was hired and instructed to pose as a woman to gain victims' trust.
Items Seized
Computers, phones, vehicles
Outcome / Status
792 in custody; multiple trials ongoing; 40 Chinese nationals pleaded guilty Feb 2025
Intelligence Report
Interpol/NCA cybercrime intelligence operations — coordinated cross-border investigations
ARRESTEDCYBER-NIGERIA-2025-001
NCA + Meta + Nigerian Police Bust Investment Scam Compound in Agbor, Nigeria
Date13 January 2025
LocationAgbor, Delta State, Nigeria
AgencyNational Crime Agency (UK), Meta, Nigerian Police Force National Cybercrime Centre
SuspectsSeven men
Charges / Offences
Online investment fraud targeting UK and US victims
Intelligence Summary
Seven men were arrested in Agbor, Nigeria, after NCA intelligence identified an active scam compound targeting UK victims through hundreds of fake Facebook accounts. The suspects impersonated cryptocurrency traders, sharing false positive reviews to lure people who used legitimate investment platforms into sending money. The compound was also recruiting and training young people to target future victims for investment fraud and phishing attacks. The NCA's Deputy Director of Fraud Nick Sharp confirmed the operation relied on close partnership with Meta and Nigerian law enforcement. The UK government's Fraud Minister Lord Hanson noted the arrests flowed from an anti-fraud agreement between the UK and Nigeria.
Items Seized
26 phones, 42 SIM cards, 1 laptop
Outcome / Status
Seven men arrested; investigations continuing
Intelligence Report
CHARGEDCYBER-EFCC-INTERPOL-001
INTERPOL & EFCC Arrest 'Mike' — Mastermind of $60M+ BEC and Romance Scam Network
Date2016–2017
LocationPort Harcourt, Rivers State, Nigeria
AgencyINTERPOL Digital Crime Centre, Nigerian EFCC, Trend Micro, Fortinet FortiGuard Labs
Suspects'Mike', 40 (Nigerian national); second associate, 38
Charges / Offences
Hacking, conspiracy, obtaining money under false pretences; BEC and romance scam fraud
Intelligence Summary
The 40-year-old Nigerian national known as 'Mike' is believed to be the head of an international criminal network responsible for scams totalling more than USD 60 million involving hundreds of victims worldwide. In one case a single target was conned into paying USD 15.4 million. His network compromised email accounts of small-to-medium businesses across Australia, Canada, India, Malaysia, Romania, South Africa, Thailand and the US. He led at least 40 individuals across Nigeria, Malaysia and South Africa who carried out BEC and romance fraud operations. Money laundering contacts in China, Europe and the US provided bank accounts for illicit cash flows. The operation was triggered by a report from Trend Micro and subsequent intelligence from Fortinet FortiGuard Labs at the INTERPOL Global Complex for Innovation (IGCI) in Singapore.
Items Seized
Multiple digital devices; forensic examination of seized assets revealed full BEC and romance scam history
Outcome / Status
Both suspects on administrative bail pending trial
Intelligence Report
DOJ press release: Nigerian national arrested in Houston, June 2025
INDICTEDCYBER-HOUSTON-2025-001
Nigerian National Arrested in Houston for Multimillion-Dollar BEC and Money Laundering Scheme
Date26 June 2025
LocationHouston, Texas, USA
AgencyFBI Houston, IRS Criminal Investigation
SuspectsEdikan Adiakpan (Nigerian national); Ayobami Omoniyi (previously charged, awaiting sentencing)
Charges / Offences
Conspiracy to commit wire fraud, money laundering conspiracy, illegal money transmission
Intelligence Summary
A federal grand jury in Houston returned a three-count indictment on 11 June 2025. In 2021, Adiakpan and co-conspirators carried out a business email compromise scheme targeting companies in at least eight US states, including a California research group developing treatments for veterans. Victims received spoofed emails appearing to come from known suppliers directing payment to fraudster-controlled bank accounts. Conspirators laundered funds by quickly transferring money between multiple accounts, then converting it into cashier's checks — with Adiakpan cashing the checks and keeping a percentage as a fee. US Attorney Nicholas J. Ganjei announced the charges; Adiakpan appeared before US Magistrate Judge Peter Bray.
Outcome / Status
In custody; faces up to 20 years on fraud/money laundering + 5 years illegal money transmission; max $250,000 fine per count
Intelligence Report
SENTENCEDCYBER-NOLA-2025-001
Nigerian Resident Sentenced to 33 Months for Years-Long Romance Scam — US Victims Lost $405,000+
Date11 December 2025
LocationNew Orleans, Louisiana, USA
AgencyFBI, US Attorney's Office Eastern District of Louisiana
SuspectsDaniel Chima Inweregbu, 40 (citizen of Lagos, Nigeria)
Charges / Offences
Conspiracy to commit mail fraud, wire fraud, use of assumed name ('Larry Pham') to commit mail fraud, money laundering conspiracy
Intelligence Summary
Acting US Attorney Michael M. Simpson announced Inweregbu's sentencing by US District Judge Nanette Jolivette Brown. Inweregbu and co-conspirators used online messaging platforms and email to contact victims, posing as 'Larry Pham' to build romantic relationships before requesting money. Once emotional attachment was established, they requested victims send money. Laundered proceeds were directed through intermediaries to conceal the nature and source of funds. Scheme resulted in actual and intended losses to four identified victims of over $405,000. The prosecution praised the DOJ Office of International Affairs and the US Department of State for cross-border support.
Outcome / Status
33 months federal imprisonment
Intelligence Report
CHARGEDCYBER-HSI-2024-001
Nigerian National Arrested for Inheritance Fraud Scheme Targeting US Elderly Victims
Date7 December 2023 (arraigned Dec 2023–Jan 2024)
LocationWashington Dulles Airport → Miami, Florida, USA
AgencyHomeland Security Investigations (HSI), DOJ Consumer Protection Branch, US Postal Inspection Service
SuspectsAmos Prince Okey Ezemma, 50, Lagos, Nigeria — plus co-defendants Ezennia Peter Neboh, Kennedy Ikponmwosa, Iheanyichukwu Jonathan Abraham, Emmanuel Samuel, Jerry Chucks Ozor (all London — arrested Spain/UK April 2022)
Charges / Offences
Conspiracy to commit mail and wire fraud, mail fraud, wire fraud
Intelligence Summary
Ezemma operated an inheritance fraud scheme for more than five years, sending personalized letters to elderly Americans falsely claiming to be a representative of a Spanish bank, telling recipients they were entitled to a multimillion-dollar inheritance from a deceased family member. Once initial fees were paid, further fabricated fees were demanded. Ezemma remained a fugitive until surrendering and being arrested at Washington Dulles Airport on 7 December 2023. Five co-defendants had already been convicted: Neboh sentenced to 128 months, Ikponmwosa 97 months, Abraham 90 months, Ozor 87 months, Samuel 82 months. All extradited from Spain by DOJ's Office of International Affairs.
Outcome / Status
Ezemma awaiting trial; co-defendants sentenced to 82–128 months federal imprisonment
Intelligence Report
ARRESTEDCYBER-GHANA-2025-001
48 Nigerians Arrested in Accra Cybercrime Raid — Romance Scams, Investment Fraud, Gold Trading
DateDecember 2025
LocationOutskirts of Accra, Ghana
AgencyGhana Government / Ghana Police Service
Suspects48 Nigerian nationals (including 2 women)
Charges / Offences
Romance scams, online investment fraud, impersonation schemes, illicit online gold trading
Intelligence Summary
A nighttime raid on the outskirts of Accra led to the arrest of 48 suspected cybercrime operators. Ghana's Information Minister Sam George confirmed the arrests via X (Twitter). The suspects were accused of planning and executing romance scams, online investment fraud, impersonation schemes and illicit online gold trading. Ghana had recently introduced restrictions on gold trade, including limits on foreign purchases, to combat informal mining. The raids came amid growing concern over cybercrime operations being run from Ghanaian territory by foreign nationals.
Outcome / Status
48 in custody; investigations ongoing
Intelligence Report
ARRESTEDCYBER-GHANA-2025-002
141 Nigerians Arrested in Ghana Over Mobile Money Fraud and Business Email Compromise
Date2025
LocationGhana
AgencyGhana Police Service / Cybercrime Unit
Suspects141 Nigerian nationals
Charges / Offences
Mobile money fraud, business email compromise (BEC) scams
Intelligence Summary
Ghana authorities arrested 141 Nigerian nationals in connection with mobile money fraud and business email compromise scams. The operation targeted networks running sophisticated fraud schemes exploiting Ghana's mobile financial infrastructure. Ghana has become an increasingly important jurisdiction for cybercrime enforcement operations given the country's growing digital economy and the presence of foreign-run scam operations.
Outcome / Status
141 in custody
Intelligence Report
Suspects arrested in Melaka, Malaysia following pre-dawn syndicate raids
ARRESTEDCYBER-MALAYSIA-2025-001
Three Nigerians & Indonesian Woman Arrested for Love Scam Syndicate in Melaka
Date12 August 2025
LocationTaman Klebang Jaya, Melaka, Malaysia
AgencyRoyal Malaysia Police (RMP) — Melaka Police
SuspectsThree Nigerian men (aged 39–47), one Indonesian woman
Charges / Offences
Section 420 Penal Code (cheating), Section 15(1)(C) Immigration Act 1959/1963
Intelligence Summary
Melaka Police Chief Datuk Dzulkhairi Mukhtar announced the arrest of three Nigerian men and an Indonesian woman following pre-dawn raids at 2:45am on three apartment units in Taman Klebang Jaya. The syndicate had been operating from the premises for six months, using Facebook accounts with various aliases to target victims locally and abroad. They deceived victims into transferring money to e-wallet accounts. Social media analysis found the syndicate was actively recruiting victims at the time of the raids. All suspects entered Malaysia on student passes but misused them to operate the fraud syndicate.
Items Seized
Computers and mobile phones worth RM15,000
Outcome / Status
All four remanded 14 days until 25 August 2025
Intelligence Report
ARRESTEDCYBER-MALAYSIA-2021-001
Six Nigerians Arrested in Malaysia — '$64,000 Love Scam' Targeting Singapore & Malaysia Victims
DateLate June 2021
LocationKuala Lumpur, Malaysia
AgencyRoyal Malaysia Police CCID, Singapore CAD (joint operation)
SuspectsSix Nigerian men; one Malaysian woman (money laundering)
Charges / Offences
Love scam fraud, money laundering
Intelligence Summary
Singapore's Commercial Affairs Department (CAD) worked with Malaysia's Commercial Crime Investigation Department (CCID) in a joint operation to cripple a transnational love scam syndicate. The group is believed to have scammed victims of USD 64,000 in five Singapore cases and 3.7 million Malaysian ringgit in eight Malaysia cases. Raids were conducted on two Kuala Lumpur locations. The investigation was triggered when a Singaporean female victim reported she had been defrauded after her online boyfriend told her he was sending a parcel containing a handbag and accessories, then claimed she needed to pay RM1,000 in delivery charges. After paying, she was asked for more cash in person and became suspicious. The Singapore Anti-Scam Centre extensively investigated the complaint before identifying the Malaysia-based syndicate.
Items Seized
8 laptops, 17 mobile phones, 3 thumb drives, 2 ATM cards, 2 modems, 2 WiFi routers, 2 passports
Outcome / Status
Six Nigerians arrested; Malaysian woman charged with money laundering (29 June 2021)
Intelligence Report
INDICTEDCYBER-LA-2019-001
FBI Charges 80 Nigerian Nationals in $68M Romance & BEC Fraud — 'One of the Largest Cases in US History'
DateAugust 2019
LocationLos Angeles, California, USA
AgencyFBI Los Angeles
Suspects80 defendants — mostly Nigerian nationals; 14 arrested in LA; others still at large at time of unsealing
Charges / Offences
Conspiracy to commit fraud, conspiracy to launder money, aggravated identity theft, additional fraud and money laundering charges
Intelligence Summary
US authorities unsealed a 252-count federal grand jury indictment charging 80 people with fraud and money laundering. The alleged criminal network targeted the elderly and individuals susceptible to romance scams, stealing $8.8 million outright and attempting to steal an additional $59 million. US Attorney Nick Hanna called it 'one of the largest cases of its kind in US history.' The FBI investigation began in 2016 from a single bank account and one victim, growing to encompass hundreds of victims worldwide. A Japanese woman 'FK' lost USD 200,000 after a 10-month online romance with a US soldier stationed in Syria named 'Terry Garcia' — sending money to accounts in the US, Turkey and the UK across 35–40 payments. The investigation ran to Los Angeles and Nigeria and targeted businesses, the elderly and romance scam victims.
Outcome / Status
14 defendants arrested in LA at time of unsealing; extradition sought for remaining defendants; faces up to 20 years per fraud count
Intelligence Report
ARRESTEDCYBER-OGUN-2025-001
Ogun Forest Meth Cartel Busted — 3 Mexicans & 7 Nigerians Arrested
Date2025
LocationOgun State Forest, Nigeria
AgencyNigerian Law Enforcement
Suspects10 arrested: Martinez Felix Nemecto (Mexican), Jesus López Valles (Mexican), Juan Carlos Tornet (Mexican), Nwankwo Sunday Christian (Nigerian/Igbo), King Abuchi Remijus (Nigerian/Igbo), Ifeanyichukwu Chibuike Joshua (Nigerian/Igbo), Uchenna Victors Nnah (Nigerian/Igbo), Anochili Innocent (Nigerian/Igbo), Kingsley Orike Omonughwa (Nigerian/Southern), Emeka Nwobum (Nigerian/Igbo)
Charges / Offences
Methamphetamine cartel operations, drug trafficking
Intelligence Summary
A joint security operation in Ogun State Forest resulted in the arrest of 10 individuals from a methamphetamine cartel — 3 Mexican nationals and 7 Nigerians. The discovery of a Mexican-Nigerian drug production operation in Ogun State signals growing transnational cartel activity in West Africa. Mexican cartel members were found operating deep within Nigerian territory, using forest cover for clandestine meth lab operations.
Outcome / Status
10 in custody
Intelligence Report
ARRESTEDCYBER-NIGERIA-CHINA-2026-001
Nigeria Repatriates Chinese National Accused in $245 Million Ponzi Scheme
DateMay 2026
LocationNigeria
AgencyNigerian Authorities / International Law Enforcement
SuspectsChinese national (name withheld)
Charges / Offences
$245 million Ponzi scheme
Intelligence Summary
Nigeria repatriated a Chinese national accused of masterminding a USD 245 million Ponzi scheme, in a significant international law enforcement operation. Authorities confirmed the suspect's arrest following coordinated cross-border efforts. The case highlights growing cooperation between Nigeria and China on financial crimes, with Nigeria increasingly serving as a battlefield for transnational financial crime enforcement against both domestic and foreign-operated schemes.
Outcome / Status
Repatriated; in custody
Intelligence Report
GUILTY PLEACYBER-RI-FBI-2026-001
FBI Shuts India Call Centre Empire — Two US Executives Plead Guilty; Five Indian Nationals Convicted
Date20 May 2026 (guilty pleas); investigation since 2020
LocationProvidence, Rhode Island, USA / India (multiple call centres)
AgencyFBI (Boston & Rhode Island Divisions), India Central Bureau of Investigation (CBI)
SuspectsAdam Young, 42, former CEO, Miami FL; Harrison Gevirtz, 33, former CSO, Las Vegas NV — plus Indian nationals Sahil Narang, Chirag Sachdeva, Abrar Anjum, Manish Kumar (convicted); one former company employee (convicted)
Charges / Offences
Misprision of a felony (Young & Gevirtz); telemarketing fraud, conspiracy (Indian nationals). Young & Gevirtz also operated their own call centre in Tunisia from 2016–2022.
Intelligence Summary
Former CEO Adam Young and CSO Harrison Gevirtz pleaded guilty for operating a telecommunications company — providing phone numbers, call routing, tracking and forwarding services — to customers they knew were running tech-support fraud schemes against elderly Americans. From 2016–2022 the schemes deployed fake browser pop-up alerts claiming malware infection, directing victims to call centre numbers where agents pressured them into paying hundreds of dollars for unnecessary services, and in some cases remotely accessed victims' computers to steal personal and financial data. Young and Gevirtz not only failed to report fraud to law enforcement from 2017 onward despite dozens of complaints, but actively advised customers on how to avoid detection and prevent account termination, and facilitated introductions between fraud operators and other support providers. They also directed employees to market their services to known scammers. The FBI investigation began in 2020. India's CBI dismantled the call centre operations in December 2025, arresting six Indian nationals who led the criminal syndicates. Approximately 660 US victims reported losses totalling $48,778,230; Maryland victims alone lost $6.26M. The FBI notes tech-support scams cost Americans $2.1 billion last year, with Rhode Island residents losing at least $5.7 million.
Items Seized
Call centre infrastructure dismantled; six Indian nationals arrested by CBI Dec 2025
Outcome / Status
Young & Gevirtz: sentencing scheduled 16 June 2026. Five India-based fraudsters previously convicted. FBI Baltimore / Montgomery County collaboration secured 8 US arrests and 6 convictions.
Intelligence Report
ARRESTEDCYBER-EUR-VPN-2026-001
Europol & France/Netherlands Dismantle 'First VPN' — Criminal Network Used in Every Major Cybercrime Investigation
Date19–20 May 2026
LocationFrance, Netherlands, Ukraine (infrastructure across multiple countries)
AgencyFrench and Dutch authorities, Eurojust, Europol; investigation from May 2022
SuspectsOne suspect interviewed in Ukraine; additional users identified and notified
Charges / Offences
Operating criminal VPN infrastructure for hackers, ransomware actors, cybercriminals
Intelligence Summary
French and Dutch authorities, supported by Eurojust and Europol, dismantled 'First VPN' — a criminal virtual private network service that appeared in nearly every major cybercrime investigation supported by Europol. The service marketed itself directly to criminals, promising complete anonymity, refusing judicial cooperation, and claiming not to store user data. It was advertised openly on criminal forums. Eurojust opened the investigation in May 2022; a joint French-Dutch investigation team was established in November 2023. On 19–20 May 2026, 33 servers linked to the service were shut down and domain names 1vpns[.]com, 1vpns[.]net, 1vpns[.]org and associated onion domains were seized. A house search was carried out and a suspect was interviewed in Ukraine. Users of the service were notified that the network was down and that they had been identified.
Items Seized
33 servers seized; domains 1vpns[.]com, 1vpns[.]net, 1vpns[.]org and onion domains seized
Outcome / Status
Infrastructure dismantled; users identified and notified; investigation continuing
Intelligence Report
ARRESTEDCYBER-MENA-RAMZ-2026-001
Operation Ramz: 201 Arrests Across 13 MENA Nations — Phishing, Malware, Online Fraud Crackdown
DateOctober 2025 – February 2026
LocationMiddle East & North Africa (Algeria, Morocco, Qatar, Jordan, Oman and 8 other countries)
AgencyLaw enforcement agencies from 13 MENA countries (coordinated operation)
Suspects201 arrested; 382 additional suspects identified; 3,867 victims identified
Charges / Offences
Phishing-as-a-service (PhaaS), malware distribution, online fraud, human trafficking (Jordan)
Intelligence Summary
Operation Ramz was a large-scale coordinated cybercrime crackdown across the Middle East and North Africa involving 13 countries, running from October 2025 to February 2026. Authorities arrested 201 people, identified 382 additional suspects and 3,867 victims, and seized 53 servers. In Algeria, police dismantled a phishing-as-a-service operation, seizing a server hosting phishing tools and scripts alongside computers, mobile phones and hard drives. In Morocco, authorities confiscated devices containing stolen banking data and phishing software. In Qatar, compromised devices distributing malware were discovered and secured. In Jordan, a sophisticated fake online trading platform was uncovered — during raids police discovered that 15 participants were actually human trafficking victims recruited from Asian countries under false job offers, with passports confiscated. Two alleged ringleaders were arrested. In Oman, a compromised server in a private residence was shut down after being found infected with malware due to critical security vulnerabilities.
Items Seized
53 servers seized; computers, mobile phones, hard drives
Outcome / Status
201 arrested; 382 suspects identified; human trafficking victims rescued in Jordan
Intelligence Report
ARRESTEDCYBER-KOR-SMS-2026-001
South Korea Arrests 36 in Massive SMS Phishing Ring — 580 Million Fraudulent Texts Sent
Date2026 (investigation Jan 2024–Mar 2025)
LocationSouth Korea
AgencySouth Korean Police
Suspects36 arrested — CEO and employees of bulk messaging firms, MVNO worker; 62 search operations conducted
Charges / Offences
SMS phishing, voice-phishing, caller ID spoofing, fraudulent impersonation of banks and financial institutions
Intelligence Summary
South Korean police arrested 36 people connected to a massive SMS phishing and spam operation that allegedly sent more than 580 million fraudulent text messages over 15 months. The group manipulated caller IDs so messages and calls appeared to come from legitimate financial institutions and telecoms providers. A telco company employee identified only as 'A' provided network access credentials to the phishing group, allowing remote access for caller ID spoofing, and was found to have a prior conviction for providing similar infrastructure to phishing groups. The operation also conducted around 180,000 fraudulent voice advertisements from January 2024 to March 2025, with scammers posing as financial officials or police to pressure victims into transferring money by claiming involvement in criminal investigations. 41 victims were identified in the voice-phishing scheme with losses of 9.4 billion won (~$6.8M); a separate SMS phishing campaign linked to the same network caused losses of 8.6 billion won. Police conducted 62 search and seizure operations and secured court approval to forfeit approximately 8.92 billion won in criminal proceeds.
Items Seized
8.92 billion won (~$6.5M) in proceeds ordered forfeited; telecommunications infrastructure
Outcome / Status
36 arrested; sentencing pending
Intelligence Report
ARRESTEDCYBER-UKR-RETAIL-2026-001
Ukrainian 18-Year-Old Arrested for Hacking 30,000 US Retailer Accounts — $721,000 in Unauthorized Purchases
Date2026
LocationOdesa, Ukraine
AgencyUkrainian Authorities (alerted by US law enforcement)
Suspects18-year-old male resident of Odesa, Ukraine (name withheld)
Charges / Offences
Unauthorized access to computer systems, data theft, fraud, cryptocurrency transactions with criminal proceeds
Intelligence Summary
Ukrainian authorities detained an 18-year-old suspect linked to an international cybercrime operation that compromised nearly 30,000 customer accounts belonging to a California-based US online retailer, with attacks occurring between 2024 and 2025. At least 5,800 of the compromised accounts were used to make unauthorized purchases totalling approximately $721,000, causing over $250,000 in losses including chargeback costs. Cybercriminals used info-stealing malware to infect devices and collect login credentials and session data. The stolen information was processed and sold through online platforms and Telegram channels. The Odesa suspect managed online infrastructure used to process, sell and exploit the stolen data, and used cryptocurrency services to transact with accomplices. Police searched two properties, seizing mobile phones, computers, bank cards and electronic storage devices, finding credentials for platforms used to sell stolen data, email accounts linked to compromised users, server activity logs and cryptocurrency exchange information.
Items Seized
Mobile phones, computers, bank cards, storage devices, cryptocurrency exchange data, stolen credentials databases
Outcome / Status
In custody; investigation continuing
Intelligence Report
EXTRADITEDNARC-TDA-HOUSTON-2026-001
Tren de Aragua High-Ranking Leader Extradited from Colombia to US on Terrorism & Drug Charges
Date15 May 2026 (initial appearance); arrested Colombia 31 March 2025
LocationHouston, Texas, USA (extradited from Bogotá, Colombia)
AgencyUS Attorney's Office Southern District of Texas, Joint Task Force Vulcan (JTFV), Colombian National Police, Colombian Attorney General's Office
SuspectsJose Enrique Martinez Flores aka 'Chuqui', 24, Venezuelan national — high-ranking TdA leader in Bogotá, inner circle of senior TdA leadership. Co-defendants still at large: Yohan Jose Romero aka Johan Petrica, 48; Juan Gabriel Rivas Nunez aka Juancho, 45; Giovanni Vicente Mosquera Serrano aka El Viejo, 38 (FBI 10 Most Wanted)
Charges / Offences
Conspiracy to provide material support to a designated Foreign Terrorist Organization (Tren de Aragua); providing material support to TdA (personnel and services); international drug distribution conspiracy (5+ kg cocaine intended for US distribution)
Intelligence Summary
Jose Enrique Martinez Flores, known as 'Chuqui', became the first Tren de Aragua member extradited from Colombia to the United States. He is alleged to be a high-ranking leader of TdA in Bogotá and part of the inner circle of senior TdA leadership. Colombian authorities arrested him on 31 March 2025 pursuant to a US provisional arrest warrant. He made his initial appearance on 15 May 2026 before US Magistrate Judge Christina A. Bryan in Houston. The Department of State designated TdA as a Foreign Terrorist Organization and Specially Designated Global Terrorist on 20 February 2025. As a TdA leader, Flores allegedly oversaw criminal activities in Colombia including drug trafficking, extortion, prostitution and murder. A federal grand jury returned a second superseding indictment on 16 December 2025 naming three other TdA leaders still at large. Co-defendant Giovanni Vicente Mosquera Serrano is on the FBI's 10 Most Wanted Fugitives list. The Department of State offers rewards of up to $4M for Jose Romero and up to $5M for Mosquera Serrano.
Outcome / Status
Flores in custody in Houston; three named co-defendants remain fugitives. Faces up to life imprisonment and $10M fine if convicted.
Intelligence Report
GUILTY PLEANARC-CARTEL-MO-2026-001
Mexican National Pleads Guilty to Providing Material Support to Cárteles Unidos — Designated Foreign Terrorist Organization
Date20 May 2026
LocationKansas City, Missouri, USA
AgencyFBI Kansas City & St. Louis, DEA, Rolla Area Drug Enforcement, US Postal Inspection Service, HSI Knoxville, KCPD
SuspectsJose C. Valencia-Soriano aka Jose C. Soriano-Valencia, 34, of Kansas City, MO (Mexican national)
Charges / Offences
Providing material support and resources (including himself and currency) to Cárteles Unidos — a designated Foreign Terrorist Organization and Specially Designated Global Terrorist organisation
Intelligence Summary
Jose C. Valencia-Soriano pleaded guilty in federal court to one count of providing material support to Cárteles Unidos, a Michoacán, Mexico-based cartel and transnational criminal and drug trafficking organisation controlling large areas of Michoacán. The US Department of State designated Cárteles Unidos as both an FTO and SDGT on 20 February 2025. From 20 February 2025 to 27 March 2025, Valencia-Soriano admitted to obtaining large shipments of methamphetamine concealed in liquids from Cárteles Unidos members, then extracting the meth from the liquid, selling it for profit, and laundering US currency back to the cartel. On 25 February 2025, a search warrant at his Kansas City home uncovered 102 pounds of crystal methamphetamine and approximately 460 pounds of liquid-concealed methamphetamine mixture awaiting processing — two separate areas of the home were set up as meth extraction labs. Two illegal firearms were also recovered.
Items Seized
102 lbs crystal methamphetamine, ~460 lbs meth mixture in liquid, 2 illegal firearms, processing equipment
Outcome / Status
Pleaded guilty; faces up to 20 years federal prison without parole; sentencing date pending
Intelligence Report
SENTENCEDNARC-WA-MITCHELL-2026-001
44 Holly Crips Member Sentenced to 6 Years — Helped Distribute 800,000 Fentanyl Pills Across US; Gun Linked to 3 Seattle Shootings
Date21 May 2026
LocationKent / Seattle, Washington, USA
AgencyFBI Seattle (+ Phoenix, Atlanta, Kansas City, Dallas, Las Vegas, Montana), DEA, Seattle PD, King County Sheriff, Whatcom Gang/Drug Task Force, HSI, Lummi PD, Bureau of Indian Affairs
SuspectsTreyvon Mitchell, 33, Kent, WA — known as 'Makin Money Mitch'; co-conspirator drug trafficking leader Marquise Jackson (indicted separately)
Charges / Offences
Conspiracy to distribute controlled substances; drug trafficking and firearms
Intelligence Summary
Treyvon Mitchell, a high-level member of the Jackson Family Drug Trafficking Organization and known member of the 44 Holly Crips street gang, was sentenced to 6 years in federal prison. The Jackson Family DTO distributed more than 800,000 fentanyl pills throughout the United States including Arizona, Texas, Missouri, Montana and Georgia. Law enforcement seized over 846,000 fentanyl pills, nearly 7 kilograms of fentanyl powder, 7 kilograms of cocaine and 29 firearms over the course of the investigation. A search of Mitchell's home in October 2024 recovered four firearms — one linked by shell casings to three separate Seattle-area shootings: a June 2021 shooting injuring two near an elementary school in central Seattle; a September 2021 shooting where a man was pistol-whipped and his car shot up; and a July 2022 shooting outside a Renton bar. Wiretap evidence shows Mitchell discussing drug distribution and sex trafficking with Marquise Jackson. His gold chains — seized as proceeds of crime — bore large diamond-encrusted '44' symbols representing his gang affiliation.
Items Seized
846,000+ fentanyl pills, ~7kg fentanyl powder, 7kg cocaine, 29 firearms (one linked to 3 shootings), gold gang-insignia jewellery
Outcome / Status
6 years federal prison; Marquise Jackson and other co-defendants face separate proceedings
Intelligence Report
SENTENCEDNARC-LA-TOLIVER-2026-001
Texas Man Sentenced to 10 Years for Transporting 2 Kilograms of Cocaine into Louisiana
Date19 May 2026
LocationNew Orleans, Louisiana, USA (Eastern District of Louisiana)
AgencyFBI, Jefferson Parish Sheriff's Office, Louisiana State Police
SuspectsCorey Toliver aka 'Woog', 46, Texas resident
Charges / Offences
Possession with intent to distribute 500 grams or more of cocaine
Intelligence Summary
Corey Toliver, known as 'Woog', was sentenced on 19 May 2026 after pleading guilty to transporting and possessing approximately 2 kilograms of cocaine with intent to distribute into and within the Eastern District of Louisiana in April 2025. The case was investigated by the FBI, Jefferson Parish Sheriff's Office and Louisiana State Police and prosecuted by AUSA Lynn E. Schiffman of the Narcotics Unit.
Outcome / Status
120 months (10 years) federal imprisonment; 8 years supervised release; $100 mandatory special assessment
Intelligence Report
SENTENCEDNARC-CA-CARGILL-2026-001
Vacaville Man Sentenced to 15 Years — Meth and Loaded Glock Seized in Operation Take Back America
Date19 May 2026
LocationSacramento / Vacaville, California, USA
AgencyFBI, Vacaville PD, Fairfield PD, ATF
SuspectsJames Cargill, 45, Vacaville, CA
Charges / Offences
Possession of methamphetamine with intent to distribute; possession of a firearm in furtherance of drug trafficking
Intelligence Summary
James Cargill was sentenced by Senior US District Judge John A. Mendez to 15 years in prison. On 21 January 2025, police found Cargill in possession of more than a pound of methamphetamine. He was arrested and released on parole, then re-arrested on 9 May 2025 with just under half a pound of methamphetamine and a loaded Glock 20 semi-automatic pistol. Cargill pleaded guilty on 10 February 2026. This case is part of Operation Take Back America — the nationwide DOJ initiative targeting cartels, transnational criminal organisations and violent crime.
Items Seized
1+ lb methamphetamine (first arrest), ~0.5 lb methamphetamine + loaded Glock 20 (second arrest)
Outcome / Status
15 years federal prison
Intelligence Report
CONVICTEDNARC-MN-CRYER-2026-001
Minnesota Man Convicted of Meth & Cocaine Conspiracy — Caught Leaving Drug Stash House with 140 Pounds of Narcotics
Date14 May 2026
LocationSt. Paul, Minnesota, USA
AgencySt. Paul PD, HSI, Minnesota BCA, FBI, ATF
SuspectsJumoke Ace Maceo Cryer, 38 — previously convicted of distributing meth in 2016
Charges / Offences
Conspiracy to distribute methamphetamine and cocaine; possession of body armour by a prohibited person
Intelligence Summary
Jumoke Ace Maceo Cryer was found guilty after a 3-day jury trial before Judge Jeffrey M. Bryan in US District Court. Cryer conspired with co-defendants to distribute large quantities of methamphetamine and cocaine. Video evidence shows him entering a St. Paul drug stash house and leaving with 140 pounds of illegal narcotics. A search of his home resulted in the seizure of body armour, which he was prohibited from possessing due to his violent criminal history. Cryer is the second defendant convicted as part of this drug trafficking conspiracy.
Items Seized
140 lbs narcotics at stash house, body armour
Outcome / Status
Guilty verdict; sentencing pending before Judge Jeffrey M. Bryan
Intelligence Report
GUILTY PLEANARC-WV-GREEN-2026-001
Putnam County Man Pleads Guilty to Three Fentanyl Distribution Counts — Part of 8-Person Federal Indictment
Date21 May 2026
LocationCharleston, West Virginia, USA (Southern District of WV)
AgencyFBI, Metropolitan Drug Enforcement Network Team (MDENT) — Charleston PD, Kanawha County Sheriff, Putnam County Sheriff, Nitro PD, St. Albans PD, South Charleston PD
SuspectsDemetrius Fitzgerald Green aka 'D', 42, Scott Depot, WV
Charges / Offences
Three counts of distribution of 40 grams or more of a mixture containing fentanyl (3 separate transactions)
Intelligence Summary
Demetrius Fitzgerald Green pleaded guilty to three counts of fentanyl distribution. On 18 February 2026, 27 February 2026 and 18 March 2026, Green sold quantities of fentanyl exceeding 40 grams in each transaction in Charleston. He is among eight individuals indicted as a result of a federal investigation of fentanyl trafficking in the Charleston area — charges against the remaining defendants are pending.
Outcome / Status
Sentencing 2 September 2026; mandatory minimum 5 years, maximum 40 years federal prison; at least 4 years supervised release; fine up to $5M
Intelligence Report
GUILTY PLEANARC-WV-GRAVES-2026-001
West Virginia Man Pleads Guilty to 3.3kg Meth Seizure — Two Loaded Firearms, Fentanyl, Heroin Also Recovered
Date21 May 2026
LocationSt. Albans, West Virginia, USA (Southern District of WV)
AgencySt. Albans Police Department
SuspectsJustin Dale Graves, 43, St. Albans, WV
Charges / Offences
Possession with intent to distribute 500g+ methamphetamine; possession of a firearm in furtherance of a drug-trafficking crime
Intelligence Summary
Justin Dale Graves pleaded guilty following a search warrant executed at his residence on 30 October 2024 by St. Albans Police. Officers seized over 3.3 kilograms of methamphetamine, a loaded Hi-Point model C-9 9mm pistol, a loaded Glock model 19 9mm pistol, 37.69 grams of fentanyl, 17.17 grams of cocaine, 2.29 grams of heroin, two digital scales, various live ammunition rounds, a drug ledger and $1,190 cash. The day prior to the search warrant, Graves had sold approximately 27.21 grams of methamphetamine to a confidential informant for $225. This case is part of Operation Take Back America.
Items Seized
3.3+ kg methamphetamine, Hi-Point C-9 9mm, Glock 19 9mm, 37.69g fentanyl, 17.17g cocaine, 2.29g heroin, drug ledger, $1,190 cash
Outcome / Status
Sentencing 2 September 2026; mandatory minimum 15 years, maximum life in prison; fine up to $10.25M
Intelligence Report
SENTENCEDNARC-WV-MARSH-2026-001
Two Morgantown Residents Sentenced in WV Drug Ring — 25-Defendant Case Totals 196 Years in Combined Sentences
Date15 May 2026
LocationMorgantown, West Virginia, USA (Northern District of WV)
AgencyFBI, ATF, DEA, WV State Police, Monongalia County Sheriff, Morgantown PD, WVU PD, Mon Metro Drug Task Force (HIDTA)
SuspectsJeffrey Marsh, 47, Morgantown WV (78 months); Bobbie Jo Phillips, 39, Morgantown WV (time served — 22 months); ringleader Rodney Johnson (sentenced 188 months, March 2025)
Charges / Offences
Drug trafficking — methamphetamine, fentanyl, cocaine; firearms
Intelligence Summary
Jeffrey Marsh and Bobbie Jo Phillips were sentenced in a sweeping drug trafficking prosecution involving 25 defendants who between them received a combined 196 years in prison. The operation was led by Rodney Johnson, sentenced to 188 months in March 2025. Phillips worked within Johnson's Morgantown-area distribution ring; her residence was searched and officers seized a handgun, cash, crack cocaine, methamphetamine, fentanyl and drug paraphernalia. Of the 25 defendants, 23 including Johnson, Phillips and Marsh have now been sentenced. Fentanyl has been designated by President Trump as a weapon of mass destruction. This case is part of Operation Take Back America.
Items Seized
Handgun, cash, crack cocaine, methamphetamine, fentanyl, drug paraphernalia (Phillips' residence)
Outcome / Status
Marsh: 78 months federal prison. Phillips: time served (22 months). Johnson: 188 months. Combined ring: 196 years prison across 23 sentenced defendants.
Intelligence Report
ARRESTEDCYBER-GH-CSA-2025-001
CSA & CID Arrest 39 Suspects in Joint Cybercrime Raid at Adom City Estate, Tema — Suspected Fraud Hub
Date21 August 2025
LocationAdom City Estate, Tema Community 25, Greater Accra, Ghana
AgencyCyber Security Authority (CSA) & Criminal Investigations Department (CID), Ghana Police Service
Suspects39 individuals including three suspected minors (names withheld pending charges)
Charges / Offences
Online fraud, financial scams, cyber-enabled crimes; charges pending forensic analysis of seized devices
Intelligence Summary
A joint operation by the Cyber Security Authority (CSA) and the Criminal Investigations Department (CID) led to the arrest of 39 individuals at Adom City Estate, Tema Community 25, Greater Accra, in the early hours of 21 August 2025, marking a significant crackdown on cybercrime networks. The suspects were apprehended following intelligence-led surveillance of a suspected cyber fraud hub believed to be operating within the residential enclave. The raid was carried out with heavy security. Among those arrested were three suspected minors. All 39 individuals were placed in police custody and processed for court. The operation forms part of a wider national strategy to combat online fraud, financial scams, and related cyber-enabled crimes that continue to affect individuals and institutions across Ghana. The Cyber Security Authority urged the public to remain vigilant.
Items Seized
Digital devices, laptops, mobile phones, financial documents (all seized for forensic analysis)
Outcome / Status
All 39 in custody; processed for court. Forensic analysis of seized devices ongoing.
Intelligence Report
ARRESTEDCYBER-US-NH-2026-001
New Haven Woman Arrested for Intentionally Hitting Man with Car — Domestic Violence Incident
DateMay 2026
LocationMain Street & Charter Oak Avenue, East Haven, Connecticut, USA
AgencyEast Haven Police Department, New Haven, Connecticut
SuspectsChristina Cooper, 27, of New Haven, Connecticut
Charges / Offences
Second-degree assault; first-degree reckless endangerment; second-degree breach of peace; illegal operation of motor vehicle under suspension; reckless driving; failure to drive in proper lane
Intelligence Summary
Christina Cooper, 27, of New Haven, was arrested after East Haven police responded to reports of a pedestrian struck by a motor vehicle on Main Street and Charter Oak Avenue at approximately 9:45 a.m. An injured man was transported to Yale New Haven Hospital for treatment. Witness statements and CCTV footage reviewed by investigators indicated the incident was intentional and stemmed from a domestic violence-related dispute prior to the collision. Cooper was taken into custody and charged with multiple offences. She was held on a $150,000 bond and scheduled to appear in state Superior Court in New Haven.
Items Seized
Vehicle seized as evidence; CCTV footage obtained
Outcome / Status
Held on $150,000 bond; Superior Court appearance scheduled
Intelligence Report
REPORT CYBERCRIME INTELLIGENCE
If you have information about cybercrime, romance scam operations, or fraud networks, contact the relevant agency below.
FBI (USA)
tips.fbi.gov
EFCC (Nigeria)
efccnigeria.org
NCA (UK)
nationalcrimeagency.gov.uk
INTERPOL
interpol.int
IC3 (Internet Crime)
ic3.gov