A global anti-fraud operation across 97 countries and territories has led to 5,811 arrests and the interception of USD 293 million in illicit assets, marking a major law enforcement action against social engineering scams.
INTERPOL has announced that Operation First Light 2026 ran from January 15 to April 30, 2026, focusing on online fraud networks involved in impersonation scams, investment fraud, romance scams, sextortion, business email compromise, illegal online gambling and related money laundering activity. The operation followed an intelligence-sharing phase between participating countries before enforcement action began.
🚨 5,800+ arrests,
USD 293 million intercepted across 97 countriesThe
results of Operation First Light 2026 highlight the global scale of
social engineering fraud and associated money
laundering.Coordinated by INTERPOL, the operation
targeted the criminal networks behind… pic.twitter.com/ArRit7NmMp—
INTERPOL (@INTERPOL_HQ) July
9, 2026
Operation First Light Targets Global Social Engineering Scams
Operation First Light 2026 focused on fraud schemes where criminals exploit trust, fear or urgency to make victims transfer money or reveal sensitive information. These scams often begin with fake officials, fake suppliers, online relationships, investment offers or threatening messages.
Before the enforcement phase, participating countries exchanged intelligence and identified targets. Authorities then carried out raids, blocked bank accounts and virtual wallets, requested INTERPOL Notices and Diffusions, and used INTERPOL’s Global Rapid Intervention of Payments, known as I-GRIP, to stop suspicious flows of fiat and virtual assets.
The focus on fast payment blocking reflects a wider shift in fraud enforcement. In a separate Operation Atlantic action, UK, US and Canadian authorities froze more than USD 12 million in suspected criminal proceeds and identified over 20,000 victims in approval phishing crypto scams, showing how law enforcement is increasingly trying to stop stolen funds before they are laundered.
INTERPOL said more than 142,000 victims were identified worldwide. Other results included:
- 152,808 fraud cases analyzed
- 31,014 bank accounts blocked
- 23,715 cases solved
- 15,606 suspects identified
- 99 INTERPOL Notices and Diffusions issued
The numbers show how online fraud has become a cross-border criminal business, supported by mule accounts, crypto wallets, illegal gambling platforms and money laundering channels.
Country Cases Show How Fraud Networks Moved Money
Several cases highlighted by INTERPOL show the different methods used by scam networks during the operation. In Eswatini, police arrested 82 people and dismantled a network accused of illegal online gambling, money laundering and impersonation scams. Authorities seized 240 electronic devices, foreign currency and a realistic replica of a Brazilian police station with fake uniforms, signage and equipment. The suspects allegedly posed as Brazil’s Federal Police during video calls and tricked victims into transferring money for supposed “safekeeping.”
In Thailand, police arrested two suspects and uncovered a laundering scheme that moved romance scam proceeds into cryptocurrencies. One suspect’s wallet had processed more than USD 122.5 million in ten months, with cross-chain swaps allegedly used to hide the trail.
Thailand has also been dealing with separate crypto-linked laundering concerns. A recent DSI probe alleged that illegal crypto mining operations were connected to a Chinese-led network moving more than USD 307 million annually from online scams and gambling proceeds, showing why Thai authorities are paying closer attention to the overlap between crypto infrastructure and fraud finance.
In Singapore and Oman, authorities used I-GRIP to block a USD 6.6 million transfer linked to a business email compromise scam involving a Singapore-based commodity trading firm. In Macao, China, police stopped a victim from sending nearly USD 372,000 after scammers impersonated public officials during a fake fraud investigation.
In Palau, authorities deported 22 people linked to two scam centres operating from hotels, where suspects allegedly used cryptocurrency and illegal gambling websites to target victims overseas. The Palau case fits a broader regional pattern of scam-centre crackdowns. In another international action, US, UAE and Chinese authorities dismantled nine crypto scam centres and made at least 276 arrests, linked to pig-butchering investment fraud operations.
Crackdown Highlights Organized Nature of Online Fraud
Operation First Light 2026 shows that social engineering fraud is no longer limited to individual scammers. Many schemes now involve organized groups that handle victim targeting, impersonation, payment collection and laundering through several countries. The same pattern has appeared in other crypto-linked investigations. In Japan, a suspected Chinese fentanyl-linked network was accused of using a fake zksync.jp token and a Japan-based company to defraud investors, underlining how criminal groups can combine impersonation, front companies and digital assets in one scheme.
INTERPOL’s Financial Crime and Anti-Corruption Centre said criminal syndicates exploit human psychology and that coordinated action is needed to fight cyber-enabled financial crimes, organized networks and the money laundering that supports them. The operation also shows why rapid payment blocking has become important. Once victims transfer money, funds can quickly move through bank accounts, crypto wallets, gambling platforms or cross-border laundering networks.
For the public, the warning is direct: modern fraud often starts with a believable story rather than a technical hack. A fake officer, supplier email, investment pitch, romantic contact or urgent warning can be enough to trigger financial loss. Operation First Light 2026 shows law enforcement is now targeting not only the scammers, but also the wider financial networks that help them move stolen money.
