Interpol’s Operation First Light 2026: 5,811 Arrests, $293 Million Seized in Global Crackdown on Social Engineering Fraud
Interpol has announced the results of Operation First Light 2026, one of the largest coordinated actions against social-engineering fraud and money laundering in recent years. Between 15 January and 30 April 2026, police and financial-crime units from 97 countries and territories arrested 5,811 individuals and seized illegal assets worth $293 million.
The operation focused on criminals who impersonate company employees, government officials, or romantic partners to trick victims into transferring funds. Common tactics included business-email compromise, interference in commercial correspondence, fake investment platforms, romance scams, and sextortion. Investigators examined more than 152,000 cases, blocked over 31,000 bank accounts, and solved nearly 24,000 crimes, ultimately identifying 15,600 suspects and 142,000 victims globally.
Fake Brazilian Police Station Uncovered in Eswatini
One of the most elaborate schemes was discovered in Eswatini, where fraudsters constructed a realistic replica of a Brazilian federal police station, complete with uniforms, signage, and official-looking equipment. During video calls, they posed as Brazilian officers, convinced victims they were targets of crime, and instructed them to move money to “safe” accounts. Authorities arrested 82 people and seized 240 electronic devices at the site.
Cryptocurrency Laundering in Thailand and Major Prevented Losses
In Thailand, investigators dismantled a money-laundering network that moved proceeds from romance scams through multiple cryptocurrency blockchains. A single 20-year-old suspect’s wallet processed more than $122.5 million in just ten months. Meanwhile, authorities in Singapore and Oman used Interpol’s urgent-payment-stop system to block a $6.6 million business-email-compromise transfer after fraudsters altered supplier bank details in a Singaporean company’s correspondence.
In Macau, police intervened during a public awareness session when one participant was about to send nearly $372,000 to fraudsters posing as government officials. The funds were frozen before the transaction could be completed, demonstrating the real-time protective value of the operation.
Related articles
Beeline Subscribers Targeted in Mass SIM Hijacking via Remote eSIM Issuance
Beeline customers have encountered widespread attempts to hijack mobile numbers through unauthorized remote issuance of eSIM cards. Attackers required only a single careless confirmation from the user to complete the takeover, bypassing traditional SMS or push notifications. The scheme presented a system-level prompt on the smartphone screen requesting login to the operator's personal account, after which a virtual SIM was issued and the physical card blocked. One victim was Kommersant FM editor-in-chief Vladislav Viktorov. Specialist Alexander Baulin suggested possible infrastructure compromise at the operator, though Beeline denied this and described the incident as a coordinated attack on remote SIM issuance mechanisms. The company stated it repelled the assault, with only isolated successful hijackings occurring, and is assisting affected users. Similar attacks have impacted the entire telecom market since the start of the year, enabling fraudsters to access banking apps, government services, and other accounts tied to the number.
Yandex Rolls Out Universal Anti-Fraud Platform to Block Bots and Manipulation Schemes
Yandex has begun deploying its Universal Anti-Fraud system, a single AI-driven platform designed to detect bots, ticket scalping, and other forms of digital fraud across multiple services. The new solution can be integrated into a service within two to four days, replacing the previous months-long process of building separate defenses for each product. Dozens of Yandex services, including Eda, Afisha, Puteshestviya, and applications powered by Alice, are already connected to the platform. In Afisha the system identifies bots that mass-book tickets for popular events to create artificial scarcity, while in Eda it flags repeated fraudulent complaints aimed at obtaining compensation. The platform combines neural networks, analytical methods, and more than one hundred attack-pattern rules, analyzing traffic in real time and applying service-specific parameters. A key advantage is centralized updating: once a new fraud scheme is identified, protections are distributed instantly to all connected products.
Protecting C-Suite Leaders: Defending Executives Against Targeted Cyberattacks
According to PT EdTechLab data, 12% of registered data leaks in Russia originate from attacks on top management. Executives often combine maximum privileges with lax cyber hygiene and public visibility, creating high-value targets. The article outlines three primary attack scenarios: targeted whaling phishing with deepfakes, compromise of personal devices used for both work and private tasks, and account takeover via weak passwords or SIM swapping. Detailed recommendations include mandatory multi-factor authentication, separate corporate devices or MDM solutions, EDR coverage, strict password policies, and network segmentation. The piece stresses that technical measures must be paired with direct communication using business impact language to secure executive buy-in and set an example for the wider organization.
IPA Reports Record High Fake Warning Scam Consultations in Q2 2026
The Information Processing Promotion Agency (IPA) recorded 3,832 personal security consultations in the second quarter of 2026, marking an 8.5 percent increase from the previous quarter. Fake warning scams, which display fabricated malware alerts to frighten users into contacting fraudsters, rose sharply to 1,428 cases, a 23.7 percent jump and the highest figure in two years. These scams carry risks of financial loss and device compromise through fake support services. Consultations dipped temporarily after arrests in May 2025 but have now exceeded levels seen before those arrests. Phishing reports also increased slightly to 146 cases, including schemes impersonating the National Tax Agency. The trend of rising fake warning incidents has continued for three consecutive quarters, underscoring the need for ongoing public vigilance.