INTERPOL says Operation First Light 2026 intercepted USD 293 million in illicit assets in a global crackdown on scams and laundering networks. That is a serious hit, even if it is not the same thing as a clean permanent seizure.
- 97 countries and territories took part
- 5, 811 arrests were made
- USD 293 million in illicit assets was intercepted
- The operation targeted social engineering scams and related money laundering
According to INTERPOL, the operation ran from 15 January 2026 to 30 April 2026 and brought together police and financial-crime teams across 97 countries and territories. The main target was not just “crypto fraud” in the narrow sense, but a broader mix of social engineering scams, frauds that trick people into handing over money, credentials, or access, plus the laundering networks that help criminal proceeds move.
That distinction matters. Crypto often shows up in these schemes, but it is not always the original crime. The scam may begin with a fake romance, a bogus investment pitch, a hacked business email, or an impersonation of someone trusted. Crypto then becomes one of the rails used to move the money fast, split it up, and make the trail harder to follow.
INTERPOL says authorities used a mix of tools, including raids, account freezes, wallet blocking, and a rapid payment-intervention mechanism called I-GRIP, short for Global Rapid Intervention of Payments. In plain English, that means investigators try to stop fraudulent transfers while the money is still moving, instead of waiting until it has been washed through a maze of accounts and wallets.
The headline figure, USD 293 million in illicit assets intercepted, is big, but the wording deserves care. “Intercepted” is not the same as permanently seized. INTERPOL’s framing also does not break down how much of that total was fiat, how much was crypto, or how much was simply blocked pending investigation. That nuance matters, because a freeze or an interception is not the same thing as final forfeiture.
The broader enforcement footprint was substantial. INTERPOL reported 31, 014 blocked bank accounts, 15, 606 suspects identified, 142, 000 victims identified, and 99 Notices and Diffusions issued. That is not smoke and mirrors. It is coordinated financial disruption at a scale that suggests authorities are getting more serious about hitting fraud networks where it hurts: the money.
Some of the examples underline how messy and hybrid these schemes are. In Thailand, police uncovered a money laundering network tied to romance scams that funneled proceeds into cryptocurrencies, including cross-chain token swaps, meaning funds were moved between different blockchains to obscure the trail. One suspect’s wallet reportedly processed more than USD 122.5 million in 10 months. That is not casual criminality; that is an organized pipeline.
In Singapore and Oman, authorities used I-GRIP to block a USD 6.6 million transfer linked to a Business Email Compromise scam. BEC is the old-school fraud of the digital age: criminals impersonate executives, vendors, or trusted partners to redirect payments. No Hollywood hacking fantasy required, just human trust weaponized for theft.
Eswatini also featured in the sweep, where police dismantled a network tied to illegal online gambling, money laundering, and impersonation scams. Authorities arrested 82 people and seized 240 electronic devices. INTERPOL also said the operation involved a fake Brazilian police station setup, which is either a grim example of criminal improvisation or the most bureaucratically absurd scam prop imaginable.
The bigger pattern is familiar: the original fraud often depends on manipulation, but the proceeds can move through a mix of bank rails, payment processors, shell accounts, mule networks, and crypto wallets. That makes this more than a “crypto bad” headline. Crypto is often the plumbing, not the starting point. If law enforcement only chases the wallet and ignores the scammer on the other end of the message thread, it is fighting half a war.
Tomonobu Kaya, director of INTERPOL’s Financial Crime and Anti-Corruption Centre, said:
“Social engineering scams continue to pose a significant threat to our society... INTERPOL is dedicated to supporting member countries in building a comprehensive, coordinated strategy to tackle cyber-enabled financial crimes, organized criminal networks and the money laundering that fuels them.”
That framing is about right. The fraud ecosystem is hybrid by design. It uses email, messaging apps, fake firms, stolen identities, mule accounts, and virtual assets when those tools help the money move. The problem is not one technology in isolation. The problem is the criminal business model.
There is also a practical lesson here for crypto users and exchanges: faster detection and freezing tools matter. When money starts moving through multiple accounts, chains, and jurisdictions, recovery gets ugly fast. Real-time intervention is far better than trying to claw funds back after the fact, when the trail has already been buried under layers of laundering.
At the same time, nobody should mistake a major operation for a final victory. Fraud networks adapt quickly. Shut down one laundering path and they look for another. Make one payment rail too hot and they pivot. The fight is continuous, and the scammers are usually shameless enough to keep going until the lights are fully cut.
Key questions and takeaways
-
Was this only about crypto scams?
No. INTERPOL said the operation targeted social engineering scams and related money laundering. Crypto was part of some laundering chains, but it was not the whole target. -
Was the $293 million seized or frozen?
INTERPOL said the assets were intercepted, which is not the same as permanent seizure. The operation also included account and wallet freezes. -
Why does “intercepted” matter?
Because it means authorities stopped or blocked funds during movement. That is different from recovering money after it has already been fully dispersed and laundered. -
Why is I-GRIP important?
It gives investigators a faster way to stop illicit payments in real time. In fraud cases, speed is everything, once the money is gone, recovery becomes a mess. -
What does this say about crypto’s role in crime?
Crypto is still useful to criminals as a laundering rail, but the original crime is often human manipulation. The scam may start in a message, then end in a wallet.
The clear takeaway is that INTERPOL’s Operation First Light 2026 shows global law enforcement can still land meaningful blows when it coordinates across borders. The less comfortable takeaway is that the fraud economy remains massive, professionalized, and built to exploit trust wherever it can find it. Crypto didn’t invent that rot, but it can absolutely help move it.
Further reading
A few related resources on fraud, laundering, and the darker side of crypto enforcement.
- INTERPOL-Led Global Fraud Crackdown Nets 5, 800 Arrests
- FATF-INTERPOL partnership: putting trillions in illicit profits back into legitimate economies
- Cryptocurrency and crime
- 5811 arrests, $293 million seized over social engineering
- Interpol Recovers $97M in Crypto from Global Cybercrime
- Interpol’s Serengeti 2.0: 1, 209 Arrests in $97M Crypto
- Interpol Seizes $100M in African Crypto Bust: Bitcoin
