Cybersecurity Alert Issued by INTERPOL Regarding Intricate Digital Attacks Aimed at Major African Industries
In the recently published Africa Cyberthreat Assessment Report 2025 by INTERPOL, the most common cybercrimes in Africa are identified as online scams, particularly phishing and Business Email Compromise (BEC), with a notable rise in romance scams often linked to fraudulent cryptocurrency schemes. Other significant threats include ransomware attacks, digital extortion, and fraud-as-a-service, which have a substantial impact on the financial sector in countries such as South Africa, Nigeria, Kenya, Egypt, and Morocco.
The report underscores the financially damaging threats, including ransomware attacks, predominantly motivated by financial gain, accounting for around 80% of attacks. Business Email Compromise (BEC) and phishing scams also lead to substantial financial losses. Fraud-as-a-service enables cybercriminals to exploit vulnerabilities in the rapidly expanding digital financial ecosystem.
To combat these growing cyber threats, the report proposes a multifaceted approach. It recommends focusing on attacker tactics and behaviors rather than specific threat actor names to better anticipate evolving cyber threats. Strengthening multi-factor authentication and helpdesk identity checks, enhancing cybersecurity protocols among small and medium businesses, and developing more uniform and robust regulatory frameworks across African countries are also key recommendations.
The report emphasizes the importance of raising awareness, legislation, and preparedness at national levels to combat both financially motivated crimes and potential state-sponsored cyber threats. It encourages cooperation between governments, the private sector, and international partners like INTERPOL to share threat intelligence and coordinate responses.
The report also calls for launching public awareness campaigns and integrating cybersecurity education into school curricula to enhance cybersecurity across Africa. It is based on data collected from African law enforcement agencies, private-sector partners, and open-source intelligence.
Despite the challenges, the report highlights successful public-private partnerships, updated legislation, and effective regional operations, such as Operation Serengeti, as strategies that have shown promise in combating cybercrime in Africa. However, it also acknowledges the complications posed by slow and underutilized cross-border cooperation channels, such as Mutual Legal Assistance (MLA), and a lack of consistent law enforcement capacity and access to digital forensic tools.
In summary, the report underscores the growing sophistication and financial impact of cybercrime in Africa, emphasizing the need for a multifaceted approach combining better technology, regulation, business practices, and international collaboration to strengthen the continent's cybersecurity posture.
[1] INTERPOL (2025). Africa Cyberthreat Assessment Report 2025. Retrieved from INTERPOL website
[2] Cybercrime Magazine (2022). Top African Cyber Threats for 2022. Retrieved from Cybercrime Magazine website
[3] Cybersecurity Ventures (2021). The Global Ransomware Market is Expected to Reach $20 Billion by 2021. Retrieved from Cybersecurity Ventures website
[4] Africa Renewal (2020). Cybercrime in Africa: The growing menace. Retrieved from Africa Renewal website
[5] African Union (2021). The African Union Cybersecurity Masterplan 2021-2025. Retrieved from African Union website
- The Africa Cyberthreat Assessment Report 2025 by INTERPOL identifies online scams, particularly phishing and Business Email Compromise (BEC), as the most common cybercrimes in Africa, with a significant rise in romance scams linked to fraudulent cryptocurrency schemes.
- Ransomware attacks, digital extortion, and fraud-as-a-service are other notable threats impacting the financial sector in countries like South Africa, Nigeria, Kenya, Egypt, and Morocco.
- To counter these growing cyber threats, the report suggests a multifaceted approach that includes focusing on attacker tactics and behaviors, strengthening multi-factor authentication, enhancing cybersecurity protocols for small and medium businesses, and developing robust regulatory frameworks across African countries.
- The report also recommends raising awareness, legislation, and preparedness at national levels, promoting cooperation between governments, the private sector, and international partners like INTERPOL, launching public awareness campaigns, and integrating cybersecurity education into school curricula.
- The report is based on data collected from African law enforcement agencies, private-sector partners, and open-source intelligence. It highlights successful public-private partnerships, updated legislation, and effective regional operations as promising strategies.
- Despite challenges such as slow and underutilized cross-border cooperation channels and a lack of consistent law enforcement capacity, the report emphasizes the need for a combination of better technology, regulation, business practices, and international collaboration to strengthen Africa's cybersecurity posture.
