Operation First Light 2026 Hits Crypto Launderers, 5,811 Arrested

All news is rigorously fact-checked and reviewed by leading blockchain experts and seasoned industry insiders.

• INTERPOL coordinated arrests across 97 countries in a four-month anti-fraud operation.
• Authorities intercepted $293 million in fiat and crypto assets.
• One Thai suspect’s wallet processed over $122.5 million in romance scam proceeds.
• China’s Ministry of Public Security funded the operation, raising political questions.

INTERPOL announced on July 9 that Operation First Light 2026, a coordinated anti-fraud campaign involving 97 countries and territories, produced 5,811 arrests and intercepted $293 million in illicit assets between January 15 and April 30. The operation targeted social engineering fraud, the family of scams that manipulates human trust rather than software vulnerabilities, along with the laundering infrastructure that moves the proceeds. Investigators identified over 142,000 victims worldwide in a four-month window, and the recovered funds cover only a small fraction of what the fraud economy generates in a year.

A Fake Brazilian Police Station and a Wallet That Moved $122.5 Million

In Eswatini, police arrested 82 people and dismantled a network running illegal online gambling, laundering and impersonation scams. Officers seized more than 200 electronic devices, foreign currency and a full-scale replica of a Brazilian police station with fake uniforms and signage. During live video calls, the operators posed as Brazil’s Federal Police and told victims they were caught up in criminal investigations, then persuaded them to transfer money for “safekeeping”. None of it came back.

Thailand produced the operation’s most striking on-chain finding. Police there made two arrests and uncovered a laundering scheme that funneled romance scam proceeds into various cryptocurrencies, using cross-chain token swaps to hide the trail. The wallet of one suspect, a 20-year-old with no declared employment, had processed more than $122.5 million in 10 months, a volume that would embarrass the treasury desk of a mid-sized exchange. Syndicates park enormous flows on low-level, expendable individuals precisely so that an arrest costs the organization nothing.

Authorities in Singapore and Oman, meanwhile, used INTERPOL’s I-GRIP mechanism to block a $6.6 million transfer linked to a Business Email Compromise scam after criminals impersonating a supplier targeted a Singapore-based commodity trading firm.

How Cross-Chain Swaps Broke the Money Trail, and How I-GRIP Caught Up

Older laundering schemes relied on Bitcoin mixers, services that pool coins from many users to blur their origin, and investigators learned to work around those years ago. The newer method moves stolen value sequentially across entirely different blockchains through decentralized swap protocols, so no single ledger contains the full transaction history. Every hop forces an investigator to rebuild the chain of custody on a new network, with different tooling and often a different legal jurisdiction attached.

INTERPOL answered with speed instead of forensics. I-GRIP, the Global Rapid Intervention of Payments mechanism, lets a member country push a near-instant stop-payment request across borders to banks and centralized crypto gateways while a transfer is still in flight. Automated laundering scripts move money in minutes, and a recovery request that travels through traditional mutual legal assistance channels takes days, which usually means it arrives at an empty account. The Singapore interception worked because the freeze landed before the withdrawal.

I-GRIP operates only on centralized infrastructure, meaning banks and exchanges with compliance departments. Funds that reach self-custodied wallets or privacy-focused networks sit beyond its reach, and experienced operators already route their final hops there.

Why Beijing Paid for the World’s Biggest Fraud Sting

Operation First Light 2026 received its funding from China’s Ministry of Public Security, with support from ASEANAPOL, GCCPOL and Europol, and the First Light program has run under the same Chinese sponsorship since 2014. Beijing has concrete reasons to pay. Chinese nationals appear heavily among both the victims and the operators of Asia-based scam compounds, and the tracing capabilities that follow fraud proceeds also map capital flight out of China. Critics of the arrangement argue that an authoritarian state is field-testing global financial surveillance through a neutral international body, while supporters point out that no Western government has offered to fund enforcement at comparable scale.

Set against the size of the problem, the haul looks modest. The Global Anti-Scam Alliance puts annual worldwide scam losses between $442 billion and $1 trillion, a range that makes the $293 million intercepted round to less than 0.1% of what the fraud economy takes in a year. Tomonobu Kaya, director of the INTERPOL Financial Crime and Anti-Corruption Centre, said that criminal syndicates exploit human psychology and that no nation can stay safe unless all countries jointly fight back, a formulation that concedes how far enforcement still trails the crime it chases.

The 2024 edition covered 61 countries, seized $257 million and produced 3,950 arrests. Participation grew by nearly 60% in two years, yet the recovered value rose only 14%, which suggests the syndicates disperse their assets faster than the coalition expands.

Scam Compounds Are Merging With Trafficking Networks

INTERPOL’s threat assessments point to where the problem moves next. Scam compounds across Southeast Asia and East Africa increasingly overlap with human trafficking operations, where captive workers run romance and investment scams under threat of violence, and proceeds from these networks have surfaced in terrorist financing investigations. INTERPOL confirmed the investigations remain open, with member countries continuing to trace assets and identify additional suspects. The next enforcement pressure point will be the physical compounds rather than the wallets, since a frozen account gets replaced within a day, while relocating a scam city staffed by thousands of coerced workers takes months and leaves a trail that satellites and local police can follow.