Artificial intelligence is now driving 55 per cent of reported cybercrime across Africa, enabling criminals to launch faster, more sophisticated and harder-to-detect attacks, as cyber-related losses on the continent more than doubled to $484 million, according to INTERPOL’s African Cyberthreat Assessment Report 2026.
The report warned that while Africa’s digital economy continues to expand rapidly, cyber resilience across the continent is struggling to keep pace, exposing governments, businesses and individuals to growing threats including AI-enabled fraud, ransomware, identity theft and online scams.
Africa recorded more than 1.1 billion mobile subscribers in 2025, reflecting the rapid expansion of digital services across the continent. However, INTERPOL noted that fragmented cybercrime legislation and limited artificial intelligence readiness among law enforcement agencies remain major challenges in responding to emerging threats.
Based on survey data from 36 African member countries, the report said cybercrime has evolved from isolated criminal activities into an organised, borderless ecosystem powered by automation, artificial intelligence and increasingly sophisticated techniques.
According to INTERPOL, cybercrime-related losses increased from $192 million in 2024 to $484 million, driven largely by AI-assisted scams, credential theft and automated social engineering campaigns.
Online scams remained the most reported form of cybercrime in 2025, with criminals exploiting mobile money platforms, social media networks and artificial intelligence tools to identify and deceive victims. The report revealed that 72 per cent of surveyed countries reported the presence of scam centres, with Southern and West Africa recording the highest concentration.
The nature of cyber threats also varied across regions. East Africa emerged as a major hotspot for mobile money fraud and ransomware attacks targeting critical infrastructure, while Business Email Compromise (BEC) schemes and romance scams were widespread in West and Central Africa. Southern Africa’s high level of connectivity has also made the region an attractive target for global cybercriminal groups seeking to maximise disruption.
INTERPOL further highlighted the growing use of artificial intelligence in digital sextortion and online harassment, with TrendAI, one of its technology partners, recording about 600,000 sextortion detections linked to AI-generated deepfakes and synthetic media.
The report also identified the increasing sophistication of Business Email Compromise attacks, with criminals using AI tools to create highly convincing fraudulent messages. Africa-based threat actors are increasingly targeting victims in Europe and North America while operating across multiple jurisdictions, making investigations more complex for authorities.
Another major concern is the lack of real-time information sharing between financial institutions, telecommunications companies and law enforcement agencies. INTERPOL said this gap has created opportunities for criminals to move beyond stolen credentials and develop synthetic identities capable of bypassing some biometric verification systems.
These AI-generated identities, created by combining genuine personal information with fabricated details, have reportedly been used to open bank accounts, access mobile loans and register SIM cards under false identities.
Commenting on the findings, Neal Jetton, director of INTERPOL’s Cybercrime Directorate, said artificial intelligence has transformed the scale and speed of cyberattacks.
“Cybercrime has emerged as one of the most significant criminal threats to the region. AI is automating every stage of a cyberattack from reconnaissance and phishing to extortion and evasion.
“However, we see that when countries work together, cybercriminal infrastructure can be identified, disrupted and dismantled,” he said.
Despite the growing threats, INTERPOL highlighted progress in strengthening cyber resilience across Africa. The report noted that 17 countries enacted or amended cybercrime legislation in 2025, while Senegal launched an online reporting platform aimed at improving responses to online offences affecting children.
The agency also recorded operational successes through four multinational cybercrime operations, which collectively resulted in more than 1,500 arrests, the seizure of hundreds of devices and the recovery of over $100 million in criminal proceeds.
Nigeria’s digital finance ecosystem has also continued to face evolving fraud risks, although recent data suggests a decline in reported financial losses.
The report “The Compliance Reckoning: Regulating Financial Services in the Age of AI” revealed that digital payment fraud losses in Nigeria declined by more than 50 percent to N25.85 billion in 2025 from N52.26 billion in 2024. However, the report cautioned that the decline may not represent a reduction in underlying risks, as fraud losses have risen by about 350 per cent since 2020 despite a 31 per cent decline in reported cases.
The development suggests that cybercriminals are shifting towards fewer but more sophisticated attacks capable of generating higher financial impact.
To address the growing threat landscape, INTERPOL recommended stronger digital forensic capabilities, enhanced cross-border cooperation, increased AI literacy among law enforcement officers and formal public-private partnerships to improve cybercrime prevention, detection and response.
