INTERPOL First Light 2026: 5,811 arrests, $293M seized

INTERPOL confirmed on 2026-07-09 that Operation First Light 2026 arrested 5,811 fraud suspects across 97 countries between 2026-01-15 and 2026-04-30, intercepted USD 293 million in illicit assets, and blocked 31,014 bank accounts. Per INTERPOL’s release, 152,808 cases were analysed and a further 15,606 suspects identified but not arrested. BleepingComputer reported the same numbers. Confidence: high on the aggregate figures, unconfirmed on the country-by-country breakdown INTERPOL did not publish.

What’s confirmed

• Arrests. 5,811, per INTERPOL. Confidence: high.
• Assets intercepted. USD 293 million. Confidence: high.
• Bank accounts blocked. 31,014. Confidence: high.
• Cases analysed. 152,808. Confidence: high.
• Additional suspects identified, not arrested. 15,606. Confidence: high.
• Victims identified. 142,000+, per INTERPOL. Confidence: high.
• Coordinating bodies. INTERPOL lead, with ASEANAPOL, GCCPOL, and Europol supporting. Funded by China’s Ministry of Public Security. Confidence: high.
• Fraud types in scope. Business email compromise, sextortion, romance scams, impersonation, investment scams, and illegal online gambling. Confidence: high.
• Duration. 3.5 months, 2026-01-15 through 2026-04-30. Confidence: high.

Named case examples

• Eswatini — 82 arrests. Dismantled a network running illegal online gambling, money laundering, and impersonation. Seized 240 electronic devices, foreign currency, and a replica Brazilian police station with fake uniforms.
• Thailand — 2 arrests in a romance-to-crypto laundering scheme. One suspect’s wallet processed USD 122.5 million in 10 months.
• Singapore / Oman — USD 6.6 million in an outbound BEC transfer blocked via INTERPOL’s I-GRIP mechanism.
• Macao, China — Community outreach identified a victim mid-scam. Intervention prevented a USD 372,000 transfer.
• Palau — 22 individuals deported from two hotel-based scam centres.

All five come directly from INTERPOL’s release. Confidence: high on the vignettes as reported, unverified against independent local reporting.

What’s uncertain — treat accordingly

• Country-by-country arrest totals. INTERPOL did not break the 5,811 figure down across the 97 participating jurisdictions in the public release. Confidence: unconfirmed for anything more granular than the five countries called out above.
• Recovery vs. seizure of the $293M. “Intercepted” covers both frozen and recovered assets. How much has been returned to victims versus held pending litigation is not stated. Confidence: unconfirmed.
• Scam-centre disruption. The Palau vignette references two hotel-based scam centres; the release does not enumerate a total number of scam compounds hit across all 97 countries. Southeast Asian scam-compound reporting suggests this is a partial view. Confidence: unconfirmed on scope.
• Follow-on prosecutions. Arrest ≠ charge ≠ conviction. National-level prosecution outcomes will land over the next 12-24 months and will not all be attributed back to Operation First Light in public. Confidence: as-reported.
• Displacement effect. Whether the affected networks have already reconstituted under new infrastructure between the operation’s April 30 close and today’s disclosure is exactly the kind of thing the disclosure gap makes hard to measure. Confidence: unconfirmed — assume displacement is well underway.

What to do

• Fraud and AFC teams. The BEC volumes are the actionable number here. Singapore/Oman blocked USD 6.6 million on a single I-GRIP referral. That mechanism works when the receiving bank is looped in inside the payment window — usually hours, not days. If your team does not know how to file an I-GRIP request through your national INTERPOL NCB, that gap is now the one to close.
• Consumer-facing platforms. Romance-scam-to-crypto laundering at USD 122.5M through a single wallet in 10 months is not an edge case. The identifiers used to onboard that wallet — KYC docs, IP ranges, device fingerprints — are the shared exchange threat-intel that historically does not get shared. If your platform sits between a consumer and a wire or a crypto off-ramp, the disruption window is at wallet creation, not at transfer.
• Anyone tracking scam-compound infrastructure. The Palau deportations are the tell: the physical footprint is decentralising outward from the Mekong hubs. Track hotel and business-park lease patterns in secondary jurisdictions, not just Cambodia and Myanmar.
• Individuals. The class of fraud INTERPOL just interdicted at scale is the class every reader’s parents and grandparents are exposed to weekly. Sextortion, romance, and impersonation scams are the ones that clear victim bank accounts, not the ones that make security-industry headlines. Have the conversation with the people in your life who need to have it.

Timeline

• 2026-01-15 — Operation First Light 2026 begins.
• 2026-04-30 — Operation concludes.
• 2026-07-09 — Public disclosure by INTERPOL; reported same day by BleepingComputer.

Filed as reported by INTERPOL’s Financial Crime and Anti-Corruption Centre, quoting Director Tomonobu Kaya on the persistence of social-engineering scams. Update if national forces publish country-level breakdowns, if recovered-to-victim figures are disclosed, or if follow-on prosecutions produce named threat-actor attribution.