Artificial intelligence is driving 55 per cent of reported cybercrimes across Africa, enabling attacks to become faster, more sophisticated and harder for victims and digital platforms to detect, according to Interpol’s African Cyberthreat Assessment Report 2026.
The report, released on Monday, also identified significant data breach incidents in South Sudan, South Africa, Nigeria and Namibia between January 2024 and September 2025.
Ransomware incidents were similarly prevalent across South Africa, Nigeria, Namibia, Senegal, and Zambia, with attackers increasingly targeting healthcare institutions, utility providers, and public service portals to maximise disruption and extortion potential.
The 40-page report relied on survey data from 36 African countries.
Business email compromise (BEC) involves attackers tricking workers into sending money or private data by pretending to be bosses or trusted partners.
West Africa was observed as the most active region for BEC detections.
“Ransomware detections in 2025 provided by TrendAI reached record levels in Cabo Verde, with 16,997 detections, the second highest in Africa, while Nigeria recorded 5,822, reflecting the country’s dual role as an origin and target of cybercrime,” the report reads.
The Interpol report noted that the sophistication of these BEC campaigns have increased dramatically, with AI now used to generate highly convincing email correspondence that mimics executive tone, internal jargon, and signature styles with near-perfect fidelity.
In 2025, TrendAI data indicated that 70 percent of BEC detections originated in South Africa and 29 percent from Nigeria.
The report described BEC as the financial engine of transnational cybercrime.
Microsoft-identified threat actors based in South Africa, active since 2017, primarily target US-based enterprises and use compromised email accounts and money mule networks to divert funds to offshore accounts.
In addition, Interpol said threat actors based in Nigeria, active since 2021, have become central to international money laundering operations, routing illicit proceeds through crypto exchanges, shell companies, and mobile payment platforms.
Mali recorded the highest sextortion detections in West Africa, with 3,494 incidents, suggesting growing infrastructure for automated blackmail campaigns.
The crypto economy in the region was valued at $205 billion in transactions between July 2024 and July 2025 and became a magnet for fraud, the report said. Of this figure, Nigeria accounted for $92 billion.
South Africa, Kenya, and Nigeria were also among countries with the highest vulnerabilities for data breaches.
In 2024, the National Identity Management Commission (NIMC) enforced a policy mandating that every SIM card be linked to a unique and verifiable national identification number (NIN).
The Interpol said while the policy significantly reduced fraud, cybercriminals adapted rapidly by exploiting gaps in KYC enforcement and registering SIM cards under false names with the help of AI.
(The Sun)