AI is now behind more than half of all cybercrime in Africa. Here's what that actually means.

A headline number arrived this month that deserves more than a quick scroll past. INTERPOL's African Cyberthreat Assessment Report 2026 found that artificial intelligence is enabling 55% of reported cybercrimes across Africa, making attacks faster, more scalable, and increasingly difficult for victims and platforms to detect. Financial losses have followed. Since 2024, cybercrime-related losses have more than doubled, from $192 million to $484 million, driven primarily by AI-facilitated scams, credential harvesting, and automated social engineering campaigns.

Those are striking figures. But before we treat them as settled facts, it is worth being precise about what INTERPOL actually measured, what the numbers leave out, and what the report is really telling us about where AI-assisted crime is heading.

What the report actually found

The 40-page report draws on survey data from 36 African member countries and highlights a shift from isolated cyber incidents to an industrialised, borderless criminal ecosystem. It is not based on comprehensive crime statistics from every nation. Survey-based figures like this tend to capture whatever individual police forces choose to report upward to INTERPOL, which means the true scale is almost certainly higher, and the 55% figure reflects what investigators recognised as AI-linked rather than every case that actually involved AI.

That caveat noted, the categories of crime the report identifies are not abstract. INTERPOL's findings suggest that cybercrime in Africa now relies heavily on AI tools such as automated phishing, ransomware, social engineering, and identity fraud. Scam centres operate in 72% of surveyed countries, with AI-generated deepfakes and synthetic identities increasingly defeating biometric security measures.

The geography matters too. East Africa is a hub for mobile-money fraud and ransomware, West and Central Africa for business email compromise and romance scams, and highly connected Southern Africa is a magnet for global crime groups. These are not random distributions. They map onto where digital infrastructure is densest, where regulatory enforcement is thinnest, and where criminal networks already had established operations before AI arrived to make their work cheaper and faster.

What AI actually adds to cybercrime

It is tempting to picture AI cybercrime as something exotic, involving sophisticated models writing bespoke malware. The reality is more mundane, and in some ways more troubling for that. INTERPOL's cybercrime director Neal Jetton put it plainly: "AI is automating every stage of a cyberattack from reconnaissance and phishing to extortion and evasion."

Think about what that means in practice. A criminal operation that once needed a team of people to write convincing phishing emails, research targets, and manage responses can now compress much of that into automated pipelines. The quality of deception goes up while the cost per victim goes down. Africa recorded more than 1.1 billion mobile subscribers in 2025, increasing digital adoption but also widening the attack surface for cybercriminals. More people online, more potential targets, and a criminal toolset that scales effortlessly.

There is also the deepfake dimension. Biometric verification, the kind that many African mobile banking apps now use to confirm identity, was supposed to be a step up in security. AI-generated deepfakes and synthetic identities are increasingly defeating biometric security measures. That is a concrete example of AI not just automating old attack types but actively undermining defences that were specifically designed to stop them.

Who gains, and who carries the cost

This is the question worth sitting with. The victims of African cybercrime operations are not only African. Victims of business email compromise and scams are most likely to be located in Europe and North America. That means the political pressure to fix the problem lands primarily on wealthier governments far from where the criminal infrastructure operates, which creates a misalignment between who feels the urgency and who has the tools to act.

Meanwhile, ordinary people in Africa bear a different kind of cost. Online scams remained the most frequently reported cybercrime in 2025, with criminals increasingly exploiting AI, social media platforms and mobile money services to target victims. Mobile money is not a novelty in much of sub-Saharan Africa; it is how people pay rent, receive wages, and send money to relatives. When AI-powered scams undermine trust in these systems, the damage is not just financial. It chips away at the digital infrastructure that poorer communities depend on most.

INTERPOL noted that cybercrime laws remain fragmented across many African countries, while law enforcement agencies are still ill-equipped to respond to AI-powered threats. This is the structural gap that AI exploits. The technology to run sophisticated attacks is now available cheaply and widely. The institutional capacity to respond is not. That asymmetry is the real story here.

The legal frameworks haven't caught up

Critics have raised concerns that the rapidly changing nature of AI technology outpaces existing foundational documents such as the African Union Convention on Cyber Security and Personal Data Protection. Since this instrument relies on early 2010s legal definitions, a critical gap exists when addressing modern AI-driven social engineering.

In 2025, seventeen African countries passed updated cybercrime legislation, which sounds encouraging until you consider that 36 countries were surveyed and that passing a law is a long way from having the forensic expertise and cross-border cooperation to enforce it. INTERPOL's recommendations call for standardised digital forensic capabilities, enhanced cross-border cooperation, investment in AI literacy among law enforcement officers, and formal public-private partnerships. These are reasonable asks. They are also expensive and slow to build.

The good news, and why it matters

The report is not purely bleak. Operations Serengeti 2.0, Contender 3.0, Sentinel, and Red Card 2.0 resulted in more than 1,500 arrests, the seizure of hundreds of electronic devices, and the recovery of over $100 million. That is real progress, and it demonstrates that multinational coordination, even when it is difficult to organise, can disrupt criminal infrastructure at scale.

The funding behind the report itself is also worth noting. INTERPOL's Africa Cyberthreat Assessment is part of the organisation's African Joint Operation against Cybercrime initiative, funded by the United Kingdom's Foreign, Commonwealth and Development Office. That is a legitimate investment, though it also means the framing and priorities of the report reflect what Western donors consider important, which is worth bearing in mind when reading its recommendations.

Why this matters beyond Africa

It would be comfortable to read this as a regional story. It is not. The AI tools being used in these attacks, the large language models that generate convincing phishing text, the image generators that produce fake identity documents, and the voice-cloning software that impersonates executives, are the same tools available to anyone with an internet connection. Africa is simply where the convergence of fast-growing digital adoption, fragmented regulation, and established criminal networks makes the effects most visible right now.

INTERPOL's 55% figure is a claim based on survey data, not a precise measurement of a precisely defined thing. But even if the real number is 40%, or 35%, it signals a threshold being crossed: AI has moved from an occasional tool that sophisticated criminal groups experiment with to a standard part of how organised cybercrime operates. That shift does not stay regional for long.

If this one was useful, there's plenty more on the site. Pieces on how AI works, plus coverage of AI news, the downsides included. All free to read, no account needed.

References

1. INTERPOL report finds AI linked to more than half of cybercrime in Africa, INTERPOL
2. AI powers 55% of cybercrime in Africa, INTERPOL report finds, Technext24
3. INTERPOL report finds AI linked to over half of cybercrime in Africa, JURIST
4. Interpol Releases Report on AI Cybercrime in Africa, Small Wars Journal
5. AI Accounts for Over Half of Cybercrime in Africa, Says Interpol, Infosecurity Magazine
6. Interpol report highlights AI-led growth of cybercrime in Africa, Developing Telecoms
7. INTERPOL Report Links AI To Over Half Of Cybercrime Across Africa As Losses Hit $484 Million, Sahara Reporters
8. AI fuels more than half of cybercrime in Africa as digital scams surge, Africanews