INTERPOL and industry reporting warn that transnational fraud networks are becoming more sophisticated and more profitable by combining AI-enabled deception, crypto abuse, and organized scam-center operations. INTERPOL’s 2026 Global Financial Fraud Threat Assessment says AI-enhanced fraud is 4.5 times more profitable than traditional methods and links financial fraud to broader criminal ecosystems including cybercrime, human trafficking, and terrorist financing. Researchers and investigators described tools such as ProKYC that can forge identity documents, generate deepfaked liveness checks, create selfie-with-ID images, and tailor verification artifacts to defeat KYC controls, while a cybercrime forum vendor separately advertised fraudulently verified accounts on exchanges including Bitget, Bitvavo, and Kraken with European IBAN and SEPA capabilities, underscoring how criminals are abusing rather than breaching financial platforms.
Authorities are responding with wider enforcement actions against the infrastructure behind these scams. In India, Goa police arrested seven suspects, questioned 24 others, raided more than 40 locations across 11 states, and identified 313 suspected mule accounts in an investigation spanning investment scams, sextortion, parcel fraud, fake hotel bookings, and so-called digital arrest schemes. In Cambodia, officials said raids across at least five provinces led to more than 1,000 arrests tied to cybercrime and online scam compounds, part of a broader regional crackdown on an industry the UN says generates billions of dollars annually and has been linked to trafficked workers and abuse. INTERPOL said fraud-related Notices and Diffusions have risen 54% since 2024, with support in more than 1,500 transnational fraud cases involving $1.1 billion in losses, and it is launching Operation Shadow Storm to target scam-centre-linked fraud, cybercrime, and human trafficking.

Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
11 events from the most recent confirmed update back to the earliest known activity.
A cybercrime forum seller using the handle RasselKyc advertised fraudulently verified accounts for Bitget, Bitvavo, and Kraken, claiming to fabricate identity documents and complete KYC on buyers' behalf. The listing offered accounts with European IBANs and SEPA Instant capability for $150 to $300 each.
INTERPOL and the United Nations Office on Drugs and Crime jointly held the Global Fraud Summit, bringing together more than 1,300 participants from government, law enforcement, the private sector, technology companies, and civil society. The summit took place over two days.
INTERPOL announced the launch of Operation Shadow Storm, a UK Home Office-funded international task force targeting scam-centre-linked fraud, cybercrime, and human trafficking for forced criminality. It also issued new guidelines on establishing and operating national anti-scam centres.
INTERPOL released its 2026 Global Financial Fraud Threat Assessment, describing financial fraud as a severe and rapidly evolving transnational crime increasingly tied to organized crime, human trafficking, and cybercrime. The report warned that AI-enhanced fraud is 4.5 times more profitable than traditional methods and that agentic AI can automate end-to-end fraud campaigns.
At Black Hat USA 2026 in Las Vegas, TD Bank's Eric Huber presented findings on ProKYC, a KYC-bypass kit used by Nigerian scam rings. He described capabilities including forged IDs, deepfaked liveness videos, selfie-with-ID generation, geo-tailored EXIF metadata insertion, and provider-specific workflows for crypto exchanges and fintech targets.
INTERPOL said that since 2024, fraud-related Notices and Diffusions increased by 54 percent. It also said it had supported member countries in more than 1,500 transnational fraud cases involving USD 1.1 billion in lost assets.
Investigators in the Goa cyber fraud sweep identified 313 suspected mule bank accounts allegedly used to receive or transfer fraud proceeds. Authorities contacted police in the states where the accounts were registered and began examining links to broader organized cybercrime networks.
Police in Goa, India arrested seven people and summoned 24 others in an operation tied to 40 cyber fraud cases that caused nearly $262,000 in losses. About 40 police teams raided more than 40 locations across 11 states and seized 21 electronic devices for forensic analysis.
Cambodian authorities said raids conducted between Monday and Wednesday in at least five provinces led to the arrest of more than 1,000 suspects, including large numbers of foreign nationals. Police also seized computers and hundreds of mobile phones during the operations.
Prime Minister Hun Manet ordered Cambodian authorities to crack down on criminal cybercrime and online scam operations, citing threats to security, public order, and social safety. He said foreign criminal groups had infiltrated Cambodia to engage in online scams.
Amnesty International published findings from an 18-month investigation alleging abuses linked to cybercrime compounds in Cambodia. It said Chinese criminal gangs were involved in slavery, human trafficking, child labor, and torture in more than 50 scamming compounds, with indications of state complicity.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
darkreading.com
Open sourcedarkwebinformer.com
Open sourceoccrp.org
Open sourceinterpol.int
Open sourceapnews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.