AI fuelling cybercrime spike in Nigeria, Interpol report finds

Artificial intelligence is powering a growing wave of cybercrime across Africa, enabling more than half of reported attacks to become faster, more sophisticated, and harder to detect, according to Interpol’s African cyberthreat assessment report 2026.

The report, released on Monday, found that AI was involved in 55 per cent of reported cybercrime incidents across the continent, with major data breaches recorded in South Sudan, South Africa, Nigeria and Namibia between January 2024 and September 2025.

Based on survey responses from 36 African countries, the 40-page assessment also identified ransomware as a major threat across South Africa, Nigeria, Namibia, Senegal and Zambia. Critical sectors such as healthcare, public utilities and government service portals have increasingly become targets as cybercriminals seek maximum disruption and financial gain.

Business email compromise on the rise

Interpol described business email compromise (BEC) as the “financial engine” of transnational cybercrime, noting that West Africa remains the continent’s most active region for such attacks.

BEC schemes typically involve fraudsters impersonating company executives or trusted business partners to deceive employees into transferring funds or disclosing sensitive information.

According to the report, cybercriminals are increasingly using AI to produce highly convincing fraudulent emails that replicate executives’ writing styles, internal company language and digital signatures.

Data from cybersecurity firm TrendAI showed that South Africa accounted for 70 per cent of BEC detections in 2025, while Nigeria represented 29 per cent.

The report also noted that Cabo Verde recorded the highest ransomware detections in Africa in 2025 with 16,997 incidents, while Nigeria registered 5,822 cases, highlighting its position as both a significant source and target of cybercrime activities.

Interpol further stated that Microsoft has identified cybercrime groups operating from South Africa since 2017, targeting companies in the United States by using compromised email accounts and money mule networks to divert stolen funds overseas.

It added that Nigerian-based cybercriminal networks, active since 2021, have become increasingly involved in international money laundering operations, moving illicit proceeds through cryptocurrency exchanges, shell companies and mobile payment platforms.

Elsewhere, Mali recorded 3,494 sextortion detections, the highest in West Africa, suggesting an expanding infrastructure for AI-assisted blackmail campaigns.

Crypto scams, data breaches

The report said Africa’s cryptocurrency market processed an estimated $205 billion in transactions between July 2024 and July 2025, making the sector an attractive target for fraudsters.

Nigeria alone accounted for $92 billion of those transactions, while South Africa, Kenya and Nigeria were listed among the countries facing the highest risks of data breaches.

Interpol also referenced Nigeria’s National Identity Management Commission (NIMC) policy introduced in 2024 requiring all SIM cards to be linked to a National Identification Number (NIN).

According to the report, the policy helped reduce identity-related fraud. However, cybercriminals have since adapted by exploiting weaknesses in know-your-customer (KYC) processes and using AI to facilitate the registration of SIM cards with false identities.