Crime•

28 Arrests, 303 Seized Devices and $11 Million Flagged: Binance and Coinbase Back a West African Fraud Sweep

Ghana and Nigeria arrested 28 people in a joint operation hosted by Britain's NCA, with Binance, Coinbase and analytics firms flagging over $11 million that could be frozen.

Written By :MINRK
28 Arrests, 303 Seized Devices and $11 Million Flagged: Binance and Coinbase Back a West African Fraud Sweep

Image by Source:File:British Isles all.svg by Cnbrb Derived work:Rob984 via Wikimedia Commons (CC BY-SA 3.0)

1. What happened in the West Africa crypto scam crackdown?

Authorities in Ghana and Nigeria have arrested 28 people in a coordinated West Africa crypto scam crackdown aimed at fraud networks that include crypto investment schemes, the US Department of Justice said in October 2026. Private-sector partners flagged more than $11 million in funds that could be frozen, and officials reported seizing cryptocurrency without saying how much it was worth.

The operation was hosted by the United Kingdom's National Crime Agency (NCA) and brought technology companies together with law enforcement. Its targets were networks that defraud victims in the United States, the United Kingdom and other countries. The Justice Department described it as the first joint operation of its kind to concentrate on West Africa.

The announcement combines several different kinds of results: arrests, seized equipment, identified victims, removed online accounts and money that investigators believe can be stopped. Each of these measures something different, and only some of them represent a concrete outcome already achieved.

2. Arrests, seized devices and trafficking victims

The clearest numbers come from the arrests. In Sasaabi, a location near the Ghanaian capital Accra, Ghanaian authorities detained 19 people and took 303 electronic devices. A further nine people were arrested in Nigeria, bringing the total for the two countries to 28.

A haul of more than 300 devices is meaningful for an investigation of this kind. Phones, laptops and storage media typically hold the conversations, wallet addresses, scripts and victim lists that prosecutors rely on to connect individual operators to a wider organization and to the money that moved through it. The announcement does not describe what those devices contained, so their evidentiary value remains to be seen.

The operation also had a human-rights dimension. According to the NCA, it identified 117 trafficking victims in Ghana who were waiting to be repatriated to Nigeria. Their presence reflects a pattern investigators have increasingly linked to large-scale online fraud, in which some of the people working inside scam operations are themselves victims who have been moved across borders and made to work. The announcement did not say how the 117 people came to be in Ghana or what role they were made to play.

3. How much money was actually frozen or seized?

The headline figure of more than $11 million needs careful reading. It represents funds that private companies identified as capable of being frozen. It is not a confirmed total of money recovered, and it is not a tally of assets already returned to victims. Freezing is a step that precedes any recovery, and many frozen balances are later contested, released or only partly returned.

Cryptocurrency seizures were also reported by the partners involved, but their value and the specific assets were not disclosed. That leaves a gap between what was announced and what can be measured. Without the amounts, it is not possible to say whether the seized crypto is small compared with the $11 million flagged or larger than it.

For readers trying to judge the operation's financial impact, the safest conclusion is that the sweep has produced a pool of potentially recoverable funds and a set of arrests, while the final financial result will depend on later legal steps that have not yet been described.

4. Which companies took part, and what did they do?

Two of the best-known crypto exchanges, Coinbase and Binance, participated. They were joined by three blockchain analytics firms: Chainalysis, Elliptic and TRM Labs. Exchanges and analytics providers are natural partners in a case like this, because the stolen proceeds of crypto fraud usually pass through exchange accounts at some point, and analytics tools are used to follow those movements across public blockchains.

Coinbase said it helped trace illicit funds, supported asset freezes and supplied intelligence to investigators. The company said it identified more than 65 active scam victims, meaning people who were still being targeted and could potentially be warned, and that its work prevented more than $415,000 in potential losses. Those figures come from the company itself.

TRM Labs said it exposed a large-scale peer-to-peer laundering network. Peer-to-peer laundering generally refers to moving value between individuals rather than through a single institution, which can make the trail harder to follow. The announcement offered no further detail on the network's size or on who operated it.

Meta, the owner of Facebook and Instagram, also contributed. The company said it removed more than 3.7 million accounts, pages and groups from its platforms. Most of them appeared to target people in the United States and the United Kingdom through impersonation, a tactic in which a fraudster poses as a trusted person or organization to gain a victim's confidence.

5. Why a joint model between industry and police matters

Crypto fraud rarely respects borders. A victim in one country may send money to a wallet linked to an exchange in another, while the organizers operate from a third location. No single agency or company sees the whole chain, which is why cooperation between the public and private sectors has become central to enforcement in this area.

In this operation, each participant held a different piece. Law enforcement agencies have the authority to arrest suspects, seize devices and obtain legal orders. Exchanges can see account activity and can place holds on funds that pass through their platforms. Analytics firms map the flow of assets between addresses. Social platforms control the accounts used to approach victims in the first place. Putting them in one operation allowed those pieces to be matched against one another.

The participants also provided investigators with leads on more than 30 suspected scam centers. A lead is not a prosecution, but it gives law enforcement a starting point for later action. Whether those leads turn into arrests or closures is not stated in the announcement.

The arrangement also gives each participant something in return. Companies gain a direct line to investigators who can act on what they find, and investigators gain access to data and tools that would otherwise take far longer to obtain, which shortens the time between detecting suspicious activity and acting on it.

6. How crypto investment fraud works and why it is hard to stop

Crypto investment fraud generally begins with contact through a social network, messaging app or fake advertisement. The fraudster builds trust, often by impersonating a legitimate person or business, and then steers the victim toward a trading platform or wallet that the fraudster controls. Early balances may appear to grow, which encourages larger deposits, until the victim tries to withdraw and finds the funds out of reach.

Speed is the central difficulty for investigators. Crypto transfers settle quickly and can be split across many addresses within minutes. Once funds reach an exchange account, however, a platform that cooperates can place a hold on them, which is why the participation of Coinbase and Binance matters. A freeze at that point can stop the money before it is converted into cash or moved beyond reach.

Impersonation on social platforms is the other pressure point. Removing accounts at scale, as Meta reported doing, cuts off the channels scammers use to find victims, though new accounts can be created. Because the problem spans payments, platforms and national borders, an approach that links several of them at once reflects how the fraud itself is organized.

7. Limits of the announced figures

Several of the numbers released with the operation come from the organizations that helped carry it out. The $11 million figure, Coinbase's count of victims and prevented losses, and TRM Labs' description of the laundering network are all partner-reported, and the announcement does not provide independent verification of them. That is common for operations of this type, but it is a reason to treat the results as preliminary.

Other pieces are described only in outline. The value of the cryptocurrency seized is missing. The identities of those arrested, the specific charges they face and the countries where proceedings will take place were not part of the information released. The announcement also did not say how much of the $11 million has already been frozen as opposed to merely identified as freezable.

These gaps do not undermine the fact that arrests took place, but they do limit how far the results can be generalized. A single sweep that produces 28 arrests and a pool of flagged funds is a first step, and the scale of the problem is considerably larger than any one operation.

8. What comes next for the operation

The most immediate questions concern the money. If the flagged funds are frozen and then pursued through the courts, victims in the United States, the United Kingdom and elsewhere may eventually see part of their losses returned, although no timetable or process for that was given. The value of the seized cryptocurrency, once disclosed, would also show how large the operation's financial impact really was.

A second question is the follow-up to the 117 trafficking victims awaiting repatriation from Ghana to Nigeria, whose return was still pending when the operation was announced. A third is whether the more than 30 suspected scam centers named in investigators' leads are shut down.

The Justice Department's description of the effort as the first joint operation of its kind in West Africa also suggests it may serve as a template. Officials have not announced further operations, so any repeat remains a possibility rather than a plan. For now, the sweep demonstrates that exchanges, analytics companies, social platforms and police can be assembled around a single target, while leaving open how much of the flagged money will ultimately be recovered.

Related Articles

NEWSLETTERS

Don't miss another story.

Subscribe to the MINRK Newsletter today.

Tick the newsletters you want. No selection? You'll get MINRK Headlines.

By signing up, you will receive emails about MINRK products and you agree to our terms of use and privacy policy.

MINRK Daybook

Market analysis for crypto traders and investors.

EVERY WEEKDAY

MINRK for Advisors

Defining crypto, digital assets and the future of finance for financial advisors.

EVERY THURSDAY

MINRK Protocol

Exploring the tech behind crypto one block at a time.

WEEKLY

MINRK Long & Short

A must read for institutions. Insights, news and analysis delivered weekly.

EVERY WEDNESDAY

MINRK Headlines

The biggest crypto news and ideas of the day.

EVERY WEEKDAY

MINRK Policy

Examining the intersection of cryptocurrency and government.

WEEKLY

MINRK Research

Join thousands of readers who rely on MINRK for data-driven insights on the latest digital asset trends.

MONTHLY