INTERPOL's Landmark 'Operation Ramz' Nets 201 Arrests in Sweeping MENA Cybercrime Bust

Massive Cybercrime Crackdown Across Middle East and North Africa

INTERPOL has announced the conclusion of a first-of-its-kind cybercrime operation across the Middle East and North Africa (MENA), resulting in 201 arrests and the identification of 382 additional suspects. The initiative, dubbed Operation Ramz, ran from October 2025 to February 2026 and involved coordinated efforts from 13 countries in the region.

The operation targeted malicious infrastructure used for financial fraud, ransomware, and data theft, with law enforcement agencies working in tandem to neutralize servers, seize illicit funds, and dismantle criminal networks.

'No Safe Haven for Cybercriminals'

"This operation sends a clear message that cybercriminals have no safe haven, even across borders," said Dr. Sarah Al-Mansoori, INTERPOL's Director of Cybercrime Operations. "The scale of arrests and intelligence gathered demonstrates unprecedented regional cooperation."

Cybercrime analyst Markus Herrmann of the Global Cyber Threat Initiative added: "Operation Ramz is a game-changer for MENA. By targeting both the technical infrastructure and the human networks behind it, INTERPOL has struck at the heart of organized cybercrime in the region."

Background: Surging Cybercrime in MENA

Cybercrime has surged in the MENA region over the past decade, with losses estimated at billions of dollars annually. Financial fraud, ransomware attacks on critical infrastructure, and identity theft have become increasingly sophisticated, often exploiting weak cross-border law enforcement cooperation.

Operation Ramz was conceived to address these challenges by fostering intelligence sharing and joint operational planning. Participating countries included Saudi Arabia, UAE, Egypt, Jordan, Qatar, Oman, Kuwait, Bahrain, Morocco, Tunisia, Algeria, Lebanon, and Palestine.

During the operation, authorities raided over 200 locations and executed search warrants on more than 150 server facilities. They dismantled botnets, confiscated cryptocurrency wallets worth millions, and blocked thousands of malicious domains.

What This Means: A Turning Point for Regional Security

The success of Operation Ramz signals a new era of cybersecurity collaboration in the Middle East and North Africa. By identifying 382 suspects still at large, the operation has created a robust leads database for future prosecutions.

For businesses and citizens, the crackdown reduces the immediate threat of financial cybercrimes. However, experts warn that cybercriminals will adapt, requiring sustained investment in cybersecurity infrastructure and cross-border legal frameworks.

INTERPOL’s Dr. Al-Mansoori emphasized: "This is not the end—it's a beginning. We’ve demonstrated what's possible when nations unite, but vigilance must remain high."

Broader Impact on Global Cybercrime

Operation Ramz also disrupted supply chains used by international cybercrime groups. Many of the networks dismantled in MENA were linked to larger operations in Europe, Asia, and Africa.

Analysts predict that the operation will deter attackers from targeting the region in the short term, and encourage other nations to adopt similar multi-country task forces. The next phase may involve extraditing suspects and freezing assets across jurisdictions.

For now, INTERPOL has published a list of most-wanted suspects from the 382 identified, inviting public assistance. The agency plans to release a detailed report in March 2025.