South Africa tops Africa cybercrime rankings as AI powers attacks: Interpol 2026
Synopsis
South Africa accounts for 92% of all ransomware detections in Africa and 70% of business email compromise cases, according to Interpol's 2026 African Cyberthreat Assessment. With continent-wide cybercrime losses more than doubling to $484 million, Interpol warns AI is now automating every stage of an attack — and even Africa's most advanced cyber defenders are struggling to keep pace.
Key Takeaways
South Africa accounted for 92% of all ransomware detections in Africa, per Interpol's African Cyberthreat Assessment Report 2026 .
The country also recorded 213,523 DDoS attacks, including one peaking at 312 Gbps .
South Africa represented 40% of African phishing detections and 70% of business email compromise cases in 2025 .
Cybercrime-related financial losses across Africa more than doubled, from $192 million in 2024 to $484 million in 2025.
72% of surveyed African countries reported the presence of scam centres, concentrated in Southern and West Africa .
Interpol's Neal Jetton warned that AI is now automating every stage of a cyberattack, from reconnaissance to extortion.
South Africa has become the primary target of cybercriminals across Africa, accounting for the largest share of ransomware, phishing, and business email compromise detections on the continent, according to Interpol's African Cyberthreat Assessment Report 2026. The 40-page report, released on Monday, 4 August 2025 and based on data from 36 African countries, identifies Southern Africa as 'the continent's most digitally advanced and most heavily targeted region.'
Key Detections and Attack Scale
The scale of South Africa's exposure is striking. According to the report, the country accounted for 92 per cent of all ransomware detections in Africa recorded by TrendAI. It also registered 213,523 distributed denial-of-service (DDoS) attacks, including a single incident that peaked at 312 gigabits per second.
South Africa further accounted for nearly 40 per cent of all African phishing detections tracked by cybersecurity firm SOCRadar, and 70 per cent of business email compromise detections in 2025 based on TrendAI data. These figures collectively position the country as the continent's most exposed digital economy.
Financial Losses More Than Double
Financial damage from cybercrime across Africa has surged dramatically. Losses more than doubled between 2024 and 2025, rising from $192 million to $484 million, according to the Interpol report. Online scams remained the most frequently reported category, with criminals leveraging mobile money platforms, social media, and artificial intelligence to reach victims at scale.
The report noted that 72 per cent of surveyed African countries reported the presence of scam centres, with the highest concentrations found in Southern and West Africa.
AI Is Reshaping the Threat Landscape
Interpol's assessment warns that cybercrime across Africa has evolved from isolated incidents into what it describes as 'an industrialized, borderless ecosystem,' driven increasingly by artificial intelligence and automated tools.
Neal Jetton, Director of Interpol's Cybercrime Unit, said in a statement: 'Cybercrime has emerged as one of the most significant criminal threats to the region.' He added: 'AI is automating every stage of a cyberattack, from reconnaissance and phishing to extortion and evasion.'
Jetton also struck a note of cautious optimism: 'However, we see that when countries work together, cybercriminal infrastructure can be identified, disrupted and dismantled.'
Advanced Frameworks, Persistent Vulnerabilities
The report underscores a central paradox: despite having some of the continent's most developed cybersecurity frameworks, Southern African countries remain vulnerable to the speed and scale of AI-enabled attacks. The automation advantage currently lies with attackers, not defenders.
This comes amid growing international pressure on African governments to strengthen cross-border cyber cooperation. Interpol's findings are expected to inform regional policy discussions on digital crime in the months ahead.
Point of View
Phishing, business email compromise, DDoS — is not simply a function of being a larger digital economy. It reflects the compounding risk of being the most connected node in a region where cross-border enforcement remains fragmented. The doubling of Africa-wide losses to $484 million in a single year is a structural alarm, not a statistical blip. What the Interpol report quietly surfaces is that advanced cybersecurity frameworks are necessary but not sufficient when attackers can deploy AI at a speed that outpaces institutional response cycles. The real policy gap is coordinated, real-time threat intelligence sharing across African states — something Interpol advocates but which remains inconsistent in practice.
NationPress
6 Aug 2026
Frequently Asked Questions
Why is South Africa the biggest cybercrime target in Africa?
South Africa is the most digitally advanced economy in the region, making it the highest-value target for cybercriminals. According to Interpol's 2026 African Cyberthreat Assessment Report, this digital maturity, combined with fragmented regional enforcement, has made it account for 92% of ransomware detections and 70% of business email compromise cases on the continent.
How much have cybercrime losses grown in Africa?
Financial losses linked to cybercrime in Africa more than doubled between 2024 and 2025, rising from $192 million to $484 million, according to the Interpol report. Online scams were the most frequently reported category.
What role is AI playing in African cyberattacks?
Interpol warns that AI is now automating every stage of a cyberattack, including reconnaissance, phishing, extortion, and evasion. The report describes the continent's cybercrime landscape as an 'industrialized, borderless ecosystem' increasingly driven by artificial intelligence and automated tools.
What is the Interpol African Cyberthreat Assessment Report 2026?
It is a 40-page report released by Interpol on 4 August 2025, based on data collected from 36 African countries. It assesses the state of cybercrime across Africa, identifying key threats, financial impacts, and the growing role of AI in enabling attacks.
Which regions in Africa have the highest concentration of scam centres?
According to the Interpol report, 72% of surveyed African countries reported the presence of scam centres, with the highest concentrations found in Southern and West Africa.
