50 Countries, One Lagos Cybercrime Network: Police Bust Alleged BEC Syndicate

• Nigeria Police say a Lagos-based operation targeted victims across an international footprint spanning as many as 50 countries, exposing the scale of cross-border business email compromise.

A suspected business email compromise (BEC) syndicate in Lagos allegedly targeted victims across 50 countries, according to the Nigeria Police National Cyber Crime Centre (NPCCC), which says it has dismantled the operation and seized electronic devices linked to the investigation.

The police said the recovered devices contained information connecting the suspected operation to victims across the international network, although the identities of the affected countries, the number of victims and the value of alleged losses have not been independently established.

The operation highlights the increasingly cross-border character of cyber-enabled financial crime, with Nigerian-based suspects able to allegedly target businesses and individuals in multiple jurisdictions through digital communications.

According to the police, investigators are examining the seized devices and other digital evidence to establish the scope of the alleged operation and identify those involved.

BEC schemes typically rely on impersonation, compromised email accounts and social engineering to deceive businesses or individuals into authorising payments or changing legitimate banking instructions.

The international footprint cited by the police also raises potential AML, fraud-monitoring and asset-tracing concerns, particularly where proceeds from alleged cybercrime move through multiple accounts, jurisdictions or payment channels.

For banks and businesses, the case reinforces the importance of controls around beneficiary changes, unusual payment instructions, compromised corporate accounts and independent verification of high-value transactions.

The police said the investigation remains ongoing, with further details expected as investigators analyse the digital evidence and pursue the alleged network.