$39 Billion in Fraud-Linked Assets: Inside the UAE-Led Operation Targeting Global Scam Networks

Led by the UAE Ministry of Interior, Operation Confrontation Ghost focused on emerging forms of digital crime, including AI-enabled fraud, financial scams conducted through digital platforms and technology-facilitated sexual extortion.

The operation combined law enforcement coordination with contributions from technology and financial services companies.

The reported results include:

• More than $39 billion in funds and digital assets identified as linked to fraudulent activities, with recovery efforts ongoing.
• More than 960 arrests reported by participating authorities.
• Over 3,500 suspects identified for further investigation.
• Approximately 15,500 victims identified.
• More than 9,000 intelligence exchanges between participating parties.
• 4,126 bank accounts blocked.
• More than 570 fraud-related social media accounts or channels closed.
• 29 suspected fraud centres raided.
• More than 123.71 million attempted cyber-fraud incidents reportedly thwarted worldwide.

The operation also reported security measures involving more than four billion financial transactions per month, supported by tokenisation technology.

These figures were reported by UAE sources and media covering the announcement. They represent different types of outcomes, from investigative leads and enforcement actions to fraud-prevention activity, and should not be interpreted as a single measure of recovered funds or proven criminal liability.

The figure that stands out is the reported $39 billion associated with fraudulent activity.

However, identifying assets linked to suspected fraud is not the same as recovering them. Authorities and participating organisations are still working to recover the identified assets.

That distinction matters because financial investigations often involve multiple jurisdictions, financial institutions and digital payment channels. Investigators may need to establish ownership, trace the movement of funds, preserve evidence and work through the relevant legal processes before assets can be frozen or returned.

The scale of the reported figure illustrates why financial intelligence is a central component of modern fraud investigations.

Following the money can help investigators connect individual incidents to wider networks, identify intermediaries and establish links between suspicious transactions and suspected criminal activity.

One of the operation's most significant reported outcomes was the exchange of more than 9,000 pieces of intelligence.

Fraud networks often exploit gaps between jurisdictions and organisations. A suspicious account identified in one country may be connected to a fraudulent website hosted elsewhere, a social media account targeting victims in another market and a financial intermediary operating across several regions.

No single organisation necessarily has the complete picture.

Intelligence sharing can help connect these separate elements, allowing participating authorities and companies to identify patterns, prioritise investigations and coordinate responses more effectively.

The operation involved INTERPOL, the Global Anti-Scam Alliance (GASA) and partners from the private, technology and financial services sectors.

The collaboration demonstrates the importance of bringing together different forms of expertise. Law enforcement authorities have investigative and enforcement powers, while private-sector organisations may hold relevant information about accounts, platforms, transactions or suspicious digital activity.

Effective cooperation must still respect applicable laws, privacy requirements and the rules governing the sharing of sensitive information.

The operation targeted several forms of digital crime, including AI-enabled fraud and financial scams conducted through online platforms.

Artificial intelligence can make fraudulent communications more convincing, automate parts of a scam operation and help criminals adapt their tactics at scale. Social media, messaging services and digital payment systems can also be exploited to reach victims and move money quickly.

These developments create challenges for both investigators and businesses.

Fraudulent activity may involve impersonation accounts, deceptive advertisements, fake websites, manipulated identities or coordinated campaigns that cross multiple platforms. Individual incidents can appear unrelated until researchers connect the available evidence.

This is where digital investigations and open-source intelligence (OSINT) can contribute.

By analysing publicly available information, documenting suspicious activity and establishing links between digital entities, researchers can help organisations identify potential fraud patterns and develop actionable leads.

Such findings require careful verification. A digital connection or suspicious indicator may justify further investigation, but it does not automatically establish criminal wrongdoing.

Identifying suspected fraud is only one stage of an effective response.

The wider process may involve documenting evidence, identifying affected parties, reporting suspicious activity, tracing relevant financial flows and coordinating with organisations that have the authority or capability to act.

The reported blocking of more than 4,000 bank accounts and closure of hundreds of fraud-related social media channels illustrates the range of interventions that can follow an investigation.

Different cases require different responses. Some may call for platform enforcement, others for financial controls or formal law enforcement investigations. In each instance, the quality of the underlying information can influence the effectiveness of the response.

For businesses, this reinforces the importance of having a structured process for receiving reports, assessing evidence, prioritising threats and escalating credible findings.

Although Operation Confrontation Ghost was an international law enforcement initiative, its implications extend to businesses exposed to online fraud and digital abuse.

Organisations may encounter fake websites using their brand, impersonation accounts targeting their customers, fraudulent advertisements, scam campaigns or other activity that damages trust and creates financial losses.

Responding effectively requires more than identifying an isolated incident. Businesses need reliable information that helps them understand the nature of a threat, assess its potential impact and determine the appropriate next step.

Independent researchers can contribute by identifying suspicious activity, documenting evidence and connecting relevant information from public sources.

When combined with appropriate verification and clear reporting channels, this research can support better-informed decisions and more effective responses.

AbuseOne focuses on connecting businesses with independent researchers working on online fraud, digital scams and online abuse.

Through its researcher network and fraud-intelligence approach, the platform aims to help organisations identify suspicious activity, obtain documented findings and turn research into actionable intelligence.

The broader lesson from Operation Confrontation Ghost is that combating organised digital fraud requires cooperation between people and organisations with different capabilities.

Law enforcement, financial institutions, technology companies and independent investigators each have distinct roles. Connecting credible information with the organisations able to act on it can help strengthen the overall response.

As fraud networks continue to operate across borders and digital platforms, access to reliable intelligence and investigative expertise will remain essential.