A major multinational operation across six African nations has uncovered a sophisticated ecosystem of terrorism financing, stretching from informal cash transfer systems to cryptocurrency-driven Ponzi schemes. Between July and September 2025, Operation Catalyst, jointly led by INTERPOL and AFRIPOL, resulted in 83 arrests and identified more than USD 260 million in suspicious funds potentially tied to terrorist activities. The findings offer an unprecedented window into how extremist groups have evolved their financial infrastructure, fusing conventional laundering methods with digital innovations to evade detection.

Terrorism financing networks uncovered through Operation Catalyst

Operation Catalyst was the first coordinated African effort to simultaneously target terrorism financing across borders, blending counter-terrorism, financial-crime and cyber-investigative expertise. By screening more than 15 000 individuals and entities, law enforcement revealed a web of money movement channels supporting extremist networks through direct and indirect means.

The cases spanned traditional cash couriers, informal value-transfer systems, and complex virtual-asset chains. In Angola, 25 individuals were detained for operating shadow money-transfer businesses that moved funds outside formal banking systems. Investigators seized USD 588 000, 100 mobile phones, and 40 computers, freezing 60 bank accounts believed to be used to funnel money into extremist groups.

In Kenya, a virtual-asset platform was exploited to channel approximately USD 430 000 into suspected recruitment and propaganda operations. Authorities traced the transactions through multiple wallets and exchanges before discovering that the proceeds originated from fake online trading schemes in Tanzania. The case underscored how terrorist organisations leverage cryptocurrency for both financing and radicalisation, blending economic crime with ideological warfare.

Nigeria’s component of the operation targeted high-level terrorist members directly. Eleven suspects were arrested, including individuals believed to coordinate fundraising activities through scams and fraudulent investments. This demonstrates how terrorism financing often overlaps with organized fraud, where the same infrastructure used for victim deception also fuels extremist operations.

The most striking discovery came from a global Ponzi scheme affecting 17 countries, which investigators linked to wallets associated with terror networks. The scheme defrauded over 100 000 victims worldwide and generated losses estimated at USD 562 million. A Red Notice was later issued for the suspected orchestrator, whose digital footprint revealed sophisticated laundering through multiple cryptocurrency addresses and fiat-conversion points.

Collectively, these findings paint a picture of an agile and adaptive terrorist-financing environment—one that capitalises on financial innovation, weak regulatory coverage, and fragmented supervision across jurisdictions.

The convergence between money laundering and terrorist financing

The overlap between terrorism financing and traditional money laundering was at the heart of Operation Catalyst’s findings. While laundering typically aims to conceal criminal proceeds for personal enrichment, terrorist financing is focused on sustaining networks, logistics and propaganda. Yet both rely on similar concealment tools: layering of funds, misuse of intermediaries, and cross-border transfers.

In the African cases examined, funds flowed through informal transfer networks where traceability is minimal. These systems operate parallel to official banking channels and are often justified as remittance facilitators in regions with limited financial infrastructure. However, when co-opted by criminal intermediaries, they provide an opaque channel to send and receive money linked to extremist operations.

The emergence of digital assets has further blurred the boundary between laundering and terror financing. Virtual-asset service providers (VASPs) serve as ideal vehicles for layering, as they allow rapid transfers across multiple jurisdictions with varying regulatory maturity. Terrorist entities exploit this gap, converting cash from scams and frauds into crypto, then redistributing it across wallet clusters before reintegration into fiat systems.

Operation Catalyst also exposed how fraudulent activity often finances terrorism indirectly. Online Ponzi schemes and cyber-scams generate huge liquidity pools, which intermediaries then redirect to extremist networks under the guise of legitimate commercial flows. This blending of criminal revenue with ideological objectives complicates law enforcement detection because the initial predicate offense—fraud—appears non-terrorist in nature.

These findings reinforce the principle that any profit-motivated crime can become a terrorism-financing risk. It also reveals that terrorism financing is no longer confined to cash smuggling or state sponsorship. It now extends into a digitised ecosystem where laundering, fraud, and extremist ideology coalesce within the same network of actors.

Lessons for law enforcement and compliance frameworks

Operation Catalyst demonstrated that the financial battle against terrorism can only succeed through cross-disciplinary and international coordination. Traditional AML programs are ill-equipped to address schemes where money laundering, cybercrime, and ideological funding converge. By combining the expertise of financial-crime units, counter-terrorism agencies, and cyber-investigators, authorities created a model of integrated enforcement that could serve as a template for future global operations.

From a regulatory standpoint, several lessons emerge. First, virtual-asset supervision remains a weak link. Many jurisdictions participating in Operation Catalyst lacked comprehensive licensing or reporting requirements for VASPs, creating vulnerabilities that terrorist financiers exploited. The operation showed the necessity for harmonised rules covering virtual-asset transfers, beneficial ownership data, and travel-rule compliance across borders.

Second, informal value-transfer systems must be addressed through targeted outreach and regulation rather than prohibition. In many African economies, these systems are essential for remittances, but their anonymity makes them ripe for abuse. Authorities need partnerships with local communities to identify suspicious operators and integrate them into reporting frameworks.

Third, cooperation between law enforcement and the private sector is no longer optional. Data supplied by private-sector intelligence providers such as blockchain-analytics companies and risk-rating firms was critical to tracing transactions in this operation. Financial institutions should adopt similar models of public-private collaboration, integrating law-enforcement feedback into transaction-monitoring and suspicious-activity reporting workflows.

For compliance officers, Operation Catalyst is a call to action. Terrorism financing risks must be embedded into enterprise-wide risk assessments, not siloed under sanctions or AML categories. Banks and fintechs operating in or with African markets should apply enhanced due diligence to customers engaged in high-risk sectors such as online trading, remittance services, and crypto transactions. Training programs should cover the evolving nexus between cyber-fraud and terrorist financing, ensuring front-line staff can recognise red-flag indicators like recurrent small transfers to unlicensed exchanges, rapid conversion of virtual assets, or frequent use of peer-to-peer platforms.

Building sustainable resilience against terrorism financing

The long-term success of operations like Catalyst depends on building institutional resilience against extremist finance. Beyond enforcement, the key is to strengthen financial ecosystems so that they are less vulnerable to infiltration. That means expanding financial inclusion, improving supervisory capacity, and investing in technology that enables transaction monitoring across multiple currencies and asset types.

At the policy level, governments must modernise legal definitions of terrorism financing to include crypto-based and cyber-enabled activities. Legislation should empower regulators to freeze and confiscate virtual assets linked to terrorism in the same way as traditional funds. Mutual-legal-assistance frameworks between African countries should be streamlined to allow rapid data-sharing and asset recovery.

Financial institutions should not treat terrorism financing as a rare or foreign risk. The cross-border nature of modern financial systems ensures that funds supporting extremist groups can transit through any jurisdiction, even those geographically distant from conflict zones. By adopting a holistic view that connects fraud detection, blockchain analytics and AML/CFT measures, compliance teams can better identify patterns that might otherwise slip through.

Operation Catalyst proved that intelligence-driven coordination can yield tangible results: arrests, seizures, and disruption of financial channels that would otherwise fuel instability. Yet, it also demonstrated the scale of the challenge ahead. The USD 600 000 already seized represents only a fraction of the USD 260 million in identified suspicious flows, highlighting the difficulty of asset recovery once funds are layered through virtual and informal systems. Sustained investment in financial-intelligence capacity and regional collaboration remains essential to keep pace with adversaries who constantly adapt their methods.

---

Related Links

• Financial Action Task Force – Combating Terrorist Financing
• United Nations – Counter-Terrorism Committee Executive Directorate
• AFRIPOL – Regional cooperation against terrorism financing
• World Bank – Strengthening AML/CFT capacity in Africa

Other FinCrime Central Articles About Africa’s Fight Against Terrorism Financing

• Fierce Fight Against Terrorism Financing in Somalia Gains Momentum
• South Africa’s Terror Financing Crisis: The Unchecked Flow of Extremist Funds
• A Consolidated View from FATF Follow-Up AML Reports on West Africa

Source: Interpol

Some of FinCrime Central’s articles may have been enriched or edited with the help of AI tools. It may contain unintentional errors.

Want to promote your brand, or need some help selecting the right solution or the right advisory firm? Email us at info@fincrimecentral.com; we probably have the right contact for you.