Speed and intel-sharing key to disrupting global scam networks, officials say

Four Russian nationals arrested in Thailand for ransomware operations targeting companies across Europe and other regions.
Each of us has a small piece of the puzzle
Singapore police on why international cooperation is essential to understanding and stopping cross-border scam networks.
Mark

So the German officers just texted Singapore police on WhatsApp? That seems almost too casual for something this serious.

Mimi

It does sound casual, but that's exactly the point. The formal channels—diplomatic notes, official requests—would have taken much longer. The ransomware group was about to encrypt the servers. Fifteen minutes was the difference between stopping them and losing everything.

Luke

But we should be clear: this worked because there was already a relationship between those officers. They had contacts. Not every police force has that kind of informal network with every other police force.

Mark

Right. So the real story is that speed matters, but speed requires trust and existing relationships.

Mimi

Exactly. And that's why the panelists at Cyber Week kept emphasizing the need for more of these connections. The West Africa operation worked because ten nations and fifteen tech firms had already agreed to work together.

Luke

Though I'd note: we don't know how many operations fail because those relationships don't exist. The successful ones get highlighted. The ones that move slowly or don't happen at all—we don't hear about those.

Mark

Fair point. So what's the actual barrier? Is it bureaucracy, or is it something else?

Mimi

Both. Bureaucracy, yes, but also the fact that different countries have different laws, different priorities, different levels of trust with each other. Building that takes time.

Luke

And the numbers are staggering. Four hundred forty-two billion dollars lost across 42 countries. That's not a problem you solve with a few WhatsApp messages, no matter how fast.

Mark

So what's the realistic outcome here? Can they actually disrupt these networks?

Mimi

They're taking down servers, arresting people, removing millions of scammer accounts. It's working at the tactical level. Whether it's working at the strategic level—whether scam losses are actually declining—that's harder to say.

Luke

Singapore's numbers did go down in the first half of 2026 compared to 2025, but it's still over $400 million in six months. So yes, there's progress, but the problem is still enormous.

  • Ransomware operators were minutes away from encrypting a Singapore company's servers when a WhatsApp message between German and Singaporean officers collapsed the response time from days to fifteen minutes.
  • Four Russian nationals were arrested in Thailand and twenty-seven criminal servers dismantled, but the operation exposed how dependent prevention is on personal trust between officers across jurisdictions.
  • Global scam losses have reached $442 billion across 42 countries, with Singapore alone absorbing over $4 billion since 2019 — figures that represent not statistics but savings accounts emptied and lives upended.
  • A West Africa takedown involving ten nations, fifteen tech firms, and real-time intelligence sharing resulted in 3.7 million scammer accounts removed, demonstrating that coordinated speed can overwhelm even sprawling criminal infrastructure.
  • Law enforcement leaders are now openly arguing that formal diplomatic channels are too slow to compete with criminals who operate in minutes, pushing for institutionalized informal cooperation as the new standard.

In an age when criminals cross borders in milliseconds, law enforcement is learning that the speed of justice must match the speed of harm. A 2024 incident in which German officers alerted Singapore police via WhatsApp — averting a ransomware attack within fifteen minutes — has become a symbol of what multilateral cooperation can achieve when bureaucracy yields to urgency. Against a backdrop of $442 billion in global scam losses across 42 countries, agencies from Singapore to West Africa are forging new models of trust, informal coordination, and shared authority, asking whether human institutions can evolve as quickly as the threats they face.

In 2024, Bavarian cybercrime investigators tracking a ransomware group realized an attack on a Singapore company was imminent. Rather than route a warning through official diplomatic channels — a process measured in hours or days — they sent a WhatsApp message to contacts at Singapore Police Force. Fifteen minutes later, officers were coordinating on a call; within that same window, police arrived at the targeted company, disrupted the encryption attempt, and preserved the servers. Four Russian nationals were later arrested in Thailand, and twenty-seven servers tied to the criminal network were dismantled in an operation spanning Singapore, Thailand, and the UK.

The incident became the defining story at Singapore International Cyber Week 2026, where law enforcement leaders gathered to confront a shared reality: borderless crime is outpacing the institutions designed to stop it. Thomas Goger of Germany's Bavarian Central Office for Cybercrime Prosecution argued that information sharing need not be complicated — only faster than bureaucracy typically allows. Speed, panelists agreed, is not a convenience but the margin between prevention and catastrophe.

The numbers give that urgency its weight. Scams have cost victims an estimated $442 billion across 42 countries. Singapore alone has lost more than $4 billion since 2019, and while the first half of 2026 showed a decline from the prior year, the full 2025 total reached $913.1 million — money taken from savings, businesses disrupted, lives derailed.

Steve Rodhouse of the UK National Crime Agency described a recent West Africa operation that showed what coordinated speed could accomplish. The UK agency, Meta, the FBI, ten nations, and fifteen technology firms converged to dismantle scam compounds. As intelligence flowed in real time — money moving, locations confirmed — officers raided sites and seized phones that yielded further evidence. The result was 3.7 million scammer accounts taken offline. The power, Rodhouse noted, lay not just in the intelligence but in agencies' willingness to share access and act together on what they learned.

Singapore's own investigators emphasized that each jurisdiction holds only a fragment of the full picture, and that solutions developed locally can multiply in value when exported across borders. The political dimension has also sharpened: Senior Minister K. Shanmugam signaled in October 2026 that tougher penalties for young scam mules would be pursued, on the logic that lenient sentences sustain the recruitment pipeline feeding criminal networks.

What these conversations reveal is law enforcement in the act of reinventing itself — building informal trust, sharing not just data but authority, and accepting that the old model of formal requests and weeks of processing cannot compete with criminals who move in minutes. Whether these new models can scale fast enough to match the growth of global scam networks remains the question the field has not yet answered.

In 2024, German cybercrime investigators tracking a ransomware operation discovered something urgent: the criminals were about to strike a company in Singapore. Rather than wait for official diplomatic channels to process the warning—a path that could have taken hours or days—the Bavarian officers sent a WhatsApp message to their contacts at Singapore Police Force. Fifteen minutes later, Singaporean officers called back to coordinate. Within that same window, police arrived at the company's premises, disrupted the encryption attempt, and saved the servers from damage. Four Russian nationals were arrested in Thailand for their role in the scheme, which had targeted high-value victims across Europe and beyond. Twenty-seven servers connected to the criminal network were dismantled. The operation involved cooperation from Singapore, Thailand, and the UK.

This incident, recounted at Singapore International Cyber Week 2026, became the centerpiece of a broader conversation about how law enforcement must operate in an era of borderless crime. Thomas Goger, deputy director of Germany's Bavarian Central Office for the Prosecution of Cybercrime, put it plainly: information sharing need not be complicated, but authorities must be willing to move faster than bureaucracy typically allows. Speed, he and other panelists agreed, is not a luxury—it is the difference between prevention and catastrophe.

The scale of the problem justifies the urgency. Across 42 countries, scams have cost victims an estimated $442 billion. Singapore alone has seen more than $4 billion vanish to scammers since 2019. In the first half of 2026, the figure was $410.6 million, a decline from $500.2 million in the same period the year before, but the total for all of 2025 reached $913.1 million. These are not abstract numbers—they represent money taken from people's savings, businesses disrupted, lives derailed.

Steve Rodhouse, director-general of threats at the UK National Crime Agency, described a recent operation that illustrated what coordinated speed could accomplish. The UK agency, Meta, the FBI, ten nations, and fifteen technology firms converged on West Africa to dismantle scam compounds. Ghanaian and Nigerian authorities positioned themselves to move on the ground. As intelligence flowed in real time—confirmation that money was moving, locations pinpointed as active—officers raided compounds and seized phones, which became repositories of further evidence. The result: 3.7 million accounts and entities created by scammers were taken offline. Rodhouse emphasized that the power lay not just in the intelligence itself but in the willingness of agencies to share access and act on what they learned together.

Chee Ching Yuin, assistant director of investigations at Singapore Police Force, underscored that each jurisdiction holds only a fragment of the full picture. Singapore collects reports and intelligence from its own victims and partners with industry to develop solutions. When those solutions can be exported and adapted elsewhere, the benefit multiplies across borders. The conversation at Cyber Week included representatives from Interpol, Europol, the Thai Central Investigation Bureau, and others—a recognition that no single country can solve this alone.

The political dimension has sharpened. In October 2026, Singapore's Senior Minister K. Shanmugam signaled that the government would pursue tougher laws for young scam mules, arguing that lenient sentences only encourage criminal networks to recruit more youth. The calculation is straightforward: if penalties are light, the supply of willing participants grows. Harder sentences, the logic goes, disrupt that recruitment pipeline.

What emerges from these conversations is a picture of law enforcement learning to operate at the speed of the threat. The ransomware group in 2024 moved fast; German and Singaporean police moved faster. The scam compounds in West Africa operated across multiple countries; ten nations and fifteen firms coordinated to shut them down. The old model—formal requests, official channels, weeks of processing—cannot compete with criminals who operate in minutes. The new model demands trust, informal channels when they work, and a willingness to share not just information but access and authority. Whether that model can scale fast enough to match the growth of global scam networks remains the question hanging over the conversation.

Information and intel sharing sounds highly sophisticated but in many instances, it's very easy. Authorities should be willing to move more quickly.
— Thomas Goger, deputy director of Germany's Bavarian Central Office for the Prosecution of Cybercrime
The intelligence that was shared and reacted upon was incredibly powerful. We had live examples of people confirming that money had moved and locations were active.
— Steve Rodhouse, director-general of threats at UK National Crime Agency, describing the West Africa operation
Fale Conosco FAQ