One Binance Hack Equals 13 Years of Africa’s Cybercrime Losses

In about 20 minutes, hackers moved roughly $6.3 billion out of Binance. At the pace of 2025, it would take African victims about 13 years to report losing that much to cybercrime.

The comparison comes from putting two sets of numbers side by side. INTERPOL’s 2026 African Cyberthreat Assessment counts $484 million in reported cybercrime losses across the continent in 2025, up from $192 million in 2024. The Binance theft, worth about $6.36 billion by TRM Labs’ count, is 13 times bigger. The match-up is not like for like, and this report explains why. But it shows two things at once. Africa’s losses are painful for the people and small firms who bear them, yet tiny next to one global breach. And the real African number is almost certainly higher than the one on paper.

Start with where the $484 million comes from. It is in a 40-page report that INTERPOL published on 3 August 2026. The report draws on survey returns from law enforcement agencies in 36 African member countries. INTERPOL says it cross-checked those returns against data from security and payment firms, including Fortinet, Mastercard, Shadowserver, S2W and TrendAI. It was funded by the UK’s Foreign, Commonwealth and Development Office as part of the African Joint Operation against Cybercrime. The key phrase is “reported losses.” These are losses that victims told someone about, and that someone passed on.

Here are the sums. They are ours, using public figures.

Read the table with care. The Binance figure is the value of assets taken from one company. The African figure is the sum of what people and firms said they lost across a continent. Binance has said it will cover customer losses from its own reserves, so its users are not meant to be out of pocket. Most African victims have no such safety net. A fake loan app, a hijacked SIM or a cloned voice takes money from people who will never see it again.

The two African figures do not line up with each other either. Last year, INTERPOL’s earlier assessment put cumulative losses at more than $3 billion for 2019 to 2025. Spread over seven years, that is about $430 million a year. Yet this year’s report says losses were $192 million in 2024 and $484 million in 2025. Those numbers cannot all describe the same thing. The likely reason is that the surveys cover different countries and count different things. That is not a flaw in any one report. It tells you that nobody has a clean, continent-wide count yet.

Other evidence suggests the true figure is higher. A report from the Africa Cyber Immersion Centre put Kenya’s losses to hackers and cyber incidents in 2024 and 2025 at about Ksh29.9 billion, or roughly $230 million. If that figure is right, one country would equal nearly half of INTERPOL’s whole-continent total. The periods and methods differ, so we do not add them up. We use them to show how thin the count may be. In Kenya’s data, identity-based attacks such as phishing, stolen logins and business email compromise made up 48% of incidents. Ransomware and supply-chain attacks were only 9% of incidents but 25% of the value lost. Financial services, government and telecoms were hit most often.

What is driving the losses? INTERPOL points to three forces that feed one another.

AI is the new accelerant. Neal Jetton, who leads INTERPOL’s cybercrime work, said AI “is automating every stage of a cyberattack, from reconnaissance and phishing to extortion and evasion.” The report says what was once a mix of lone online scams has become an “industrialised, borderless ecosystem.” Fakes are cheap to make now. Criminals can write a perfect email, clone a voice and build a fake identity that passes a basic check. INTERPOL warns that such synthetic identities have been used to open bank accounts, get mobile loans and register SIM cards. A law firm review of the report adds that most deepfake abuse so far hits individuals with low-value frauds, not headline-grabbing cases.

The regional picture differs. East Africa is a hub for mobile money fraud and for ransomware aimed at infrastructure. Central and West Africa see more business email compromise and romance scams, often run against victims in Europe and North America. Southern Africa’s high connectivity makes it a magnet for global attackers. South Africa shows the pressure. In March 2026, Statistics South Africa confirmed a breach by a group calling itself XP95, which claimed 154 GB of data and demanded $100,000. The agency refused to pay. The same group claimed 3.8 TB from the Gauteng provincial government. A Sophos survey this September found that South African firms spent an average of more than R17 million on recovery from ransomware, not counting any ransom. Only 40% recovered within a week, the lowest rate of any country in the survey.

Not every sign points up. Nigeria’s numbers tell a mixed story. One industry report found that losses from digital payment fraud fell by more than half, from N52.26 billion in 2024 to N25.85 billion in 2025. The same report says fraud losses are up about 350% since 2020, while reported cases fell about 31%. Fewer cases with bigger and more targeted hits is the pattern you would expect as criminals get pickier. It also suggests that headline falls can hide a harder problem.

The bigger worry is who catches the criminals. INTERPOL’s survey found that 94% of responding agencies lack adequate digital forensic tools. Some 89% named cross-border cooperation as the biggest barrier to a successful case. And 66% said ransomware victims usually cannot get their files back. The report says cybercrime laws across the region are “fragmented” and that police readiness to handle AI is “alarmingly low.” There is progress. In 2025, 17 countries passed or updated cybercrime laws. The African Union’s Malabo Convention took effect in June 2023, but only 20 of 55 member states have ratified it.

Joint operations are working, though. Four INTERPOL-coordinated operations in 2025 and 2026, called Serengeti 2.0, Contender 3.0, Sentinel and Red Card 2.0, led to more than 1,500 arrests and over $100 million recovered. Red Card 2.0 gives a closer look at the money.

On our sums, that is about $36,000 lost per victim in these cases. It is also about 10 cents recovered for every dollar lost. That is a good result by the standards of fraud work, where money moves fast. But it shows how hard the chase is. Once funds hit a mobile wallet or a crypto address, they are often gone.

Now to the other side of the comparison. Binance says the attack began on 29 October, with outflows starting at 20:05 UTC. Most of the money left within about 20 minutes, across ten blockchains. TRM Labs blames North Korea’s TraderTraitor unit with “high confidence.” Binance has not officially named a culprit. Its co-CEO, Richard Teng, has said the attack did not rest on one engineer’s permissions, and that no individual is being blamed. Binance says it will cover all losses from its emergency reserve fund and company money. It reports that between $2.85 billion and about $3 billion has been frozen, while TRM counts about $2.7 billion. The thieves still hold more than 420,000 ETH and 18,270 BTC, which TRM values at about $2.4 billion and which token issuers cannot freeze. A full root-cause report is still to come.

Why should an African reader care about a hack at a global exchange? Because the lessons travel. The attackers did not smash a wall. They went after people, using fake recruiters and trick job tests to get a foothold, then moved through internal tools until they reached the system that signs transfers. That is the same playbook INTERPOL describes across Africa: steal a login, impersonate someone trusted, automate the rest. Binance had a large security team and still lost billions. A young African fintech has a smaller team, a smaller budget and often no insurance. A report this week from Heirs Technologies, which covers Nigeria, Kenya and South Africa, notes that dollar-priced tools put strong security out of reach for many local firms. It sees room for locally delivered, lower-cost managed security services. Its research also says 82% of respondents in Sub-Saharan Africa knew someone hit by cyber-enabled fraud in the past year.

There is one more point about scale. Seen through Africa’s own money, the Binance theft is huge. It is about nine times the $684 million that Tracxn says African tech startups raised in the first nine months of 2026. Other trackers count more, and against Big Deal’s $2.16 billion it is about three times. Either way, one night of crime at one company moved more money than African tech raised in most of a year. The industry that is trying to build the continent’s next banks, wallets and exchanges is sitting on top of a pile of risk that dwarfs its funding.

Why it matters: The 13 times figure is a headline, not a verdict. Its real value is as a warning about how little we can see. Africa’s cybercrime losses are being counted from police surveys, and the counts do not match from year to year. That means regulators, investors and founders are making decisions in the dark. Fintechs and exchanges hold other people’s money, and attackers are now hunting their staff, not just their servers. Founders who limit what any one laptop can reach, practise how to cancel a stolen permission quickly and train teams to question every recruiter are doing real work. Investors can ask about these habits in due diligence, just as they ask about revenue. And policymakers have a clear to-do list: real-time data sharing between banks, telecoms and police, better forensic tools, and faster ratification of the Malabo Convention.

What to watch next: Binance’s promised root-cause report and updated proof of reserves, and how much of the roughly $2.4 billion in the thieves’ hands is frozen or recovered. Watch whether INTERPOL’s next assessment covers more countries and gives a single, steadier loss figure. Watch whether African regulators follow Nigeria in raising capital and security demands on digital asset firms. And watch whether banks and telecoms start sharing fraud data in real time, since that is the gap INTERPOL says criminals exploit most.

Sources: INTERPOL, African Cyberthreat Assessment Report 2026; Nairametrics on AI and the $484M in losses; The Citizen on South Africa’s exposure; Rainbow Radio on mobile money fraud; Mishcon de Reya on cybercrime threats to Africa in 2026; Ecofin Agency on INTERPOL’s earlier $3B estimate; The Kenya Times on Kenya’s Ksh29.9B in losses; Nairametrics on INTERPOL’s $442B global fraud estimate and Red Card 2.0; Nairametrics on the Heirs Technologies 2026 report; The Next Web on the Binance hack; CoinDesk on Binance’s report that the hack began with a fake job interview.

A note for startup founders: Don’t practice on investors. Practice on AI first. RaiseReady by Index Prima is an AI fundraising simulator for African founders: upload your pitch deck, get a readiness score and face a tough AI investor before the real meeting. Find this post, and every post we publish, at raiseready.indexprima.com.