News analysis ·
Is crypto traceable? Inside a West Africa scam sweep
Exchanges and analytics firms flagged over $11 million in a West Africa scam crackdown. How the tracing works, and why flagged is not recovered.

Officers in Ghana and Nigeria detained 28 suspects during an operation against West African fraud networks that included crypto investment scams, CoinDesk reported, citing the U.S. Department of Justice. Private firms in the sweep flagged more than $11 million for possible freezes. This article looks at how that money was traced, what a flag really means, and where the trail can go cold.
What the operation found
The U.K. National Crime Agency hosted the operation. It brought technology companies and authorities together to go after networks that targeted victims in the U.S., the U.K. and elsewhere. According to the DOJ, it was the first joint operation of this kind focused on West Africa.
The crypto side involved two exchanges, Coinbase and Binance, and three companies that specialise in blockchain analytics: Chainalysis, Elliptic and TRM Labs. According to CoinDesk, Coinbase said it helped trace illicit funds, supported asset freezes and gave intelligence to investigators. Coinbase also said it found over 65 people who were still being scammed, and that it kept more than $415,000 from being lost. Separately, TRM Labs said it exposed a large peer-to-peer laundering network.
Arrests took place on the ground too. Ghanaian officers detained 19 suspects in Sasaabi, a town near Accra, and took away 303 electronic devices. Nigeria accounted for nine further arrests. The NCA said 117 trafficking victims were identified in Ghana and were waiting to go home to Nigeria. On social media, Meta said it took down over 3.7 million Instagram and Facebook profiles, pages and groups, mostly impersonation aimed at Americans and Britons. Investigators also received tips on more than 30 suspected scam centres.
Is crypto traceable? The short answer from this case
Yes, in part. Every transfer on a public blockchain is recorded and can be followed from address to address. In this operation, analytics firms and exchanges used that record to point at more than $11 million they believed could be frozen. What the chain cannot do on its own is say who controls an address, or force anyone to hand money back.
The method: following coins from victim to cash-out
Tracing usually starts with a known address, such as the one a victim paid into. An analyst then follows each outgoing transfer. Analytics firms group addresses that appear to belong to the same operator, a technique called clustering, and label clusters they recognise, such as exchange deposit wallets.
The key moment is when traced coins reach a regulated exchange. An exchange knows who opened each account. That is why Coinbase and Binance matter here. A chain analyst can say that money arrived at an exchange; only the exchange can link that deposit to a person and stop withdrawals. This is what a freeze means in practice: the platform holding the funds blocks them while authorities act.
An exchange can also watch for live victims. If it sees a customer sending money to an address already tied to a scam cluster, it can step in before more is sent. CoinDesk's report does not say how Coinbase made its own catches, so this is only one way such a step can work.
Limits: why flagged money is not recovered money
The headline figure needs care. CoinDesk stressed that the $11 million marks money that might be frozen, not money anyone has confirmed getting back. Partners also reported crypto seizures but gave no value and did not name the assets.
- A flag is a label, not a verdict. Clustering is a statistical judgement, and an address can be grouped with the wrong owner.
- Freezes only work where someone can freeze. Coins sitting in a wallet that no company controls cannot be blocked by an analytics report.
- Peer-to-peer laundering breaks the trail. When coins are swapped directly between people, the chain shows the transfer but not the cash that changed hands off-chain, so the link to a real identity weakens.
- Undisclosed seizures leave a gap. Without amounts or asset names, readers cannot check how much of the flagged sum was actually taken back.
None of this makes the work useless. It means the chain gives investigators a map, while courts and platforms decide what happens to the money on it.
What to watch next
The useful follow-up is a conversion rate: how much of the flagged amount ends up frozen, then returned to victims. Watch for later statements from the DOJ, the NCA or the firms involved that put a value on the seizures. Also watch whether TRM Labs or others publish more on the peer-to-peer network, since that is the part of the trail hardest to follow on-chain. For anyone approached with an investment offer, the practical lesson is simple: a payment to a scam address is visible to the world, but visibility alone does not bring it back, and money sent to a scam can be lost for good.
Sources
- CoinDesk, 18 Oct 2026
Drafted by AI from the research and on-chain sources listed, then published automatically once checks confirmed the figures against those sources and found no copied text. Not reviewed by a person. Metrics are explained, never turned into price calls.