Cybercrime in Ghana Cost Victims GH¢209.7 Million in Nine Months: Common Scams and How to Report Them

Reported cybercrime in Ghana caused GH¢209.7 million in financial losses between January and September 2026, according to figures presented by the Cyber Security Authority. That is approximately US$18.0 million, £13.6 million, or CN¥120.8 million at exchange rates available on October 15, 2026.

The figure is dramatically higher than the GH¢22.5 million reported for all of 2025, which is approximately US$1.93 million, £1.46 million, or CN¥13.0 million at current exchange rates.

Online fraud remains the most frequently reported cybersecurity problem, but authorities are also seeing significant levels of online blackmail, cyberbullying, impersonation scams, cryptocurrency fraud, social engineering, account takeovers and emerging AI-assisted scams.

The scale of the problem was highlighted again in October when Ghanaian authorities, working with international law-enforcement partners, arrested 19 people in a cybercrime operation in Sasaabi near Accra. Investigators identified 89 scam victims connected to approximately US$8.3 million in losses.

Here is what the latest cybercrime numbers mean, the scams Ghanaians should watch for, how criminals target victims and exactly how to report a suspected cybercrime in Ghana.

How Much Has Ghana Lost to Cybercrime in 2026?

The latest figures indicate a sharp increase in reported financial losses linked to cybersecurity incidents.

The Cyber Security Authority recorded 4,938 cybersecurity incidents between January and September 2026.

For comparison, 4,604 incidents were recorded during the entire 2025 calendar year.

The reported financial loss figure is therefore not simply the result of more people making reports. The financial value associated with reported incidents has also increased substantially.

Authorities also caution that official figures may underestimate the real scale of cybercrime because many victims never report what happened.

What Types of Cybercrime Are Being Reported in Ghana?

Online fraud remains the largest category in the Cyber Security Authority’s current statistics.

The categories can overlap in practice.

For example, someone may first be approached through a fake social media account, develop what appears to be a romantic relationship, be persuaded to share intimate images and later become the victim of online blackmail.

Likewise, an impersonation scam may lead to mobile money fraud or unauthorized banking transactions.

What Are the Most Common Online Scams in Ghana?

Cybercriminals use many different techniques, but most depend on some form of social engineering.

Social engineering means manipulating a person into voluntarily providing money, passwords, verification codes or confidential information.

Common schemes include:

• Fake online shops.
• Mobile money scams.
• Bank impersonation scams.
• Fake investment opportunities.
• Cryptocurrency scams.
• Romance scams.
• Sextortion and online blackmail.
• Fake job offers.
• Fake government or law-enforcement messages.
• WhatsApp account takeovers.
• SIM-swap fraud.
• Business impersonation.
• Phishing links.
• Fake social media accounts.

The exact method changes, but the objective is usually the same: convince the victim to send money or surrender access to an account.

How Mobile Money and Banking Scams Work in Ghana

Mobile money and bank customers remain attractive targets because criminals can quickly convert stolen credentials into financial transactions.

The Cyber Security Authority has warned about fraudsters impersonating banks and businesses.

In one common scheme, a victim receives a message or call from someone claiming to represent a bank.

The fraudster may ask for:

• Ghana Card details.
• Bank card numbers.
• Card expiry dates.
• CVV security codes.
• Mobile money PINs.
• One-time passwords.
• Account verification codes.

Once these details are surrendered, criminals may attempt unauthorized transactions or take control of the victim’s account.

If a caller claims to be from your bank or mobile network, end the conversation and contact the institution using a phone number listed on its official website, app or bank card.

Romance Scams, Sextortion and Online Blackmail

Online relationships can also be used to target victims financially.

A fraudster may create a fake identity, build trust with a victim over time and eventually request money.

Other cases involve sextortion.

The criminal may persuade the victim to share intimate images or participate in a sexual video call.

The victim is then threatened with having those images sent to relatives, employers or social media contacts unless money is paid.

The Cyber Security Authority advises victims not to continue paying a blackmailer.

Payment does not guarantee that the material will be deleted and can encourage additional demands.

Instead:

• Stop communicating with the perpetrator.
• Preserve screenshots and messages.
• Save usernames, phone numbers and payment demands.
• Block the account after preserving evidence.
• Report the incident to the Cyber Security Authority.

Investment and Cryptocurrency Scams

Fake investment schemes increasingly use cryptocurrency, social media and messaging apps.

A common strategy is sometimes described internationally as “pig butchering.”

The criminal spends time building trust with the victim before introducing what appears to be a profitable investment opportunity.

The victim may be directed to a website or app showing fake investment profits.

At first, small withdrawals may even be allowed to create confidence.

The victim is then encouraged to invest increasingly large amounts.

When the person finally attempts to withdraw the money, the platform may demand additional taxes, verification payments or release fees.

The supposed investment account may never have contained genuine investment assets at all.

Consumers should independently verify investment companies and never rely solely on screenshots showing profits or recommendations from someone they met online.

Business Email and Company Impersonation Scams

Businesses can lose large sums when criminals impersonate suppliers, executives or trusted partners.

A fraudster may compromise or imitate a legitimate email account and then send new payment instructions.

For example, a business expecting to pay a supplier may receive an email claiming that the supplier’s bank account has changed.

If the company follows the fraudulent instructions without independently verifying them, the payment can be diverted to an account controlled by criminals.

Businesses should verify changes to payment instructions using a separate communication method.

Do not confirm a bank-account change by simply replying to the email that requested the change.

AI and Deepfake Scams Are an Emerging Threat

The Cyber Security Authority has identified artificial intelligence-generated deepfakes and brand impersonation among emerging cyber threats.

AI tools can make impersonation scams more convincing by creating realistic-looking images, voices and videos.

A scammer may attempt to imitate:

• A family member.
• A company executive.
• A celebrity.
• A government official.
• A bank representative.
• A romantic partner.

People should therefore avoid treating a voice recording or video as absolute proof of identity when money or sensitive information is being requested.

If the request is unusual, verify it through a separate trusted channel.

What Happened in the Sasaabi Cybercrime Operation?

The scale of organized online fraud became particularly visible in October 2026 during an international enforcement operation targeting suspected scam networks operating in West Africa.

According to the U.S. Department of Justice, authorities arrested 19 people in Sasaabi, a suburb of Accra.

Investigators also seized 303 electronic devices.

The operation identified 89 victims of online scams who had suffered approximately US$8.3 million in losses.

Authorities also identified 117 suspected human trafficking victims awaiting repatriation to Nigeria.

The Ghana operation involved:

• Ghana’s Cyber Security Authority.
• Ghana Police Service Criminal Investigation Department.
• National Security Service.
• United Kingdom National Crime Agency.
• United States Federal Bureau of Investigation.
• Nigeria’s Economic and Financial Crimes Commission.

The wider international operation resulted in 28 arrests in Ghana and Nigeria and the removal of more than 3.7 million fraudulent social media accounts, pages and groups.

The U.S. Department of Justice said participating companies also identified more than US$11 million in potentially freezable funds.

Cybercrime Operations Can Also Involve Human Trafficking

The Sasaabi case also demonstrates that some cybercrime networks may involve people who are themselves victims of trafficking.

International investigators increasingly describe some scam centers as organized operations where workers may be recruited, transported or controlled and then forced or pressured to participate in online fraud.

Authorities identified 117 suspected trafficking victims during the Ghana operation.

This means law-enforcement investigations may involve two separate groups: suspected perpetrators and people who may have been exploited by the criminal organization.

Warning Signs That You May Be Dealing With an Online Scam

Not every scam looks the same, but several warning signs appear repeatedly.

• You are pressured to act immediately.
• The person tells you not to speak to your bank or family.
• You are asked for an OTP, PIN or password.
• Payment must be made to a personal mobile money number.
• An investment promises unusually high or guaranteed returns.
• A stranger quickly develops an intense romantic relationship.
• You are threatened with arrest unless you make a payment.
• A business suddenly changes its bank-account details by email.
• A company asks for information that a legitimate company should already have.
• You are told to pay another fee before withdrawing investment profits.
• The person wants to move the conversation immediately to WhatsApp, Telegram or another private messaging platform.

No single warning sign proves fraud, but several appearing together should trigger additional verification.

What Should You Do If You Have Been Scammed?

Act quickly.

If money has been transferred, immediately contact the bank, mobile money provider, card issuer or financial institution involved.

Ask whether the transaction can be stopped, frozen, reversed or traced.

Then preserve evidence.

Useful evidence can include:

• Screenshots.
• Phone numbers.
• Email addresses.
• Social media usernames.
• Website addresses.
• Mobile money numbers.
• Bank-account details.
• Receipts.
• Transaction IDs.
• Messages and emails.
• Photos or videos sent by the scammer.

Do not delete conversations simply because they are embarrassing.

Those messages may help investigators identify the perpetrator or connect the incident with other cases.

If an account has been compromised, change the password immediately and enable multi-factor authentication where available.

How to Report Cybercrime in Ghana

The Cyber Security Authority provides several official methods for reporting cybercrime and cybersecurity incidents.

The CSA says these reporting channels can be used both to report incidents and to seek guidance about suspicious online activity.

You can access the official Cyber Security Authority incident reporting form here.

What Information Should You Include in a Cybercrime Report?

The more evidence you can provide, the easier it may be for investigators to understand what happened.

Include:

• Your name and contact information.
• When the incident occurred.
• How you were contacted.
• The platform used.
• The amount of money lost, if any.
• Transaction numbers.
• Phone numbers and account numbers used by the suspected scammer.
• Screenshots or copies of messages.
• Links to suspicious websites or social media profiles.

If you have already contacted your bank or mobile money provider, keep the reference number from that report as well.

How to Protect Yourself From Online Fraud in Ghana

Most successful scams do not depend on sophisticated hacking. They depend on convincing a person to make a mistake.

Basic security habits can therefore prevent many incidents.

• Use unique passwords for important accounts.
• Enable two-factor authentication.
• Never reveal OTPs or verification codes.
• Do not share mobile money PINs.
• Verify payment requests independently.
• Do not download unexpected attachments.
• Check website addresses carefully.
• Avoid sending money to strangers you only know online.
• Be skeptical of guaranteed investment returns.
• Confirm unusual requests from relatives before sending money.
• Keep phones and computers updated.
• Review bank and mobile money statements regularly.

If something feels unusual, delaying a payment long enough to independently verify the request is often one of the best defenses.

Bottom Line

Cybercrime is creating substantial financial losses in Ghana.

Reported cybersecurity incidents caused GH¢209.7 million in financial losses between January and September 2026, while online fraud accounted for nearly half of reported incidents.

The problem ranges from small mobile money scams to organized international fraud operations involving millions of dollars.

The October Sasaabi operation, which involved 19 arrests and approximately US$8.3 million in identified victim losses, shows that some scam networks are operating at an organized and international scale.

For individuals, the most important protections remain verification, skepticism and speed.

Never share PINs or OTPs, independently verify requests for money and report suspicious activity quickly.

If you believe you have been targeted, contact the Cyber Security Authority through 292, WhatsApp at 050 160 3111, report@csa.gov.gh or the official online incident-reporting form.

Sources

• Graphic Online: “Ghana records GH¢209m in cybercrime losses in nine months” (October 15, 2026)
• Cyber Security Authority: Official Cybersecurity and Cybercrime Incident Reporting Portal
• U.S. Department of Justice: “Department of Justice Announces Results of Law Enforcement and Private Industry Joint Disruption Week Targeting Online Scam Accounts and Transnational Criminal Networks Operating in West Africa” (October 13, 2026)
• Ghana News Agency: “Ghana cybercrime operation arrests 19, uncovers US$8.3m in scam losses” (October 14, 2026)
• Cyber Security Authority: Advisory on Online Business Impersonation and Fraud (2026)