Online fraud, hacked accounts, sextortion, fake investment schemes: cybercrime is now part of everyday life in Ghana. Many victims do not report it, either from embarrassment or because they do not know where to go. There is a dedicated place to go.

The Cyber Security Authority

The Cyber Security Authority (CSA) was established by the Cybersecurity Act, 2020 (Act 1038), which Parliament passed in November 2020. The Authority began operating on 1 October 2021, evolving from the earlier National Cyber Security Centre. It sits under the Ministry responsible for communications and digitalisation.

Its job, in plain terms:

  • Regulate cybersecurity activities in Ghana, including licensing cybersecurity service providers.
  • Prevent, manage and respond to cyber threats and incidents.
  • Protect critical information infrastructure, the systems the country depends on.
  • Educate the public about cybercrime and cybersecurity.
  • Work with law enforcement, including the police, on cybercrime cases.

How to report: 292

The CSA runs a reporting line on 292. Reports have been reported as taken by call or text on all networks. Trained staff gather information about the incident and guide you on the next steps. The Authority has received tens of thousands of contacts through this channel, with online fraud the largest category.

If money has just left your account, call your bank or mobile money provider first so they can try to stop it. Then report to the CSA and the police.

What you can report

  • Online fraud: fake shops, investment and crypto scams, MoMo scams.
  • Account takeovers: hacked WhatsApp, Facebook, email.
  • Online blackmail and sextortion: threats to share private images or information.
  • Romance scams and impersonation.
  • Identity fraud: someone using your details or Ghana Card.
  • Child online abuse.
  • Attacks on organisations, such as ransomware or data breaches.

Before you report: gather evidence

  1. Do not delete anything. Keep messages, emails and call logs.
  2. Take screenshots showing usernames, phone numbers, links and dates.
  3. Note transaction details: IDs, amounts, dates, receiving numbers or accounts.
  4. Write a short timeline of what happened while you remember it.
  5. Save links to fake pages or profiles.

If you are being blackmailed

  • Do not pay. Paying rarely ends it and often leads to more demands.
  • Stop replying, but do not delete the conversation.
  • Report the account on the platform and report to the CSA and the police.
  • Talk to someone you trust. You are the victim of a crime; you have nothing to be ashamed of.

Prevention basics

  • Turn on two-step verification on WhatsApp, email and social media.
  • Never share PINs or one-time codes.
  • Be suspicious of investment returns that sound too good to be true.
  • Check before you click links in messages, even from friends.
Reporting helps the next person. Scammers reuse the same tricks until someone stops them.

This guide was checked in October 2026. Menus and services change, so if something looks different on your phone, check with your provider.

Common questions

Is reporting to 292 free?

The line has been described as toll-free on all networks. Check the Cyber Security Authority’s channels for the latest details.

Should I report to the police as well?

Yes. The CSA works with law enforcement, but a police report is often needed for banks, insurers and investigations.

What if the scammer is outside Ghana?

Still report it. Cybercrime often crosses borders, and reports help authorities spot patterns and work with partners abroad.

Can businesses report attacks too?

Yes. Organisations facing incidents such as ransomware or data breaches should report them, and some are required to by law.

Sources