> ## Content Index
> Fetch the complete content index at: https://chale.tech/llms.txt
> Use this file to discover other available public pages before exploring further.

# How to recognise phishing messages and fake links
- URL: https://chale.tech/how-to-spot-phishing-messages/
- Published: 2026-10-16T13:00:00.000Z
- Updated: 2026-10-16T13:00:01.000Z
- Description: Phishing messages pretend to be your bank, network, a delivery company or a friend, and push you to click a link. Here are the signs, how to check a link safely, and what to do if you clicked.
- Author: Isaac Nana Yaw Annor
- Tags: How-To, Security

Phishing is a message designed to look like it comes from someone you trust, so you click a link and hand over a password, card number or code. It arrives by SMS, WhatsApp, email and social media, and it is behind a large share of hacked accounts and lost money in Ghana.

## Common phishing messages in Ghana

- “Your account will be blocked. Verify now: \[link\]” (bank, MoMo or network).
- “Your parcel is waiting. Pay GH₵15 delivery fee: \[link\]” (fake delivery).
- “You have won a phone/airtime/scholarship. Claim here: \[link\]”.
- “Is this you in this video? \[link\]” (from a hacked friend’s account).
- “Your Facebook page will be disabled for copyright violation. Appeal: \[link\]”.
- A fake login page for Gmail, Facebook or your bank, sent as a “security alert”.

## Seven signs of a phishing message

1. **It creates urgency or fear:** blocked accounts, deadlines, penalties.
2. **It offers a prize** you did not enter for.
3. **The link does not match the company.** Look for misspellings, extra words or odd endings (for example a bank name followed by “-verify-gh.xyz”).
4. **It asks for a password, PIN, OTP or card details.** Genuine companies do not ask for these by message.
5. **The sender is a normal phone number or a free email address**, not the company’s official channel.
6. **Poor spelling, odd formatting or a generic greeting** like “Dear customer”.
7. **It came out of the blue**, about something you did not start.

## How to check a link safely

- **Do not tap it.** On a phone, long-press the link to preview the address without opening it.
- **Go the long way round:** instead of using the link, open the company’s official app, or type its website address yourself.
- **Call the company** on a number from its official website or the back of your card, not the number in the message.

## If you clicked

- **Entered nothing?** Close the page. Do not download anything it offers.
- **Entered a password?** Change it immediately on the real site, sign out of other sessions and turn on 2-step verification. See [what to do when your account is hacked](https://chale.tech/what-to-do-when-your-account-is-hacked/).
- **Entered card or bank details?** Call your bank now and ask them to block the card.
- **Shared a code (OTP)?** Treat the account as compromised. See [never share your OTP](https://chale.tech/never-share-your-otp/).

**Report cybercrime to the Cyber Security Authority:** call or text **292**, WhatsApp **0501603111**, or email **report@csa.gov.gh**. Keep screenshots, numbers, links and transaction IDs as evidence.

> When a message rushes you to click, slow down. Go to the company yourself instead.

*This guide was checked in October 2026\. Menus and services change, so if something looks different on your phone, check with your provider.*

## Common questions

### What is phishing?

A message that pretends to come from someone you trust to trick you into clicking a link, entering a password or card details, or sharing a code.

### I clicked a phishing link. What should I do?

If you entered nothing, close the page and run your phone’s security checks. If you entered a password, change it immediately and turn on 2-step verification. If you entered card or bank details, call your bank now.

### Can I get hacked just by opening a message?

Usually the danger comes from clicking a link, opening an attachment or entering details. Do not install apps or files that a message sends you.

### Where do I report phishing in Ghana?

Report to the Cyber Security Authority on 292 (call or text), WhatsApp 0501603111 or report@csa.gov.gh, and to the company being impersonated.

## Sources

- [Cyber Security Authority: Online shopping scam advisory (CSA/CERT/MPA/2025-11/01, November 2025)](https://csa.gov.gh/cert-gh-alert41.php?ref=chale.tech)
- [Google Account Help: Secure a hacked or compromised Google Account](https://support.google.com/accounts/answer/6294825?hl=en&ref=chale.tech)
- [Google Account Help: Make your account more secure](https://support.google.com/accounts/answer/46526?hl=en&ref=chale.tech)
- [Cyber Security Authority Ghana](https://csa.gov.gh/?ref=chale.tech)