Phishing is a message designed to look like it comes from someone you trust, so you click a link and hand over a password, card number or code. It arrives by SMS, WhatsApp, email and social media, and it is behind a large share of hacked accounts and lost money in Ghana.

Common phishing messages in Ghana

  • “Your account will be blocked. Verify now: [link]” (bank, MoMo or network).
  • “Your parcel is waiting. Pay GH₵15 delivery fee: [link]” (fake delivery).
  • “You have won a phone/airtime/scholarship. Claim here: [link]”.
  • “Is this you in this video? [link]” (from a hacked friend’s account).
  • “Your Facebook page will be disabled for copyright violation. Appeal: [link]”.
  • A fake login page for Gmail, Facebook or your bank, sent as a “security alert”.

Seven signs of a phishing message

  1. It creates urgency or fear: blocked accounts, deadlines, penalties.
  2. It offers a prize you did not enter for.
  3. The link does not match the company. Look for misspellings, extra words or odd endings (for example a bank name followed by “-verify-gh.xyz”).
  4. It asks for a password, PIN, OTP or card details. Genuine companies do not ask for these by message.
  5. The sender is a normal phone number or a free email address, not the company’s official channel.
  6. Poor spelling, odd formatting or a generic greeting like “Dear customer”.
  7. It came out of the blue, about something you did not start.
  • Do not tap it. On a phone, long-press the link to preview the address without opening it.
  • Go the long way round: instead of using the link, open the company’s official app, or type its website address yourself.
  • Call the company on a number from its official website or the back of your card, not the number in the message.

If you clicked

  • Entered nothing? Close the page. Do not download anything it offers.
  • Entered a password? Change it immediately on the real site, sign out of other sessions and turn on 2-step verification. See what to do when your account is hacked.
  • Entered card or bank details? Call your bank now and ask them to block the card.
  • Shared a code (OTP)? Treat the account as compromised. See never share your OTP.
Report cybercrime to the Cyber Security Authority: call or text 292, WhatsApp 0501603111, or email report@csa.gov.gh. Keep screenshots, numbers, links and transaction IDs as evidence.
When a message rushes you to click, slow down. Go to the company yourself instead.

This guide was checked in October 2026. Menus and services change, so if something looks different on your phone, check with your provider.

Common questions

What is phishing?

A message that pretends to come from someone you trust to trick you into clicking a link, entering a password or card details, or sharing a code.

If you entered nothing, close the page and run your phone’s security checks. If you entered a password, change it immediately and turn on 2-step verification. If you entered card or bank details, call your bank now.

Can I get hacked just by opening a message?

Usually the danger comes from clicking a link, opening an attachment or entering details. Do not install apps or files that a message sends you.

Where do I report phishing in Ghana?

Report to the Cyber Security Authority on 292 (call or text), WhatsApp 0501603111 or report@csa.gov.gh, and to the company being impersonated.

Sources