The Cyber Security Authority (CSA) has blown an alarm on cyber criminals increasingly hijacking Google business listings to trick unsuspecting customers.
According to the CSA, in the first six months of 2026, Ghanaians lost GH¢296,000 to online restaurant scams that trick unsuspecting customers into paying for food that was never delivered.
In a public alert issued by the CSA detailed that the fraudsters are targeting legitimate restaurants and food vendors by manipulating Google Search, Maps, and sponsored ads to replace legitimate contact details with fake ones.
The CSA disclosed that between January and June 2026, 112 cases were recorded, nearly double the prior year, with customer losses rising sharply to GHS 296,083.68, with the scammers collecting payments via mobile money or fake links.
The statement issued by the CSA reads, “
1.0. Background
The Cyber Security Authority (CSA) is tracking a growing scam in which cybercriminals create and, in some cases, alter the contact details of legitimate restaurants and food vendors on Google Search, Google Maps, and other online platforms to trick unsuspecting customers.
Between January and June this year, the CSA recorded 112 cases from vendors and customers, up from 61 over the same period last year, with financial losses rising from GHS 84,592.00 to GHS 296,083.68.
2.0 Modus Operandi
• Fraudsters create or alter the contact details of legitimate restaurants and food vendors on Google Search and Google Maps, typically by abusing the “suggest an edit” feature, claiming “unclaimed business profiles”, or creating duplicate fraudulent listings by replacing genuine phone numbers with fake ones
In some cases, the fraudsters purchase sponsored search advertisements to make the fraudulent details appear at the top of search results.
* Customers unknowingly contact the fraudsters, believing they are communicating with the legitimate restaurant or vendor.
* After receiving customers’ food orders, the fraudsters instruct them to make payment to a specified mobile money number. Once payment is made, the fraudsters discontinue communication, and the food is never delivered
* Customers may also be instructed to pay through a fraudulent link, purportedly for order confirmation or payment processing,
* The malicious payment page requests information such as the customer’s name, delivery address, and mobile money number.
* Once the victim submits the requested information, the fraudsters use the credentials to perform unauthorised transactions, resulting in financial losses
3.0 Recommendations
3.1 For the Public
* Verify restaurant and food vendor contact details through their official websites, verified social media pages, or trusted food delivery platforms before placing an order. • Be cautious of payment requests through unfamiliar links.
* Insist on payment after delivery and inspection. • Never share your mobile money PIN, OTP, banking credentials or other personal information on any website or with any individual,
* Do not approve payment prompts you did not initiate.
* Confirm payment instructions directly with the restaurant or vendor using independently verified contact details.
* Regularly monitor your mobile money account for unauthorised transactions and report any suspicious activity immediately to your mobile network operator.
3.2 For Restaurants, Food Vendors, and other Online Businesses
• Claim and verify your Google Business Profile at https://business.google.com to take control of your listing. If an unverified profile of your business already exists, search for your business on Google Maps and select “Claim this business”, then “Manage now”, and complete the verification process.
• Display your official registered contact numbers and approved payment channels (prominently on your verified website and social media pages and advise customers that you will never request their PIN or OTP,
Regularly review your listed phone numbers and business details, enable profile notifications, and check for suggested edits or duplicate listings of your business.
• Report fraudulent listings, duplicate profiles, or unauthorised changes to your business information to Google through the Business Redressal Complaint Form: https://support.google.com/business/contact/business_redressal_ form
The CSA has a 24-hour Cybersecurity/Cybercrime Incident Reporting Point of Contact (PoC) for reporting cybercrimes and for seeking guidance and assistance on online activities. Call or Text – 292, WhatsApp – 0501603111, Email – report@csa.gov.gh”.
See the post below:
Public Alert ‼️ pic.twitter.com/Djquhij58f
— Cyber Security Authority Ghana (@CSAGhana) July 22, 2026
@ghnow_ “This is the room I’m being asked to pay £700 per month for in the UK. It’s extremely small, and almost everything in it is in poor condition.” — A Ghanaian expatriate in the UK shares a video of the room he was offered for rent, expressing his disappointment with its size and condition despite the high monthly rent.
♬ Unknown – FullMix – Powers Music
@ghnow_ The Deputy Attorney General has arrived at the High Court for the trial of Chairman Wontumi in the Tano Forest reserve #GHnow #fyp ♬ original sound – GHnow
