The Cyber Security Authority (CSA) has issued a public alert over a surge in restaurant and food-vendor impersonation scams, warning that unsuspecting customers are increasingly being tricked into making fraudulent payments for food that is never delivered.
Between January and June this year, the CSA recorded 112 cases from vendors and customers, up from 61 over the same period last year, with financial losses rising from GH¢84,592 to GH¢296,083.68.
According to the Authority, fraudsters are exploiting platforms such as Google Search and Google Maps by altering or duplicating legitimate business listings. In many cases, they abuse the "suggest an edit" feature, claim unverified profiles, or create duplicate listings with fake phone numbers. Some even purchase sponsored advertisements to push fraudulent details to the top of search results.
Customers who unknowingly contact the fraudsters place food orders and are instructed to pay via mobile money or through fraudulent links. Once payment is made, communication ceases, and the food is never delivered. In some instances, malicious payment pages harvest personal details such as names, delivery addresses, and mobile money numbers, which are later used to carry out unauthorised transactions.
The CSA has urged the public to verify restaurant and food vendor contact details through official websites, verified social media pages, or trusted food delivery platforms before placing orders.
Customers are also advised to avoid unfamiliar payment links, insist on paying only after delivery, and never share sensitive information such as mobile money PINs, one-time passwords, or banking credentials.
Restaurants and food vendors have been encouraged to claim and verify their Google Business Profiles to prevent impersonation, display official contact numbers prominently, and monitor their listings for unauthorised edits or duplicates. Fraudulent listings can be reported to Google through its Business Redressal Complaint Form.
The CSA reminded the public that it operates a 24-hour Cybersecurity/Cybercrime Incident Reporting Point of Contact for guidance and assistance. Reports can be made via call or text to 292, WhatsApp on 0501603111, or email at
