|
Getting your Trinity Audio player ready...
|
Introduction
Ahead of the long weekend marking the Eid holidays, the Cyber Security Authority, Ghana, cautioned against the prevalence of cyber crimes and attacks during such periods. This was a cautionary measure to curb the heightened state of cyber crimes during such festivities. The organisation in charge of ensuring the cyber safety of citizens in the West African country bemoaned the increase in sums of money lost in the first quarter of 2025 compared to the same period in 2024. DUBAWA highlights cybercrime, its various forms, and how to stay safe and not fall victim.
What is Cybercrime?
The World Economic Forum defines cybercrime as a general term that encapsulates data destruction, monetary theft, theft of personal financial data, embezzlement, fraud, business destruction, disruption, and reputational damage.
The emergence of technology also means that most of our personal lives, activities, and businesses have to move online. This has also given rise to cyber criminals, who, with a growing set of tools, exploit “online citizens.”
Cyber Crime/Security in Ghana
In Ghana, the CyberSecurity Act 2020 (Act 1038) was passed by parliament and assented to on Dec. 29, 2020. The Act (1038) established the Cyber Security Authority. Their core mandate is “to regulate cybersecurity activities in the country; promote the development of cybersecurity in the country and to provide for related matters.”
Section 4 (q) of Act 1038 states that the Cyber Security Authority shall, as part of its functions, “Educate the public on matters related to cybercrime and cybersecurity.” Also, the Cyber Security Authority shall ensure the cyber safety of Ghanaians. Other functions of the Cyber Security Authority stated by Section 4 include:
- Promote the security of computers and computer systems in the country;
- monitor cybersecurity threats within and outside the country;
- establish codes of practice and standards for cybersecurity, and monitor compliance with the codes of practice and standards by the public and private sector owners of critical information infrastructure;
- establish standards for certifying cybersecurity products or services;
- promote the protection of children online;
- deploy strategies to implement research findings towards the promotion of the cybersecurity of the country;
- establish and maintain a framework for disseminating information on cybersecurity;
- submit periodic reports on the state of cybersecurity in the country to the Minister;
- collaborate with law enforcement agencies to intercept or disable a digital technology service or product whose operation undermines the country’s cybersecurity.
Cyber Crime Figures over the years
The Cyber Security Authority (CSA) started operations on Oct. 21, 2021, after transitioning from the National Cyber Security Secretariat (NCSS) in 2017 to the National Cyber Security Centre (NCSC) in 2018. The CSA released its first annual report in 2022.
According to the report, from Jan. to Dec. 2022, the CyberCrime/ Cybersecurity Incident Reporting Points of Contact (PoC) received 9,123 contacts. 628 out of the 9,123 were “actual” cyber-related incidents. The remaining 8,485 contacts were for advisories and guidance on preventing cybercrime incidents related to children, government institutions and agencies, businesses, and the general public.
A graphic representation of contacts made to the PoC in 2022. Image Source: CSA Annual Report, 2022.
In 2023, the CSA recorded an increase in contacts. About 13,353 contacts were made through the CSA’s PoC. Meanwhile, 1,255 were actual cyber-related incidents, with the remaining 12,098 being guidance and advisory services.
A representation of the Year-on-Year increase in contacts made to the PoC. Image source: CSA Annual Report, 2023.
The CSA began presenting a coalition of monetary losses incurred in acts of cybercrime and incidents in 2023. According to the CSA Annual Report, from January to December 2023, GH¢ 59,924,837 was lost to cybercrime. Online fraud accounted for the highest losses for cybercrime victims, accruing GH¢59,694,192 out of the total amount.
Table showing the distribution of losses to various cybercrime/ incidents in 2023. Image Source: CSA Annual Report 2023.
Also, the CSA indicates in a presser that in the first quarter of 2024, the total financial loss to online fraud was GH¢ 2,404,161. The figures surged to GH¢ 4,425,851 in the same period in 2025. The losses were from 195 and 305 online fraud cases from Jan. to March 2024 and 2025, respectively.
Common forms of cybercrime in Ghana
According to the Cyber Security Authority of Ghana, there are prevalent forms of cybercrime in West African countries. The “actual” cyber-related incidents included:
- Online fraud (investment scams, online shopping fraud, job recruitment fraud, etc.)
- Unauthorised Access (WhatsApp account takeover, phishing)
- Online Impersonation
- Online Blackmail (sextortion, publication of non-consensual intimate images)
- Cyber Bullying
- Information Disclosure
How do you stay safe?
The use of technology in daily activities is here to stay, so cyber criminals will find new and sophisticated ways to execute several cybercriminal operations. Here are a few recommendations on how to stay safe and not fall prey to cyber criminals:
- Do not share personal information such as bank account details, credit card information, and personal identification numbers with anyone.
- For online trading or shopping, insist on delivery before payment and electronic payments to the appropriate account of the online shop you are purchasing from.
- Search engines can be manipulated to mislead people with fraudulent websites and pages. It is essential to cross-check and ensure that one deals with the official website and contact details of businesses and organisations they deal with online.
- Be suspicious of unsolicited messages that offer “too good to be true” opportunities and deals, especially during festive seasons.
Conclusion
The advent of the internet has led to a dependency on it for various human activities and purposes. Staying safe and not succumbing to multiple cybercrimes and incidents is key.
