Cyber Security Authority (CSA) has raised an alarm over a rapid rise in online restaurant scam cases recorded in the first half of the year.

The Authority, in a public advisory dated July 16, warned that “cybercriminals create and, in some cases, alter the contact details of legitimate restaurants and food vendors on Google Search, Google Maps, and other online platforms to trick unsuspecting customers”

Consequently, several Ghanaians have lost millions of cedis in the last 6 months of the year.

CSA said, between January and June 2026, it recorded almost double the cases (up 84%) and triple the financial losses (up 250%) compared to the same period in 2025.

In the same period last year, the CSA had recorded 61 cases and counted a financial loss of GHS 84,592.00; however, this year, “between January and June this year, the CSA recorded 112 cases from vendors and customers, up from 61 over the same period last year, with financial losses rising from GHS 84,592.00 to GHS 296,083.68”.

How fraudsters get their victims

These scammers replace genuine contact details of food vendors and restaurants with their numbers and other contact details. And also, these criminals sometimes “...purchase sponsored search advertisements to make the fraudulent details appear at the top of search results”.

“Fraudsters create or alter the contact details of legitimate restaurants and food vendors on Google Search and Google Maps, typically by abusing the "suggest an edit" feature, claiming "unclaimed business profiles", or creating duplicate fraudulent listings by replacing genuine phone numbers with fake ones”, CSA said.

Following these alterations, customers fall victim after contacting these numbers and, unbeknownst to them, make payment and never hear from the supposed vendors again.

“Customers unknowingly contact the fraudsters, believing they are communicating with the legitimate restaurant or vendor. After receiving customers' food orders, the fraudsters instruct them to make payment to a specified mobile money number. Once payment is made, the fraudsters discontinue communication, and the food is never delivered.

“Customers may also be instructed to pay through a fraudulent link, purportedly for order confirmation or payment processing. The malicious payment page requests information such as the customer's name, delivery address, and mobile money number”, the advisory added.

How customers lose money

Once the victim submits the requested information, the fraudsters use the credentials to perform unauthorised transactions, resulting in financial losses.

CSA’s recommendations for the public

CSA advised the public to verify restaurant and food vendor contact details through their official websites, verified social media pages, or trusted food delivery platforms before placing an order.

Also, customers are advised to be cautious of payment requests through unfamiliar links and insist on payment after delivery and inspection.

To prevent scammers accessing your bank and Mobile Money accounts, CSA advised customers to never share your mobile money PIN, OTP, banking credentials or other personal information on any website or with any individual and desist from approving any payment prompts they did not initiate.

Also, customers are to confirm payment instructions directly with the restaurant or vendor using independently verified contact details and regularly monitor their mobile money account for unauthorised transactions and report any suspicious activity immediately to their mobile network operator.

Recommendations for restaurants, food vendors, and other online businesses

CSA advised that online vendors and restaurants should claim and verify your Google Business Profile at

to take control of your listing. If an unverified profile of your business already exists, search for your business on Google Maps and select "Claim this business", then "Manage now", and complete the verification process.

“It is also advised to display your official registered contact numbers and approved payment channels (prominently on your verified website and social media pages), advise customers that you will never request their PIN or OTP, regularly review your listed phone numbers and business details, enable profile notifications, and check for suggested edits or duplicate listings of your business”, CSA continued.

Online businesses are also advised to “Report fraudulent listings, duplicate profiles, or unauthorised changes to your business information to Google through the Business Redressal Complaint Form:

redressal form.

“The CSA has a 24-hour Cybersecurity/Cybercrime Incident Reporting Point of Contact (POC) for reporting cybercrimes and for seeking guidance and assistance on online activities. Call or Text-292, WhatsApp 0501603111, Email-report@csa.gov.gh.”