CSA Issues Alert over Fake Restaurant Listings as Scam Losses Hit Nearly GHC 300k
The Cyber Security Authority is alerting the public to a growing scam involving fake restaurant and food vendor contact details on Google Search, Google Maps and other online platforms, with reported financial losses rising to GHS 296,083.68 in the first six months of 2026.
In a statement, the CSA said cybercriminals are creating and altering listings of legitimate businesses to deceive customers.
Between January and June this year, the Authority recorded 112 cases from vendors and customers, up from 61 in the same period last year. Losses over the period also jumped from GHS 84,592.00 to GHS 296,083.68.
According to the CSA, the fraudsters typically abuse the “suggest an edit” feature on Google, claim unclaimed business profiles, or create duplicate fraudulent listings by replacing genuine phone numbers with fake ones.
In some instances, they purchase sponsored search advertisements to make the fake details appear at the top of search results. Unsuspecting customers who call these numbers believe they are speaking to the real restaurant or vendor.
After taking food orders, the scammers instruct customers to pay to a specified mobile money number. Once payment is made, they cut off communication and no food is delivered.
In other cases, customers are sent a fraudulent link purportedly for order confirmation or payment processing. The malicious page requests the customer’s name, delivery address and mobile money number, which the fraudsters then use to carry out unauthorised transactions.
The Authority urged the public to verify restaurant and vendor contact details through official websites, verified social media pages, or trusted food delivery platforms before placing an order.
It also advised people to be cautious of payment requests through unfamiliar links, insist on payment after delivery and inspection, and never share mobile money PINs, OTPs or banking credentials with anyone.
Customers should not approve payment prompts they did not initiate, should confirm payment instructions directly with the restaurant using independently verified contacts, and should regularly monitor their mobile money accounts and report any suspicious activity to their network operator.
For restaurants, food vendors and other online businesses, the CSA said they should claim and verify their Google Business Profile at business.google.com to take control of their listings.
Businesses with unverified profiles are to search for their business on Google Maps and select “Claim this business” and “Manage now” to complete verification.
The Authority further urged businesses to display only their official registered contact numbers and approved payment channels on verified websites and social media, and to inform customers that they will never request PINs or OTPs.
Businesses should also regularly review their listed numbers and details, enable profile notifications, and check for suggested edits or duplicate listings.
Any fraudulent listings or unauthorised changes should be reported to Google through the Business Redressal Complaint Form.
Click to read more: https://opemsuo.com/author/hajara-fuseini/
