Ghana records GH¢209.7m in reported cyber losses in nine months as incidents reach 4,938.
Ghana's Cyber Security Authority reports GH¢209.7 million in estimated losses from 4,938 cybersecurity incidents between January and September 2026.
Ghana’s Cyber Security Authority says reported cybersecurity incidents resulted in estimated losses of GH¢209.7 million between January and September 2026. The figures highlight the growing financial risks associated with online fraud and other digital threats, although underreporting means the full extent of the problem remains uncertain.
ACCRA — Ghana recorded 4,938 cybersecurity incidents and estimated financial losses of GH¢209.7 million in the first nine months of 2026, according to figures disclosed by the Cyber Security Authority (CSA). The figures were announced by the Authority’s Director-General, Dr Divine Selasi Agbeti, at the fifth annual Cyber Secure Volta Regional Conference in Ho.
The disclosure raises concerns about the financial consequences of cyber incidents for individuals, businesses and institutions as Ghana’s economy becomes increasingly dependent on digital services. The CSA also warned that official reports may not capture every incident because some victims are reluctant to come forward.
What do the latest cybersecurity figures show?
The Authority reported 4,938 incidents between January and September 2026, associated with estimated losses of GH¢209.7 million.
The figures provide a measure of the financial harm reported to the Authority, but they should not be interpreted as a complete accounting of every cybercrime incident in Ghana.
| Indicator | Reported figure |
|---|---|
| Reporting period | January–September 2026 |
| Recorded incidents | 4,938 |
| Estimated financial losses | GH¢209.7 million |
| Previously cited 2025 incidents | 4,604 |
| Previously cited 2025 losses | More than GH¢22.5 million |
| Average reported loss per 2026 incident | Approximately GH¢42,467 |
Source: Cyber Security Authority figures reported by MyJoyOnline, 26 October 2026. The average is Nukunya’s calculation, dividing estimated losses by recorded incidents. It is not the typical loss experienced by an individual victim.
The 2025 figures were also cited in the report, but the available account does not establish a sufficiently clear, like-for-like comparison period and measurement basis.
It would therefore be premature to describe the difference between the 2025 and 2026 financial totals as a verified annual growth rate.
What does GH¢209.7 million mean?
The estimated losses amount to approximately GH¢23.3 million per month over the nine-month reporting period.
That calculation illustrates the scale of the reported financial exposure, rather than suggesting that losses occurred evenly throughout the year.
The approximately GH¢42,467 average per incident is similarly a mathematical ratio.
It does not show how losses were distributed between victims.
Some incidents may involve relatively small amounts, while others could involve substantially larger financial losses.
Without a detailed breakdown of incident categories, individual losses and recovery outcomes, the data cannot establish what a typical victim lost.
Interactive: understand the reported financial figures
Explore arithmetic derived from the published January–September 2026 totals. These figures are averages, not forecasts or measures of a typical victim’s loss.
Estimated losses associated with incidents reported between January and September 2026.
Why might the actual scale be higher?
Dr Agbeti warned that some victims do not report incidents because of embarrassment, fear of ridicule and other concerns.
Underreporting can make it difficult for authorities to establish the full scale of cyber-related harm.
It may also limit investigators’ ability to identify patterns, link related incidents and intervene before additional victims are targeted.
However, the amount of unreported financial loss cannot be calculated from the published figures alone.
The GH¢209.7 million total should therefore be described as estimated losses associated with reported incidents, not the definitive national cost of cybercrime.
Mobile money and online banking users warned
The CSA urged users of mobile money, internet banking and digital wallets to be cautious about suspicious investment opportunities and requests to transfer funds.
Dr Agbeti warned against offers promising unrealistic returns and advised consumers to verify payment requests before authorising transactions.
The Authority also emphasised the importance of protecting passwords and other sensitive information.
These warnings are relevant to a broad range of digital financial activities, including person-to-person transfers, online shopping and investment-related communications.
Not every suspicious transaction constitutes fraud, but users should independently confirm unfamiliar requests before transferring money or disclosing confidential information.
Social engineering remains a concern
According to the CSA Director-General, human error and social engineering contribute significantly to cybersecurity incidents.
Social engineering involves manipulating people into revealing information, authorising payments or taking actions that compromise their security.
Attackers may impersonate trusted individuals, businesses or institutions.
This means cybersecurity is not exclusively a technical issue.
Public awareness, institutional procedures and verification practices can be as important as security software.
For businesses, effective protection may require staff training, access controls and processes for independently confirming unusual payment instructions.
For individuals, verifying messages through trusted channels can reduce exposure to impersonation and fraudulent requests.
Interactive: cybersecurity prevention explorer
Select a situation for practical risk-reduction guidance.
Unexpected mobile money request
Confirm the request with the supposed sender using a trusted contact method before authorising a transfer.
New Volta Region office planned
Dr Agbeti said the CSA intends to establish an office in the Volta Region before the end of 2026.
The proposed office is expected to support local cybersecurity responses and cooperation with law enforcement.
The announcement represents a planned expansion, not confirmation that the office has already opened.
The Authority also encouraged residents to report suspected cybercrime and cooperate with lawful investigations.
According to the report, members of the public can contact the CSA through its short code, 292.
What should victims do?
People who suspect that they have been targeted by online fraud should act promptly.
They should contact their bank or payment provider through an independently verified channel, preserve relevant messages and transaction details, and report the incident to the appropriate authorities.
Where account credentials may have been compromised, affected users should change passwords using trusted devices and follow the provider’s security procedures.
Victims should avoid sending additional payments to anyone claiming they can recover lost money in exchange for an upfront fee.
Reporting an incident does not guarantee that funds will be recovered, but prompt notification can support investigations and may help financial institutions respond.
What remains unknown?
The published figures leave several important questions unanswered.
The available report does not provide a complete breakdown of the 4,938 incidents by category, region, victim type or financial value.
It also does not establish how much of the estimated GH¢209.7 million has been recovered.
Without that information, it is difficult to determine which types of incidents account for the largest losses or which prevention measures would have the greatest effect.
Further disclosure could help households, businesses and policymakers assess where cybersecurity resources are most urgently needed.
Interactive: what additional data is needed?
Incident categories
A consistent classification of incidents would help identify which reported threats account for the greatest number of cases and financial losses.
Measuring losses is only the first step
The CSA’s figures demonstrate the importance of reliable cybersecurity reporting as Ghana’s digital economy develops.
A total of GH¢209.7 million in estimated losses is financially significant, but its public-policy value depends on what can be learned from the underlying incidents.
More detailed reporting on fraud methods, victim groups, loss distribution and recovery rates could support better prevention strategies.
It could also help distinguish increases in criminal activity from improvements in reporting and detection.
For Ghanaian consumers, the immediate lesson is to verify financial requests and report suspected fraud.
For businesses and public institutions, the figures reinforce the need for stronger controls and cybersecurity awareness.
The central challenge is not simply recording the financial cost of cyber incidents. It is using reliable evidence to reduce preventable losses, protect victims and strengthen trust in Ghana’s digital economy.
Related posts:
MTN Ghana to Start Charging Customers for MoMo-to-Bank Transfers From June 1 
Ghana gives government agencies seven days to fix critical PHP security vulnerabilities. 
Ghana Nears First Non-Interest Banking Licence as BoG Warns on Fintech Trust 
Three Arrested in Police Raid on Illegal Mining Site Along Ghana Water Pipeline 
Supreme Court Halts Reinstatement of GN Savings Licence Pending Bank of Ghana Appeal 
