- Fake Food Orders, Real Losses: CSA Warns Restaurant Scams
Ghana’s growing appetite for online food ordering is becoming a new hunting ground for cybercriminals, with the Cyber Security Authority warning that fraudsters are increasingly impersonating restaurants and food vendors on Google Search, Google Maps and other online platforms to steal from unsuspecting customers.
In a public alert issued on July 16, 2026, the CSA said it was tracking a growing scam in which criminals “create and, in some cases, alter the contact details of legitimate restaurants and food vendors” to deceive customers looking to place food orders online.
The alert shows that between January and June 2026, the Authority recorded 112 cases from vendors and customers, up from 61 cases over the same period in 2025. That represents an 83.61% increase in reported cases. Financial losses rose even more sharply, from GH¢84,592.00 to GH¢296,083.68 an increase of 250.01%.
The numbers may appear modest compared with total digital payment volumes in Ghana, but the trend is troubling because it shows how cybercrime is moving into everyday consumer behaviour. Fraud is no longer limited to fake investment schemes, mobile money impersonation calls or bank-account compromise. It is now entering the simple act of ordering food.
The CSA’s warning is therefore not merely about restaurants. It is about trust. When customers cannot tell whether a phone number on Google Maps belongs to a real restaurant or a fraudster, the entire digital-commerce chain becomes weaker.
According to the Authority, the criminals typically create fake listings, duplicate legitimate business profiles or abuse the “suggest an edit” feature on online platforms to replace genuine restaurant contact details with fraudulent phone numbers. In some cases, they purchase sponsored search advertisements so that fake contact details appear prominently at the top of search results.
This makes the scam particularly dangerous. A customer searching for a trusted restaurant may see what appears to be a legitimate contact number, call it, place an order and make payment only to discover later that the person on the other end was never connected to the business.
The Authority said customers “unknowingly contact the fraudsters, believing they are communicating with the legitimate restaurant or vendor.” After receiving food orders, the scammers instruct victims to pay to a specified mobile money number. Once payment is made, they cut communication and the food is never delivered.
In more sophisticated cases, victims are sent fraudulent links supposedly for order confirmation or payment processing. These malicious pages request personal information such as the customer’s name, delivery address and mobile money number. Once the victim submits the information, fraudsters use the credentials to perform unauthorised transactions.
This is where the scam becomes more serious than a failed food order. A customer may think they are paying for lunch, dinner or office catering. In reality, they may be handing over information that allows criminals to attack their mobile money wallet, bank account or linked digital payment profile.
The scam also shows how fraudsters are exploiting the convenience economy. Ghanaians increasingly rely on online searches, social media pages, delivery platforms and digital payments to interact with businesses. That convenience has shortened the distance between customer and vendor. But it has also created new vulnerabilities where criminals can insert themselves between the two.
The CSA’s recommendations to the public are practical and urgent. Customers are being asked to verify restaurant and food-vendor contact details through official websites, verified social media pages or trusted food delivery platforms before placing orders. They are also advised to be cautious of payment requests sent through unfamiliar links and to insist on payment after delivery and inspection.
The Authority further warned consumers never to share mobile money PINs, one-time passwords, banking credentials or other personal information on any website or with any individual. It also urged the public not to approve payment prompts they did not initiate.
These instructions may sound basic, but they are central to preventing social-engineering fraud. Many digital scams succeed not because systems are hacked, but because victims are pressured, confused or misled into authorising transactions or disclosing sensitive information.
For restaurants, food vendors and other online businesses, the CSA’s message is equally direct: businesses must take control of their digital identities before criminals do.
The Authority urged restaurants and food vendors to claim and verify their Google Business Profiles. Where an unverified profile already exists, businesses are advised to search for their business on Google Maps, select “Claim this business,” use the “Manage now” option and complete the verification process.
This is significant. Many small businesses treat online listings as passive visibility tools. But in the current fraud environment, a business profile is a security asset. If a restaurant does not control its online identity, someone else may exploit it.
The CSA also advised businesses to display official registered contact numbers and approved payment channels prominently on verified websites and social media pages. Businesses should also inform customers that they will never request PINs or OTPs.
Regular monitoring is also necessary. Restaurants and online vendors are being urged to review listed phone numbers and business details, enable profile notifications and check for suggested edits or duplicate listings of their businesses.
This recommendation goes to the heart of the issue. In the digital economy, brand protection is no longer only about reputation. It is also about fraud prevention. A fake number attached to a real business name can damage customer trust, divert revenue and expose consumers to theft.
The CSA further advised businesses to report fraudulent listings, duplicate profiles or unauthorised changes to business information through Google’s Business Redressal Complaint channels.
The wider lesson is clear: Ghana’s digital economy cannot grow safely if online business identities remain poorly verified. Restaurants, merchants, delivery firms, banks, fintechs, telecom companies and regulators must treat platform impersonation as a serious consumer-protection risk.
The food-vendor scam also carries implications for payment providers. Fraudsters are reportedly directing victims to mobile money numbers and payment links. That means rapid reporting, suspicious wallet monitoring and faster blocking of fraud-linked accounts will be essential to limiting losses.
For consumers, the safest habit is verification before payment. A search result is not proof of authenticity. A sponsored advertisement is not proof of legitimacy. A professional-looking payment page is not proof of safety. Customers must cross-check phone numbers, verify social media pages and avoid sending money before confirming the identity of the vendor.
The CSA said it operates a 24-hour Cybersecurity/Cybercrime Incident Reporting Point of Contact for reporting cybercrimes and seeking guidance. The public can call or text 292, contact the Authority via WhatsApp on 0501603111, or email report@csa.gov.gh.
The Authority’s alert should be taken seriously because it captures a deeper shift in Ghana’s fraud landscape. Criminals are following consumers into everyday digital habits. They are not waiting for people to make large investments or complex transfers. They are targeting ordinary decisions ordering food, calling a restaurant, clicking a payment link, approving a prompt.
That is what makes the threat dangerous. The more routine the transaction, the lower the customer’s guard.
Ghana’s digital-commerce promise depends on trust. Restaurants must be able to receive orders online. Customers must be able to identify real vendors. Payment systems must be safe. Platforms must respond quickly to fraudulent listings. Regulators must move fast enough to contain abuse.
A fake restaurant listing may look like a small scam. But if left unchecked, it can become something larger: a quiet erosion of confidence in online commerce.
The CSA’s warning is therefore not only about food-vendor impersonation. It is a reminder that in Ghana’s digital economy, trust can be stolen before money is.
