The Cyber Security Authority (CSA) has warned of rising cyber-enabled fraud as Ghana’s digital finance ecosystem expands, urging stronger collaboration among regulators, financial institutions, law enforcement agencies and consumers.
The warning came at the launch of the 2026 National Cyber Security Awareness Month (NCSAM), a month-long campaign running from October 1 to 31, 2026.
The campaign is being held under the theme, “Securing Ghana’s Digital Finance Ecosystem: Building Trust Through Collaboration and Cyber Resilience.”
Also read: Mahama dissolves boards of BOST, VALCO, CBG, GNPC and five other state institutions
The launch, held at CalBank’s head office auditorium in Accra, brought together stakeholders from the public and private sectors to strengthen efforts to combat cybercrime, protect digital financial services and build public confidence in Ghana’s growing digital economy.
Speaking at the event, CSA Director-General Divine Selase Agbeti said the rapid expansion of digital financial services had also increased exposure to cyber threats.
Citing the Bank of Ghana’s 2025 Fraud Report, Mr Agbeti said fraud cases recorded across banks, specialised deposit-taking institutions and payment service providers increased by 48 percent, from 16,733 cases in 2024 to 24,778 in 2025.
He added that electronic fraud incidents within the payment service provider segment also increased by 54 percent.
The CSA itself recorded 3,876 cybersecurity incidents between January and July 2026, with online fraud accounting for approximately 47 percent of the reported cases.
Mr Agbeti said cybersecurity must become a shared responsibility rather than an obligation left to regulators or information technology departments.
“Cybersecurity cannot remain a compliance exercise done solely for the regulator, a technology project dedicated solely to the IT department, or an expense deferred until after an incident. It is a duty owed to every customer whose money and data you hold,” he said.
CSA warns institutions
The CSA Director-General urged banks, fintech companies, payment service providers, insurers and merchants to engage only cybersecurity service providers licensed or accredited by the Authority.
He cautioned institutions against disregarding cybersecurity obligations, warning that the CSA would use its regulatory powers where necessary to protect the public.
“The Authority will exercise the powers available to it when institutions or service providers disregard applicable cybersecurity obligations and put the public at risk,” he said.