Public Alerted Over Google Maps Scam Targeting Food Orders in Ghana

Ghana's Cyber Security Authority (CSA) has issued a public alert regarding an increasing number of scams targeting customers through fake restaurant and food-vendor impersonations. Unsuspecting individuals are being tricked into making fraudulent payments for food that is never delivered.

Between January and June this year, the CSA documented 112 cases involving both vendors and customers, a notable increase from the 61 cases recorded during the same period in the previous year. Financial losses have also surged, rising from GH¢84,592 to GH¢296,083.68.

These fraudsters exploit platforms such as Google Search and Google Maps. They achieve this by altering legitimate business listings, duplicating existing ones, or creating entirely new entries with fake phone numbers, often abusing the "suggest an edit" feature or claiming unverified profiles. Some even resort to purchasing sponsored advertisements to ensure their fraudulent details appear at the top of search results.

Customers who fall victim typically place orders after unknowingly contacting the scammers. They are then instructed to pay via mobile money or through deceptive links. Once payment is processed, communication abruptly stops, and the food never arrives. In some malicious instances, the payment pages are designed to harvest personal information, including names, delivery addresses, and mobile money numbers, which are subsequently used for unauthorized transactions.

The CSA strongly advises the public to verify contact details through official websites, verified social media pages, or trusted delivery platforms before ordering. It also urges consumers to avoid unfamiliar payment links, insist on paying only after delivery, and refrain from sharing sensitive information like PINs, one-time passwords, or banking credentials. Restaurants and food vendors are encouraged to claim and verify their Google Business Profiles, display official contact numbers prominently, and monitor their listings for any unauthorized changes or duplicates. The CSA also highlighted its 24-hour Cybersecurity/Cybercrime Incident Reporting Point of Contact for assistance.