Ghana launches 2026 cyber security push as digital fraud cases surge 48 percent

Ghana is ramping up its cybersecurity defences with the launch of the 2026 National Cyber Security Awareness Month (NCSAM), a strategic initiative designed to protect the nation's rapidly digitising financial sector. Running from October 1 to 31, 2026, the campaign unites regulators, law enforcement, banks, fintechs and other stakeholders under the theme 'Securing Ghana's Digital Finance Ecosystem: Building Trust Through Collaboration and Cyber Resilience', signalling a departure from viewing cybersecurity as merely a compliance box-ticking exercise to recognising it as a national priority.

The cyber threat landscape in Ghana

The timing of this campaign comes as Ghana grapples with a significant acceleration in cyber-enabled fraud. According to the Bank of Ghana's 2025 Fraud Report cited by Cyber Security Authority (CSA) Director-General Divine Selase Agbeti, fraud cases across banks, specialised deposit-taking institutions and payment service providers surged 48 percent—from 16,733 incidents in 2024 to 24,778 in 2025. Electronic fraud within the payment service provider segment proved particularly alarming, with a 54 percent year-on-year increase.

Between January and July 2026 alone, the CSA recorded 3,876 cybersecurity incidents, with online fraud accounting for roughly 47 percent of these cases. These figures underscore the vulnerability of Ghana's expanding digital finance ecosystem, where convenience and accessibility must be balanced against sophisticated criminal tactics.

Why it matters for Ghana

For ordinary Ghanaians, the rising tide of cyber fraud directly threatens savings, investments and personal data held in banks, mobile money platforms and fintech apps. As Ghana accelerates financial inclusion through digital channels—particularly mobile money and online banking—the security of these systems becomes critical to maintaining public confidence and preventing financial setbacks for vulnerable populations.

The campaign emphasises that cybersecurity is not solely a responsibility of technology departments or regulators; it is a shared governance issue requiring buy-in from financial institutions, customers, law enforcement and technology providers. CSA Director-General Agbeti stressed that institutions must view cybersecurity as "a duty owed to every customer whose money and data you hold," not merely a compliance requirement.

Recent law-enforcement successes offer some encouragement. The Criminal Investigations Department (CID) reported a joint operation in Tema that resulted in 39 arrests, whilst an Interpol-coordinated operation led to 68 arrests, the seizure of 835 devices, identification of 108 victims and recovery of over US$450,000 in traced losses. These operations demonstrate that cybercriminals, though operating across borders, remain within reach of coordinated international law enforcement.

Building trust through collaboration

Ghana's Banking Association (GAB) Chief Executive Officer John Awuah highlighted that banks view themselves as frontline partners in combating fraud, with trust as the foundation of the banking relationship. Banks now regularly share intelligence on incidents and emerging fraud tactics with the Bank of Ghana, police and CSA, as well as amongst themselves—a critical step towards identifying patterns and preventing future attacks.

However, Mr. Awuah also underscored a critical truth: an informed customer is a secure customer. Consumers must avoid disclosing personal security information, even when institutions implement robust safeguards. He noted that digital financial services should not force Ghanaians to choose between convenience and safety—"the two must move together."

The 2026 campaign is structured around five strategic pillars: securing Ghana's digital finance ecosystem; cybercrime prevention and response; cyber resilience and critical infrastructure protection; cyber hygiene (the routine practices individuals and organisations use to protect devices, accounts and data); and capacity building, research and innovation. These pillars reflect an ecosystem-wide approach rather than a siloed one.

The CSA has also signalled a tougher regulatory stance, warning that it will exercise available powers against institutions and service providers that disregard cybersecurity obligations and put the public at risk. All banks, fintechs, payment service providers, insurers and merchants are urged to procure cybersecurity services only from CSA-licensed or accredited providers, ensuring accountability and minimum standards across the sector.