Online: privacy, image, data and scams — Cameroon

Data protection. Cameroon protects personal data through Law No. 2024/017 of 23 December 2024, in force since 23 June 2026: it creates an independent Personal Data Protection Authority (APDP), grants rights of access, rectification, objection and erasure, and makes transfers abroad subject to prior authorisation; Law No. 2010/012 on cybersecurity and cybercrime, applied by the ANTIC (the national information and communication technology agency), still covers online offences. Against organisations in the UK or the EU, the UK GDPR or the GDPR protects you wherever you live; and since Cameroon has no adequacy decision from the UK or the EU, transfers of personal data there need extra safeguards.

Illustration: Online: privacy, image, data and scams
Location map — Cameroon
Cameroon. Simplified location map — Natural Earth data, public domain.

Data protection

Data protection rests on Law No. 2024/017 of 23 December 2024 on the protection of personal data (loi relative à la protection des données à caractère personnel), which came into force on 23 June 2026 after an 18-month period for companies and public bodies to comply; it creates the Autorité de protection des données à caractère personnel (APDP, Personal Data Protection Authority), an independent public body. Law No. 2010/012 on cybersecurity and cybercrime (loi relative à la cybersécurité et à la cybercriminalité), applied by the Agence nationale des technologies de l'information et de la communication (ANTIC, national agency for information and communication technologies), continues to cover online offences. The texts take up the principles of the European model: a specific purpose (finalité), proportionality (proportionnalité), data security and the rights of access (droit d'accès) and rectification. The rights recognised are information, access, rectification and objection (opposition); erasure (effacement) is provided for by the most recent texts. Processing must be declared (déclaration) or authorised in advance (autorisation préalable), depending on its nature, and transfers abroad are regulated and often subject to the authority's authorisation. Abuses involving advertising text messages, telecommunications and mobile money also fall to the telecommunications regulator. Loan apps that use access to the phone's contacts to put pressure on borrowers are a practice targeted by the authorities of the region. Cameroon signed the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention) on 12 August 2021 but has not ratified it. As throughout the region, the difficulty lies in effectiveness: the authorities often lack resources, and companies' awareness remains low. The authorities systematically ask for evidence: screenshots, dates and copies of letters.

British and Irish nationals living in Cameroon, and British-Cameroonian couples, deal with two systems depending on who holds their data. Against Cameroonian bodies — mobile operators, mobile money services, banks, employers, loan apps — Cameroonian law applies — since 23 June 2026 Law No. 2024/017, enforced by the APDP — and, for abuses by text message or mobile money, the telecommunications regulator is also competent. Against organisations established in the UK — a British bank, the NHS, HMRC, an employer, online services — the UK GDPR and the Data Protection Act 2018 continue to apply whatever your country of residence, as does the GDPR for organisations in Ireland and the rest of the EU, and both also apply to services outside the UK or the EU that target people there: the reply to an access request is due within one month and is normally free, and a complaint to the ICO (the Information Commissioner's Office) or to Ireland's Data Protection Commission costs nothing. That route is often the faster one. For British companies, charities, churches and universities with partners in Cameroon, the consequence runs the other way: Cameroon is covered neither by UK adequacy regulations nor by an EU adequacy decision, so transfers of personal data from the UK need appropriate safeguards — usually the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses — and transfers from Ireland the standard contractual clauses (article 46 of the GDPR); Cameroonian law may in turn make transfers abroad subject to authorisation.

The second point concerns what is on the phone. In Cameroonian prosecutions under article 347-1 of the Code pénal (Penal Code), which punishes same-sex relations, messages and photos have been the main source of evidence and have served as the basis for convictions; for anyone with such content on a phone, digital caution — screen lock, encryption, nothing passed on through third parties — is a safety measure. The FCDO's travel advice for Cameroon likewise notes that same-sex sexual acts are illegal there and that same-sex partners have been arrested and prosecuted. Intimate images shared against the will of the person shown are also a tool of blackmail (sextortion): never pay, keep the evidence and report it — in Cameroon to the police or the gendarmerie, with a report to the ANTIC; in the UK to the police, since sharing an intimate image without consent is an offence throughout the UK (in England and Wales under the Sexual Offences Act 2003 as amended by the Online Safety Act 2023), and in Ireland under Coco's Law of 2020. The Revenge Porn Helpline helps adults in the UK to have images removed from platforms. Cameroonians who live or study in the UK have all the rights of the UK GDPR towards UK organisations, whatever their nationality. And families in the UK who send mobile money to relatives in Cameroon, or set up a phone for them, help most with simple rules: never pass on a code, never let a loan app access the contacts, keep confirmation messages and screenshots.

Key points

LawLaw No. 2010/012 on cybersecurity and cybercrime
AuthorityAPDP (Autorité de protection des données à caractère personnel) under Law No. 2024/017; ANTIC for cybersecurity
General data protection lawLaw No. 2024/017 of 23 December 2024, in force since 23 June 2026
RightsInformation, access, rectification, objection; erasure in the most recent texts
FormalitiesDeclaration or prior authorisation of processing, depending on its nature
Transfers abroadRegulated, often subject to authorisation
Regional frameworkMalabo Convention of the African Union: signed by Cameroon on 12 August 2021, not ratified
Advertising texts and mobile moneyAbuses also handled by the telecommunications regulator
Loan appsPressure through the phone's contacts: a practice targeted by the region's authorities
EvidenceKeep screenshots, dates and copies of letters: the authorities ask for them systematically
British and Irish nationalsUK GDPR or GDPR against UK and EU organisations wherever you live (ICO, Data Protection Commission); no UK or EU adequacy decision for Cameroon; sharing intimate images without consent an offence in the UK and Ireland

In practice

  • Send a written access request to the organisation holding your data, citing the Cameroonian law and enclosing a copy of an identity document; keep the date and a copy of the letter.
  • If it refuses or does not reply, refer the matter to the APDP, the authority created by Law No. 2024/017; for text messages or mobile money, also to the telecommunications regulator.
  • For a service established or represented in the UK or the EU, rely on the UK GDPR or the GDPR at the same time — often the faster route — and, without a reply within a month, complain to the ICO or to the Data Protection Commission.
  • Give loan apps no access to contacts, photos or location; if an app puts pressure on you through your contacts, keep screenshots and inform the authorities.
  • Before travelling to Cameroon, check your phone: screen lock, encryption, backups; do not pass sensitive content on through third parties.
  • If an intimate image is shared or used for blackmail: do not pay, keep the evidence, ask the platform to remove it and report it — in Cameroon to the police or the gendarmerie, in the UK to the police, with the Revenge Porn Helpline's help for removal.
  • British organisations that send personal data to Cameroon put the International Data Transfer Agreement or the UK Addendum in place and check whether Cameroonian law requires a declaration or an authorisation.

Cost and coverage

Procedures before the Cameroonian authorities are free; costs arise at most for copies, translations and, in court proceedings, a lawyer. In the UK, an access request is normally free and a complaint to the ICO costs nothing, including for people who live abroad; the same applies to the Data Protection Commission in Ireland. Compensation for a breach of the UK GDPR is claimed in the civil courts, with a lawyer and a risk of costs.

Recent changes

Law No. 2024/017 came into force on 23 June 2026, after an 18-month period for companies and public bodies to comply; the common challenge across the region remains effectiveness: the authorities often lack resources and companies' awareness remains low, although the growth of mobile money and digital services is speeding up checks. In the UK, the Data (Use and Access) Act 2025 amended data protection law, with changes coming into force in stages, and the Online Safety Act 2023 broadened the offence of sharing intimate images without consent in England and Wales from January 2024.

Where to go

  • APDP (Personal Data Protection Authority): application of Law No. 2024/017 since 23 June 2026; ANTIC: Law No. 2010/012 on cybersecurity, reports and warnings.
  • Telecommunications regulator: abuses involving text messages, telecommunications and mobile money.
  • Consumer associations and cliniques juridiques (law clinics): support.
  • Police and gendarmerie: complaints of blackmail or of images being shared.
  • In the UK: the ICO (ico.org.uk), the police and the Revenge Porn Helpline; in Ireland: the Data Protection Commission and An Garda Síochána; British High Commission in Yaoundé if you are arrested in Cameroon; Irish citizens abroad: Department of Foreign Affairs.

Worth knowing

Your rights do not stop at the border: an online service established in the UK or Europe, or one that targets people there, must respect the UK GDPR or the GDPR wherever you live — so you can approach both the Cameroonian authority and the competent UK or European regulator. In Cameroon itself, Law No. 2024/017 has only applied since 23 June 2026: the best protection is caution about what is on your phone and what an app is allowed to access.

Frequently asked questions

Does the UK GDPR still protect me if I live in Cameroon?

Against organisations established in the UK — your British bank, HMRC, the NHS, online services — yes, whatever your country of residence, and also against services outside the UK that target people in the UK: a reply to an access request within one month, normally free, and a free complaint to the ICO. Organisations in Ireland and the rest of the EU are bound by the GDPR in the same way. Against Cameroonian bodies, Law No. 2024/017 has applied since 23 June 2026, with the rights of access, rectification, objection and erasure, enforced by the APDP; for text messages and mobile money, the telecommunications regulator is also competent.

A loan app is putting pressure on me through my contacts — what can I do?

Keep screenshots of the messages sent to you and to your contacts, withdraw the app's access to contacts, photos and location in the phone's settings, and inform the ANTIC and the telecommunications regulator: the practice is known to the authorities of the region, which are acting against it. If there are threats, make a complaint to the police or the gendarmerie. Warn your contacts through another channel so that they do not respond to the messages. For the next loan: no app that asks for your address book.

Can my UK employer send my data to its office in Douala?

Yes, but not without safeguards: Cameroon is covered neither by UK adequacy regulations nor by an EU adequacy decision, so the transfer needs appropriate safeguards — from the UK usually the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses — and your employer must tell you about the transfer. Cameroonian law may in turn make transfers abroad subject to authorisation. If in doubt, ask the company's data protection officer; complaints go to the ICO, or to the Data Protection Commission for an employer established in Ireland.

Someone is threatening to share intimate images of me — what should I do?

Do not pay and do not negotiate: the blackmail does not stop after a first payment. Keep the messages, profiles and payment demands, ask the platforms to remove the images and report it — in Cameroon to the police or the gendarmerie, with a report to the ANTIC; in the UK to the police, since sharing an intimate image without consent is an offence, with the Revenge Porn Helpline's help for removal; in Ireland to An Garda Síochána under Coco's Law. If the images suggest a same-sex relationship, the situation in Cameroon is especially delicate because of article 347-1 of the Code pénal: take confidential advice from a lawyer there before any step.

Sources

The general article: Data protection · Compare with another country

Romance scams

In Cameroon most fraud runs through argent mobile (mobile money), ahead of bank transfers: the only really effective remedy is to ask the operator, within the hour, to block or cancel the transfer before the money is withdrawn; complaints go to the police or the gendarmerie, and the ANTIC (the national information and communication technology agency) receives reports, including on the free number 8202. The FCDO warns that advance fee scams are common in Cameroon; money sent from a UK account is reported to Report Fraud and to the UK bank at once.

Reports are received by the Agence nationale des technologies de l'information et de la communication (ANTIC, national agency for information and communication technologies) — through the reporting form of its CIRT (Computer Incident Response Team), by email to alerts@antic.cm or on the free number 8202 — and by specialised judicial units. A complaint (plainte) is made at a commissariat (police station) or a brigade de gendarmerie, which refers it to the specialised unit, the Service national de lutte contre la cybercriminalité (national service for combating cybercrime). The decisive lever, however, is not the police but the mobile operator: a cancellation (annulation) or blocking (blocage) procedure can be started with the operator as long as the money has not yet been withdrawn. Mobile money is the dominant channel for fraud, ahead of bank transfers, and the text messages confirming a transfer are the essential evidence: they carry the references the investigators need. Reporting even a small amount helps others, since the same numbers come up from one victim to the next, and a number reported to the operator can be deactivated. Money that has gone into cryptocurrency is in practice lost. In sextortion (blackmail with intimate images or videos) the rule is never to pay: the blackmail does not stop after a first payment. Making a complaint is free, and calling the operator is generally free from its own network. These rules and services are national: they apply in the English-speaking regions as in the rest of the country.

The FCDO's travel advice for Cameroon warns that advance fee scams are common there, and that criminals use child adoption, offered through websites or emails, to obtain large sums before their victims suspect anything. For British and Irish nationals living in Cameroon, and for English-speaking Cameroonians who use mobile money every day, the first rule is to protect a mobile money account like a bank account: never give the PIN or a code received by text message, even to someone who claims to be calling from the operator. Anyone who has sent money to a wrong number or to a fraudster calls the operator's customer service at once — the useful window is counted in minutes, not days — and deletes no confirmation message; then comes the complaint at the commissariat or the gendarmerie, and the report to the ANTIC. The British High Commission in Yaoundé can help when a scam leaves someone without a passport or without money — an emergency travel document, contact with family or friends who can send money —, but it cannot recover lost money or intervene with the Cameroonian authorities. Blackmail with images or chats suggesting a same-sex relationship is especially dangerous: article 347-1 of the Code pénal (Penal Code) punishes such relations, prosecutions are regular and have relied on messages and photos, and blackmailers exploit that fear — anyone concerned should take confidential advice from a lawyer before taking any step.

For Cameroonians in the UK and for British-Cameroonian families, many scams play on the link between the two countries: a message from a supposed relative with a 'new number' who urgently needs money; an acquaintance asking for a mobile money transfer for a hospital stay, a funeral or a fee; intermediaries promising a UK visa, a university place or a job in exchange for money. UK visas are decided only by UK Visas and Immigration under the published rules, applications are made through GOV.UK, and nobody can guarantee one for a payment; a student visa requires a Confirmation of Acceptance for Studies from a university or college licensed as a sponsor, and a Skilled Worker visa a job offer from an employer licensed by the Home Office, whose register of licensed sponsors is public. From the UK, people also meet romance scammers: a contact from a dating app or a social network who builds trust over weeks, then asks for money for customs, a ticket, a hospital or a cryptocurrency 'investment'. What has reached a Cameroonian mobile money account can be stopped only by the operator in Cameroon, which is why a relative on the spot should call it at once.

Key points

Dominant channelMobile money, ahead of bank transfers
Most effective leverBlocking or cancellation with the operator, within the hour
ComplaintCommissariat or brigade de gendarmerie, which refers the case to the specialised unit
Specialised unitService national de lutte contre la cybercriminalité
ReportsANTIC (CIRT): online form, alerts@antic.cm, free number 8202
EvidenceThe transfer confirmation text messages are the essential evidence: do not delete them
CryptocurrencyLosses in practice irrecoverable
SextortionNever pay; the blackmail does not stop after a first payment
CostsComplaint free; calling the operator generally free from its own network
British and Irish nationalsFCDO: advance fee scams common, including fake adoptions; UK visas only through UK Visas and Immigration; Report Fraud (Police Scotland in Scotland); UK reimbursement of push-payment fraud only between UK accounts; in Ireland, An Garda Síochána

In practice

  • Call the mobile money operator immediately: as long as the recipient has not withdrawn the funds, cancellation is sometimes possible.
  • Keep all the transaction text messages — they carry the references needed for the investigation — as well as screenshots of chats, profiles and phone numbers.
  • Make a complaint even for a small amount, and report the incident to the ANTIC through the CIRT form, by email to alerts@antic.cm or on 8202.
  • Report the fraudster's number to the operator: it can be deactivated, which protects the next victims.
  • If a relative or a friend asks for money by message, call back on the old, known number and check the voice before sending anything.
  • Faced with blackmail using intimate images, do not pay, stop replying, keep the evidence and report it; anyone who could face prosecution in Cameroon because of the images themselves should first take confidential advice from a lawyer.
  • From the UK: report to Report Fraud (Police Scotland in Scotland) and ask your bank at once to try to recall the payment; before any 'investment', check the FCA register and warning list; for a visa, use only GOV.UK and never pay an intermediary who promises a result.

Cost and coverage

In Cameroon a complaint is free, calling the operator is generally free from its own network, and the ANTIC's number 8202 is free. A civil action against a fraudster requires a lawyer and has uncertain prospects. In the UK, Report Fraud, the police and the Financial Ombudsman Service are free, as is the advice of Citizens Advice. Beware of 'recovery' services that promise, against an advance fee, to get lost money back: they are almost always a second scam.

Recent changes

The spread of mobile money and digital services has multiplied the forms of fraud across the region; the ANTIC publishes current warnings and prevention advice. In the UK, mandatory reimbursement of authorised push-payment fraud between UK accounts has applied since October 2024, and Report Fraud replaced Action Fraud as the national reporting service in December 2025; police and consumer organisations warn in particular against messages from supposed relatives with a 'new number' and against cryptocurrency investment scams.

Where to go

  • Customer service of the mobile money operator: blocking, cancellation, reporting the number.
  • Commissariat or brigade de gendarmerie; Service national de lutte contre la cybercriminalité.
  • ANTIC: CIRT reporting form, alerts@antic.cm, number 8202; consumer and digital protection associations.
  • eConsumer.gov: international portal for reporting fraud committed from abroad.
  • British High Commission in Yaoundé: lost passports and emergencies; in the UK, Report Fraud, Police Scotland, the Financial Ombudsman Service and the FCA register; in Ireland, An Garda Síochána; Irish citizens abroad: Department of Foreign Affairs.

Worth knowing

The useful window is counted in minutes, not days: a call to the operator before you have even grasped the scale of the scam is worth more than a perfectly written complaint the next day. Delete no confirmation message. And from the UK: a transfer you made yourself to Cameroon is not covered by the UK reimbursement rules — send nothing for customs, a visa, a hospital or a ticket until you have reached the person by a second, known route.

Frequently asked questions

I sent money by mobile money to a fraudster in Cameroon — what should I do?

Call your operator's customer service at once: as long as the recipient has not withdrawn the money, a cancellation or a block can sometimes still work — the window is counted in minutes. Keep all the confirmation text messages, which carry the references for the investigation, make a complaint at the commissariat or the gendarmerie, even for a small amount, and report the incident to the ANTIC (CIRT form, alerts@antic.cm or 8202). Report the fraudster's number to the operator so that it can be deactivated.

Someone in Cameroon I know only online is asking me for money — what should I do?

Send nothing and check: a spontaneous video call, a reverse image search on the profile photos, questions about details. Stories about customs, a hospital, a visa fee or a ticket to the UK are the standard scripts, and an 'investment' in cryptocurrency on an unknown platform almost always ends in loss — check the FCA register and warning list first. If money has already gone: report to Report Fraud (Police Scotland in Scotland) and ask your bank to try to recall the payment; money sent in cryptocurrency or to a Cameroonian mobile money wallet is rarely recovered, but the report links cases together.

Someone is promising my nephew in Bamenda a UK visa for a fee — is it genuine?

No. UK visas are decided only by UK Visas and Immigration under the published rules, applications are made online through GOV.UK, and nobody can guarantee one for a payment. Intermediaries who promise visas, university places or jobs in the UK against an advance are a common pattern: a student visa requires a Confirmation of Acceptance for Studies from a licensed university or college, and a Skilled Worker visa a job offer from an employer on the Home Office's public register of licensed sponsors. If money has already been paid, your nephew should make a complaint at the commissariat or the gendarmerie and report the case to the ANTIC.

I am being blackmailed with intimate images — should I pay?

No: the blackmail does not stop after a first payment. Stop replying, keep the messages, profiles and payment demands, and report it — in the UK, to the police, who take such cases seriously; the Revenge Porn Helpline can help adults with removal from platforms. Ask the platforms to remove the images. If the images or chats suggest a same-sex relationship, the situation in Cameroon is especially delicate, since article 347-1 of the Code pénal punishes such relations: take confidential advice from a lawyer there before any step; in the UK you can report without that risk.

Sources

The general article: Romance scams · Compare with another country

Page checked in September 2026. The instruments cited can change: if in doubt, confirm with the official source given.

Locate this page in the site map