Identity theft — Ghana

The Cybersecurity Act and the criminal code cover impersonation; the Ghana Card and mobile money are the pressure points.

Location map — Ghana — Identity theft
Ghana. Simplified location map — Natural Earth data, public domain.

The legal framework

Identity fraud is prosecuted under the Cybersecurity Act 2020 and under criminal code provisions on defrauding by false pretences. The Ghana Card is now central to banking and SIM registration, which concentrates the risk. The Cyber Security Authority operates dedicated reporting channels including a short code.

Ghana's Cybersecurity Act and the criminal code cover impersonation and related fraud, and the Cyber Security Authority operates a reporting line. The pressure points are the Ghana Card, now required for a widening range of services including SIM registration and bank accounts, and mobile money, where a compromised account empties fast and reversal depends on reaching the operator within minutes.

Key points

StatutesCybersecurity Act 2020 and the Criminal Offences Act
Ghana CardRequired for banking and SIM registration; report loss to the NIA
Mobile moneyReport to the operator immediately; reversals depend on speed
ReportingCyber Security Authority short code and the police cybercrime unit
Data protectionData Protection Commission for the underlying breach
BankingBank of Ghana complaints channel for unresolved disputes
Short codeThe Cyber Security Authority operates a dedicated reporting line
Bank of GhanaHandles unresolved complaints against banks

In practice

Where to go

Worth knowing

SIM registration against the Ghana Card means a stolen card can be turned into a phone number and then into mobile money: report a lost card the same day. Because the Ghana Card underpins SIM registration and banking, a stolen card becomes a phone number and then a mobile money account within hours.

Frequently asked questions

What if someone uses my Ghana Card details?

Report to the National Identification Authority and to your bank, and file a report through the Cyber Security Authority's reporting channel and with the police. Because the card is now linked to SIMs and accounts, act on all fronts at once rather than sequentially.

What should you do in the first hour?

Call your bank and freeze the affected accounts and cards, change the passwords on your email first and then on everything linked to it, and turn on two-factor authentication. Take screenshots of everything before anything is deleted. Then report to the police and keep the reference number: banks, lenders and telecom operators will ask for it before they reverse anything.

Official sources and links

← All countries The general article on this topic →

Page checked in September 2026. The instruments cited can change: if in doubt, confirm with the official source given.

Locate this page in the site map

A question, a correction, a suggestion? Write to us.