For years the advice was simple: look for spelling mistakes. That advice no longer works.

What has changed

  • In September 2026 the Ghana Cybersecurity Industry Forum (GCIF), the industry body set up under the Cybersecurity Act, cautioned that criminals are using AI to polish their phishing messages, so the English is now well crafted and the old warning signs are gone.
  • The Cyber Security Authority (CSA) has warned about AI-generated deepfake videos of the President, Ministers, MPs and media personalities, made to promote fake investment schemes, fraudulent financial platforms and unapproved medicines.
  • Deepfakes are also used against companies directly. In 2024 the engineering firm Arup confirmed that an employee in its Hong Kong office transferred HK$200 million after a video call in which the "chief financial officer" and other colleagues were all AI-generated.

The pattern behind these scams

The technology is new, the trick is old. Almost every case has three parts:

  1. A trusted face or voice, such as the boss, a supplier, the bank, or a public figure.
  2. Urgency or secrecy, such as "this deal is confidential", "pay before close of business", or "do not tell the team yet".
  3. A request that moves money or access: a transfer, new bank details, a code, a password, or a gift card.

A deepfake only makes the first part more convincing. It cannot get past a process that does not depend on recognising someone.

A "verify before you pay" rule

  • Any request to pay, change bank details or share a code is confirmed on a second channel. If it arrived by email or video, call back on a number already on file. If it came by phone, confirm by a separate message or in person.
  • No exceptions for seniority. Staff should know that the MD would rather be called back than lose money, and the MD should say so out loud.
  • Agree a family or team code word for genuine emergencies, if your work involves urgent requests.
  • Two people approve large payments. One person being fooled is then not enough.
  • Never act on a video, advert or message to invest. Confirm investment offers with the Bank of Ghana or the Securities and Exchange Commission before sending money.

Signs of a deepfake

The CSA lists some clues: lip movements that do not match the audio, unnatural eye movement or blinking, and a robotic or overly polished voice. Treat them as a bonus. A good fake will not show them, which is why the process above matters more than spotting tricks.

Reporting

Report scams to the CSA on 292 (call or text) or on WhatsApp at 050 160 3111.

Teknikal Ghana helps businesses in the Western Region put payment checks, MFA and staff awareness in place. To talk it through, request a quote.