CSA Warns Public of Brand Impersonation Scams on Google Maps and Search

The Cyber Security Authority (CSA) has raised alarm over a growing wave of scams involving the impersonation of well-known brands and service providers through Google Maps and Google Search.

According to the Authority, cybercriminals are creating fake business profiles and manipulating search results to deceive unsuspecting members of the public. Companies such as Pizza Hut, Pizzaman/Chickenman, Hisense, Bel Aqua, Papaye, and Burger King have been among the popular brands targeted.

How the Scam Works

The CSA explained that scammers create or alter business listings of trusted institutions—including banks, hotels, airlines, courier services, and even government agencies—on Google Maps. These fraudulent listings often feature fake phone numbers, emails, and websites.

When users search online for contact details, they are sometimes directed to these fake profiles, which appear at the top of search results. Victims then unknowingly contact the fraudsters, who pose as customer service agents. The scammers trick individuals into disclosing sensitive information such as one-time passwords (OTPs) and personal identification numbers (PINs), which are later used to steal money from mobile money wallets or process fake payments.

CSA’s Advice to the Public

To protect themselves, the Authority has urged the public to:

• Verify phone numbers and contact details directly from official websites instead of relying solely on Google Search or Maps.
• Exercise caution with top search results, including paid ads, which scammers often exploit.
• Avoid sharing sensitive information such as PINs and OTPs online.
• Report fake listings or suspicious contacts found on Google Maps.

Recommendations for Institutions

The CSA also advised businesses and institutions to:

• Regularly monitor their brand presence on Google and Google Maps to identify fraudulent listings.
• Publicize verified contact details on official websites and trusted platforms.
• Monitor customer reviews and social media comments for signs of impersonation.
• Acquire official toll-free numbers or dedicated contact ranges and publicize them widely to build trust.

Reporting Incidents

The CSA has assured the public of support through its 24-hour Cybersecurity/Cybercrime Incident Reporting Point of Contact. Incidents can be reported via Call or Text to 292, WhatsApp on 0501603111, or email at report@csa.gov.gh.

The Authority emphasized that public vigilance, combined with proactive measures from businesses, is key to curbing the spread of these impersonation scams.

Reference: CSA/CERT/MPA/2025-08/02