Imagine this: your mother receives a phone call. The voice on the other end sounds exactly like you. It says you have been in a car accident near Tema Motorway, the police have your phone, and you desperately need GHS 4,000 sent to a mobile money number right now or you will spend the night in the cells. She is terrified. She nearly sends the money. Then she calls your actual number and you pick up — sitting safely at your desk.
This is not a scene from a movie. It is happening to families in Ghana, Nigeria, South Africa, and across the world right now, and the technology behind it gets more convincing every single month. Cybercriminals no longer need technical expertise or sophisticated equipment. They use cheap AI tools, simple social engineering, and the most powerful weapon of all: your trust. This guide tears down the 10 most dangerous scams targeting everyday people today, explains exactly how each one works from the criminal's perspective, and tells you precisely what to do to protect yourself and the people you love.
Scam 1: The AI Voice Clone — When the Voice You Trust Is Not Real
Artificial intelligence can now clone a human voice with startling accuracy using as little as three seconds of audio. That three seconds could come from anywhere — a TikTok video you posted, a voice note in a WhatsApp group, a YouTube vlog, or even a public Facebook video. The criminal uses a free or low-cost AI cloning tool, types whatever script they want, and the output is an audio file that sounds unmistakably like you.
They then call your parent, your spouse, or a sibling — people who would recognise your voice immediately — and play that audio, either in real time or as part of a scripted call. The scenario is almost always urgent: an accident, an arrest, a hospital emergency. The goal is to get mobile money transferred before the target has time to think, verify, or stop shaking long enough to call you directly.
"The voice sounded exactly like my son. The way he said 'Mama' — I cannot explain it. I was dialling the mobile money number when my daughter grabbed my phone and said wait. He was fine. He was at work." — A 2025 victim account shared in a West African consumer protection report.
The defence is elegantly simple and cannot be defeated by any technology: agree on a family safe word. Choose a random, unusual word or phrase that only your immediate family knows. If anyone calls claiming to be a family member in an emergency and cannot say the safe word when asked, hang up and call that family member directly on their known number. Do this today, before you need it.
Scam 2: The Wrong Number Long Con — The Friend Who Was Never Your Friend
You receive a WhatsApp message: "Hi, is the meeting still on for 3pm?" You reply politely that they have the wrong number. They apologise warmly. Then they compliment you on being so kind. A friendly conversation begins. Over days or even weeks, they share their life story — they are a successful professional abroad, perhaps in Hong Kong or Singapore or London. They are charming, interested in you, and the conversation feels genuinely pleasant.
Then, casually, they mention an investment opportunity. A cryptocurrency trading platform that their "uncle" manages. They have made significant returns. They want to share it with someone trustworthy like you. They show you screenshots of their balance — tens of thousands of dollars. They help you set up an account. You invest a small amount and watch the balance grow on screen. You invest more. You try to withdraw — and suddenly there are "fees," "taxes," and "verification charges" standing between you and your money. The platform support team — which is the same criminal operation — finds new reasons to delay until you have sent everything you have.
This scam is called "pig butchering" — a brutal term meaning the victim is fattened with trust before being slaughtered financially. It is responsible for billions of dollars in losses globally every year, and it is increasingly targeting people in Africa through WhatsApp, Instagram, and LinkedIn.
Scam 3: The Fake Streaming Service Lock — The Email That Looks Too Real
You receive an email that looks, in every detail, exactly like it came from Netflix, DStv, or Spotify. The logo is perfect. The colours match. The font is identical. The email says your account has been suspended due to a failed payment and you need to verify your card details immediately or lose access. There is a button: "Update Payment Method Now."
The link in that button does not go to Netflix. It goes to a site with a name like netflix-account-verify.ru or accounts-streaming-help.info. The site looks identical to the real one. The moment you enter your card number, expiry date, and CVV, those details are captured and used — sometimes within minutes — to make purchases or sold to other criminals.
Spotting these emails is simpler than it sounds. Before clicking any link in an email, hover your mouse over it (on a computer) or press and hold it (on a phone). The actual destination URL will appear. Legitimate companies always use their own domain — Netflix will always be netflix.com, nothing before or after the core domain name matters. Anything else is a fake.
Scam 4: The Fake Tech Support Alarm — The Loudest Lies Are the Most Convincing
You are browsing normally when your entire screen is taken over by a red or blue alarm page. A loud beeping sound fills your speakers. A voice may even speak from the page. It declares that your computer has been infected with a severe virus, your banking details are being stolen right now, and you must call a phone number immediately to stop the damage. The number is displayed prominently on the screen.
This is a browser-based illusion. Nothing has happened to your computer. The "alarm" is simply a webpage designed to look and sound terrifying. When you call the number, you reach a call centre — often operating from another country — where actors posing as Microsoft, Google, or Kaspersky technicians ask for remote access to your computer to "remove the virus." Once they have remote access, they either steal files, install actual malware, or convince you to pay hundreds of dollars for a "clean up" service that does nothing.
The fix requires no technical knowledge: close the browser tab. If the tab will not close, press Ctrl+W (Windows) or Cmd+W (Mac). If the entire browser is frozen, restart your computer. The "virus" disappears entirely because it was never there. No legitimate technology company — not Microsoft, not Google, not Apple — will ever display a phone number on your screen and ask you to call them about your computer.
Scam 5: The Mobile Money Reversal Trap — The "Accidental" Payment
A stranger sends you money via mobile money — perhaps GHS 500 — and immediately messages you saying it was a mistake, meant for someone else, and could you please send it back? You feel like a decent person for helping. You send the GHS 500 back.
But here is what actually happened: the original payment was made using a stolen mobile money account or a fraudulent bank transfer. When the fraud is discovered and reported, the original payment is reversed by the network — which means the GHS 500 vanishes from your account. But the GHS 500 you sent to the "stranger" is gone permanently, because you sent it from your own valid account. You have lost GHS 500 of your own money.
Mobile money transfers — like handing someone physical cash — are almost never reversible once completed. This is by design and is legally recognised as such. If someone sends you money claiming it was an error, tell them to contact their mobile money provider directly to initiate a formal reversal. Do not send money to them yourself under any circumstances.
Scam 6: The Fake Invoice Panic — You Owe Money You Never Spent
An email arrives stating that your annual subscription to a tech support service has been renewed and GHS 2,500 (or $399) has been charged to your account. There is a reference number. There is an invoice attachment. And there is a phone number to call if you want to dispute or cancel. The only problem is you never subscribed to anything.
When you panic and call the number, you are connected to a criminal call centre. The "agent" is sympathetic. They say they can process your refund — but they need remote access to your computer to process it. They install remote access software, you watch them "work," and then they ask you to log into your mobile banking to "verify the refund amount." At that moment, they begin making transactions from your account while keeping you distracted with conversation.
The tells are always the same: an invoice for something you do not recognise, urgency to act quickly, and a phone number inside the email to call. Never call a number provided inside a suspicious email. Search for the company name independently and call their publicly listed customer service number if you need to verify anything.
Scam 7: The Facebook "Your Page Will Be Deleted" Scam
Small business owners are primary targets for this one. A message arrives — via Facebook Messenger or Instagram DM — from an account that looks exactly like "Meta Business Support." The message warns that your business page has violated community standards and will be permanently deleted in 24 to 48 hours unless you click a link to appeal. The link goes to a fake Meta login page that captures your username and password.
With your credentials, criminals take over your business page. They change the name, the contact details, and sometimes use it to run fraudulent advertisements charged to your linked payment method. Recovering a compromised business account can take weeks and sometimes fails entirely.
Genuine Facebook account warnings never come through Messenger. All authentic Meta communications about your account appear inside the Meta Business Suite platform itself, under Notifications or Support Inbox — never as a personal message. If you are ever unsure, go directly to business.facebook.com and check your notifications there, without clicking any message link.
Scam 8: The Fake QR Code Over a Real One
QR codes have become part of daily life — on restaurant menus, event registration desks, church offering envelopes, parking payment points, and marketplace stalls. What most people do not know is that a criminal can print a fake QR code sticker, walk up to any legitimate QR code, peel and stick their sticker over the top, and walk away. Every person who scans that code is directed to a fraudulent payment page.
The fake page often looks professional — a convincing payment portal that asks for your card number, expiry date, and CVV. By the time the business notices their QR code has been tampered with, dozens of customers may have entered their card details.
Before scanning any QR code in a public space, physically inspect it. Does the sticker look like it has been placed over something else? Is there a visible edge or slight misalignment? When the page loads after scanning, look at the URL in your browser address bar before entering any information. A legitimate business payment link will use a recognisable domain — a string of random characters followed by an unusual extension is a red flag.
Scam 9: The Fake Delivery Fee SMS
"Your GhanaPost parcel cannot be delivered. A redelivery fee of GHS 3.50 is required. Pay here: [link]." The amount is tiny. You might be expecting a package. The message sounds completely routine. You click the link and enter your card details to pay the small fee.
But the real target was never GHS 3.50. It was your full card number, expiry date, and CVV — which are now in the hands of criminals who will use them for purchases worth far more than your small delivery charge. The link goes to a site that looks convincingly like a courier company portal, and your card details are captured the moment you submit the payment form.
Legitimate courier companies — GhanaPost, DHL, FedEx, Jumia — do not send unsolicited SMS messages with payment links for unexpected delivery fees. If you are genuinely expecting a package and receive such a message, go directly to the courier company's official website and track your parcel there using your tracking number.
Scam 10: The "Look Who Died" / "Is This You?" Message From a Friend
This one is particularly cruel because it exploits your trust in real friends. A message arrives from someone in your contact list — a friend, a colleague, a family member — saying "Oh my God, look who died" with a link, or "I cannot believe this is you in this video. Is this actually you?" Your curiosity and concern make you want to click immediately.
The link leads to one of two places: a fake Facebook or Instagram login page that asks you to "confirm your identity" before viewing the content (stealing your password), or a site that installs malware on your device. Once your account is compromised, the same message is automatically sent to everyone in your contact list, and the cycle continues.
Your friend did not send that message. Their account was compromised by the same scam. The moment you see this kind of message, call or WhatsApp the person who appears to have sent it using their known number — do not reply in the platform where the message appeared. Let them know their account has been hacked so they can begin the recovery process.
The Single Rule That Defeats Every Scam on This List
Every scam described here — every single one — succeeds because it manufactures urgency. Your account is being deleted in 24 hours. Your family member needs help right now. Your money is being stolen this second. Your parcel is being returned today. The criminal does not want you to have time to think, verify, or call anyone. A panicked person is a compliant person.
The antidote is one habit: pause for five full seconds before acting on anything urgent that came to you unsolicited. In those five seconds, ask yourself one question: "Did I initiate this interaction, or did it come to me?" If it came to you — an email, a message, a phone call, a pop-up — slow down. Verify through a separate channel. Call the person directly on a number you already know. Visit the website by typing the address manually. The five-second pause costs you nothing. It has saved people everything.
Continue the Cybersecurity Playbook
- Part 2: 10 Password and Account Mistakes That Are Silently Costing People Money
- Part 3: 10 Smart Home and Physical Security Risks Most People Do Not Know About
- Part 4: 10 Travel and Public Space Security Traps to Avoid in 2026
- Part 5: 10 Ways to Lock Down Your Identity and Personal Data Before It Is Too Late