Stay away from these blacklisted unlicensed mobile lending applications – Cyber Security Authority to public

The Cyber Security Authority (CSA) has warned the public against using unlicenses mobile lending applications, saying many of the apps have been linked to cyberbullying, extortion, and misuse of personal data.

In a public alert issued on May 31, 2025, the CSA said it had recorded 377 reports of cyberbullying involving these apps between January and May this year, representing a rise from the 228 cases reported in all of 2024.

According to the CSA, some of the apps credit small amounts of money, often less than GH₵200, into users’ mobile wallets without any formal loan request. Shortly afterwards, operators of the apps begin to harass users with aggressive demands for repayment, often accompanied by threats.

“These apps engage in abusive tactics such as demanding repayment with high interest from the victim or someone close to them, and threatening to circulate actual or fabricated nude photos of the victim on social media,” the CSA said.

Some victims also reported being labelled as criminals when they failed to meet the repayment demands. In several cases, harassment continued even after the loans were repaid.

The Authority listed a number of apps identified in the reports. 

The CSA noted that many of these apps are not licensed by the Bank of Ghana and do not comply with privacy rules under the Data Protection Act, 2012 (Act 843).

It added that during installation, users often grant access to personal data such as their Ghana Card details, phone contacts, and photos, which the app operators later exploit to threaten or embarrass victims.

The Authority cited Bank of Ghana notices BG/GOV/SEC/2022/10 and BG/GOV/SEC/2023/07, which state that the operations of such apps breach the Banks and Specialised Deposit-Taking Institutions Act, 2016 (Act 930).

The CSA advised the public to stay away from these apps, stating that anyone who uses them does so at their own risk, as the services are not under the oversight of either the central bank or the Data Protection Commission.

Members of the public who encounter such threats have been encouraged to report incidents to the Authority via WhatsApp on 0501603111, by calling 292, or by email at report@csa.gov.gh.

The CSA said it will continue to monitor and take appropriate steps to address cybercrime linked to digital financial services in the country.