Mobile Data Bundle Scam: What You Must Do To Prevent Attacks

Mobile Data Bundle Scam

1.0 Background

The Cyber Security Authority (CSA) has received reports on mobile data bundle sale scams. From January to July 2025, a total of sixty-three (63) cases with monetary loss of GH₵ 73,510 were recorded.

Data bundle sale scams involve fraudsters pretending to offer mobile data at discounted rates purposely to trick victims to send money, divulge personal information, and in some cases, compromise their accounts by infecting their devices with malware to become targets of further scams.

2.0 Modus Operandi

Threat actors send SMS, WhatsApp messages, or social media ads, offering data bundles at extremely low prices to lure unsuspecting victims. In some instances, they pose as representatives of mobile network operators to churn out the ads.

Unsuspecting victims are tricked to perform tasks that include:

- Clicking on links that collect personally identifiable information (PII) such as names and contacts and passwords or download information stealing malware on the victim's devices that results in the compromise of their online accounts (social media, mobile money wallets or online bank accounts).

- Sharing their PIN which is eventually used to empty their mobile money accounts.

- Making advance payments for the data bundles they do not receive.

3.0 Recommendation

- Be cautious of unsolicited messages promoting mobile data sales.

- Verify vendors or promotions directly with mobile network operators via official customer service channels.

- Avoid purchasing data bundles from unverified individuals or platforms

- Never share your WhatsApp verification code, or Momo PIN or click on suspicious links sent by strangers or even known contacts.

- Enable two-step verification on all online accounts.

The CSA has a 24-hour Cybersecurity/Cybercrime Incident Reporting Point of Contact (PoC) for reporting cybercrimes and for seeking guidance and assistance on online activities; Call or Text - 292, WhatsApp - 0501603111, Email - report@csa.gov.gh.

Issued by the Cyber Security Authority

August 1, 2025

Ref: CSA/CERT/MPA/2025-08/01

Contact Information:

3rd Floor, NCA Tower

KIA, 6 Airport By-pass Rd, Accra | Digital Address: GL-126-7029 | Tel: 0303 972530, 0303 972531

E-mail: info@csa.gov.gh | Website: www.csa.gov.gh