Small business invoice fraud in Ghana rarely looks dramatic. It looks like a supplier’s WhatsApp message saying, “Please use my new MoMo number this time.” You are busy, the amount is familiar, and you pay.
Fraudsters count on that moment. Corporate finance teams defend against it with simple controls, and most of those controls cost nothing to copy. This guide adapts five of them for student startups, campus vendors and SME managers, with a focus on mobile money approval, phone verification of account changes and purchase order matching.
Key takeaways
- Never pay a new account or MoMo number until you confirm it by calling a number you already had on file.
- Match every invoice to a written order and a delivery record before you pay.
- Split MoMo duties: one person requests, another approves, and set daily limits.
- Search past payments by supplier and amount to catch duplicates under new invoice numbers.
- If you pay a scammer, contact your bank or telco and the Cyber Security Authority immediately.
Table of contents
- Why invoice fraud is a live risk for Ghanaian small businesses
- Check 1: Match every invoice to an order and a delivery
- Check 2: Call back before you change any payment details
- Check 3: Put rules around mobile money approvals
- Check 4: Search for duplicates and lookalike senders
- Check 5: Separate duties, review monthly and report fast
- Frequently asked questions
Why invoice fraud is a live risk for Ghanaian small businesses
Fraud in Ghana’s digital economy is rising, and businesses are in the firing line. The Cyber Security Authority (CSA) said at the launch of National Cyber Security Awareness Month 2026 that it recorded 3,876 cybersecurity incidents between January and July 2026, with online fraud accounting for about 47%.
Mobile money sits at the centre. A Ghana Bankers Association report for January to March 2026 found that mobile money fraud accounted for the highest number of cases (23 cases, 31.5%). Most of it relies on tricking people rather than hacking systems. Criminals primarily rely on social engineering, such as pretending to be telco or bank agents.
Invoice scams add another route. A police-focused guide on online scams in Ghana notes that small businesses are increasingly targeted by fraudsters who impersonate suppliers, send fake invoice updates and change payment account details. Note that Ghana-specific figures for invoice fraud alone are not published, so the numbers above describe the wider digital fraud picture.
The five checks below follow a list published on 27 October 2026 for small businesses, which stresses that duplicate and fake bills get through when a business cannot check that a bill matches something it ordered, received and approved. We have adapted them to how Ghanaians actually trade.
Check 1: Match every invoice to an order and a delivery
This is called three-way matching: the invoice, the purchase order and the proof of delivery must agree. One guide describes it as stopping payment on any invoice that does not match your records.
You do not need software. A notebook, a shared Google Sheet or a saved WhatsApp order confirmation works.
A simple version for a campus vendor
- Write down every order before it ships: item, quantity, agreed price, date.
- Record what actually arrived, ideally with a photo of the delivery note.
- When an invoice comes, compare quantity and unit price against both records.
- Hold anything that does not match and ask the supplier to explain in writing.
The steps mirror the advice to require a written purchase order before anything ships and to hold any bill that does not match. An invoice for goods you never ordered should not be paid at all.
Check 2: Call back before you change any payment details
This is the single most valuable habit. If a supplier, landlord or service provider sends new bank or MoMo details, treat it as suspicious until proven otherwise.
Guidance on verifying payment requests is consistent: contact the vendor directly using a phone number you already have on file, and do not rely on contact information in the email or invoice itself.
- Call the saved number, not the one in the message.
- Ask something only the real supplier would know, such as the last order date.
- Record the call, the date and who confirmed it.
- Be extra careful when the message is urgent. Fraudsters often create time pressure to bypass normal review.
A scammer can copy a logo and a writing style. They cannot answer your call as the real supplier.
Check 3: Put rules around mobile money approvals
MoMo moves money instantly, which makes mistakes hard to reverse. Build friction in on purpose.
- Two people, two roles. One person prepares the payment, another approves it. In a two-person startup, the owner approves everything above a set amount.
- Separate wallets. Keep business money apart from personal MoMo, so one compromised PIN does not reach everything.
- Set limits. Use daily transaction limits and agree an amount above which a call-back is compulsory.
- Read the prompt. Check the registered name and number on the confirmation screen before you approve. If it does not match the supplier, stop.
- Guard your PIN and SIM. No genuine telco or bank agent will ask for your PIN or approval code.
These rules suit even the smallest operation. A bank guide notes that even a two-person team can benefit from the owner or a manager reviewing and approving payments before they are processed.
Check 4: Search for duplicates and lookalike senders
Duplicate invoices often slip through because people search by invoice number only. The KTVZ checklist gives the example of the same amount from the same vendor arriving twice within 30 days under different invoice numbers, which needs a search by vendor name, amount and date together.
Do the same with your payment log or MoMo statement. Before paying, search the supplier’s name and the amount.
Also inspect where the message came from. Email spoofing relies on slight variations on legitimate addresses. On WhatsApp, the same trick appears as a new number using your supplier’s profile photo. If a contact suddenly writes from a different number, confirm it by calling the old one.
Learning basic digital safety also helps your whole team. The University of Ghana I.T online short courses are one place to build those skills.
Check 5: Separate duties, review monthly and report fast
The KTVZ piece observes that smaller companies are more exposed because fewer people touch the bills, and one person handling receiving, data entry and payments means no second set of eyes.
If you are a solo founder, create the second pair of eyes yourself:
- Ask a trusted friend, co-founder or mentor to review your payments list monthly.
- Keep a short approved-supplier list with verified phone numbers.
- Screenshot and file every order, invoice and receipt in one folder.
- Turn on two-factor authentication for your email, banking app and social accounts.
What to do if you already paid a fake invoice
Act within minutes. Call your bank or telco to flag the transaction, keep screenshots and the scammer’s number, and report to the Cyber Security Authority and the police. Recovery is never guaranteed, but speed improves your chances.
Invoice fraud works when payment is faster than verification. Reverse that order: match the paperwork, call a known number, limit MoMo approvals, check for duplicates and review regularly. None of it needs a finance degree or a software budget.
Start today. Write down your five most-paid suppliers, save their verified phone numbers in one place, and agree one rule with your team: no payment detail changes without a call-back. Share this guide with another young founder on campus.
Frequently asked questions
What is invoice fraud?
Invoice fraud is when a scammer sends a fake invoice, alters a real one or impersonates a supplier to redirect your payment to their account. It can also involve duplicate bills or charges for goods you never ordered. Small businesses are exposed because fewer people check each payment.
How can I verify a supplier's new MoMo number or bank account?
Call the supplier on a phone number you already had saved before the message arrived. Do not use contact details from the invoice, email or WhatsApp message that announced the change. Note the date and who confirmed it before you send any money.
Where do I report invoice or mobile money fraud in Ghana?
Contact your bank or mobile money provider immediately so the transaction can be flagged, then report to the Cyber Security Authority and the police. Keep screenshots, numbers and receipts as evidence. Reporting quickly gives you the best chance of limiting losses.
Can a student startup afford invoice fraud controls?
Yes. The core controls are free: written orders, a delivery record, a call-back rule, daily MoMo limits and a monthly review by someone you trust. They take minutes per payment and cost far less than a single diverted transaction.
Sources
- 5 checks to guard your small business against invoice fraud – KTVZ
- Invoice Fraud: Warning Signs and How to Prevent It
- How to Protect Your Small Business from Invoice Fraud and QR Code Scam
- Detect and Prevent Invoice Fraud: Protect Your Business
- Invoice Fraud: How to Spot Fake Invoices & Protect Your Business
- What Is Invoice Fraud? Detection & Prevention Guide
- Invoice Scams: How to Detect and Prevent Invoice Fraud in Your Organization?
- Invoice Fraud: How to Identify Fake Invoices (Analyzing Real Threats) – Hoxhunt
