Ghana’s President John Mahama’s verified X account was hijacked for 48 hours, with cybercriminals exploiting it to promote a fraudulent cryptocurrency scheme, his spokesperson confirmed on Tuesday.

The breach, which began on Saturday, became apparent on Sunday when the compromised account started endorsing “Solanafrica,” falsely claiming it was an initiative “led by Ghana’s President John Mahama to make payments across Africa free using the Solana blockchain.”
Hackers urged Mahama’s followers to invest in the scheme, presenting it as a revolutionary financial project. Although the fraudulent posts were deleted after the President’s team discovered the breach, the account continued posting crypto-related content, including mentions of an upcoming meme-coin launch.
“The President’s X account was compromised, and we have taken action to regain control,” spokesperson Kwakye Ofosu told AFP. “The account has now been fully restored, and we urge the public to disregard any suspicious cryptocurrency-related posts from the handle.”
The incident highlights the growing threat of crypto-related scams in Africa, where digital assets are gaining popularity, yet regulatory oversight remains limited. Cybercriminals frequently target verified accounts to push fraudulent investment schemes.
Mahama later reassured followers, posting, “My team has restored my account, working with the X support team. Thank you for your inquiries and offers to assist.”
This attack follows similar incidents involving high-profile African figures. In July 2023, South African opposition leader Julius Malema’s X account was hacked and used to promote a fraudulent token project. Nigerian businessman Tony Elumelu also fell victim in 2022, when hackers flooded his timeline with bogus crypto giveaways.

Cybersecurity experts stress the importance of robust security measures for public figures.
“Prominent personalities, especially those in government, need to implement stringent backend security checks,” said Abubakar Issaka, a cybersecurity expert at Ghana’s Centre for Cyberwatch and Data Protection. “Two-factor authentication alone is no longer enough. They must also monitor log-in activities, limit third-party app access, and have a dedicated team ensuring 24/7 surveillance of their accounts to detect and neutralize threats.”
Solana has gained traction in Africa due to its lower transaction fees compared to Bitcoin and Ethereum, making it an attractive tool for scammers looking to exploit investors.
Authorities have since taken necessary steps to secure Mahama’s account and prevent future breaches, Ofosu confirmed.
Source: citizen.digital