President John Dramani Mahama has regained control of his X (formerly Twitter) account after hackers took over the platform on Monday, March 17, 2025, to promote a fraudulent cryptocurrency scheme.

In a post on Tuesday, March 18, 2025, Mr Mahama confirmed that his team had worked with X’s support team to restore the account.

“My team has restored my account, working with the X support team. Thank you for your enquiries and offers to assist,” he wrote.

The breach, which occurred in the early hours of Monday, saw hackers use the account to promote a fraudulent cryptocurrency scheme called "Solana Africa." The scam falsely claimed to be an initiative led by Mr Mahama to facilitate free cross-border payments across Africa using the Solana blockchain.

However, the project collapsed shortly after its promotion, in what appears to be a "rug pull" scam, leaving unsuspecting investors with financial losses.

Following the hack, Ghana’s Cyber Security Authority (CSA) released a statement on Tuesday, 18 March, confirming the incident and assuring the public that investigations were underway. The CSA stated that it was working with X’s security team and other relevant stakeholders to identify the hackers and strengthen security measures.

The hacking incident has raised concerns about the vulnerability of social media accounts belonging to high-profile individuals, particularly in an era of increasingly sophisticated cyber threats.

It remains unclear who was behind the attack, but Mr Mahama’s team has urged the public to disregard any fraudulent posts made during the breach.