Akwasidae
4notify Ghana · The Sunday Proclamation
OFFICIAL · Bank of Ghana · GhIPSS · MMI
Akwasidae No
AKW-GH-001
Date
2026-05-27
Status
In force
Category
Banking and payments

Strong customer authentication for GhIPSS, Ghana Pay and Mobile Money Interoperability: OTP delivery to Ghanaian banks across MTN, Telecel and AT

The Bank of Ghana, through the Ghana Interbank Payment and Settlement Systems (GhIPSS), runs Ghana Pay and Mobile Money Interoperability — the rails that let MTN MoMo, Telecel Cash and AT Money settle with GCB, Ecobank, Absa, Stanbic, Fidelity and CAL Bank in real time. Every wallet top-up, every bank-to-wallet sweep, every card payment needs a second factor. 4notify delivers one-time passwords at P50 under 4 seconds across MTN, Telecel and AT through tier-1 direct interconnects.

SMSPushEmail
Preamble

Whereas, in exercise of the powers conferred by section 4A of the Bank of Ghana Act, 2002 (Act 612) and the Payment Systems and Services Act, 2019 (Act 987), and consistent with the directives of the Ghana Interbank Payment and Settlement Systems, this Proclamation is issued concerning the delivery of strong-customer-authentication codes upon the Ghanaian mobile networks.

Statutory basis
Bank of Ghana Act, 2002 (Act 612)

Empowers the Bank of Ghana to oversee the financial system and prescribe authentication standards for regulated institutions.

Payment Systems and Services Act, 2019 (Act 987)

Governs payment service providers, GhIPSS rails, Ghana Pay, MoMo and Mobile Money Interoperability; mandates strong customer authentication.

BoG Cyber and Information Security Directive, 2018

Requires risk-based two-factor authentication on digital banking channels and detailed audit logs.

Implementation
01

NCA filing + tier-1 interconnect

4notify is filed with the National Communications Authority and holds tier-1 interconnects with MTN Ghana, Telecel and AT for authentication traffic.

02

OTP generated in the bank HSM

The one-time password is generated inside the bank's hardware security module; 4notify receives only the hashed payload and MSISDN — never the clear-text code at rest.

03

60-second window + fallback cascade

SMS lands inside 60 seconds; if the DLR misses, push and email fall back in sequence, avoiding the latency tail of grey-route hops.

04

Five-year audit custody

Every delivery is hash-signed and retained for five years to satisfy Bank of Ghana cyber-directive evidence requirements and Financial Intelligence Centre AML expectations.

Delivery envelope
json
{
  "event": "bank.ghipss.otp",
  "bank_id": "GH-XXXX",
  "rail": "ghana_pay",
  "txn_id": "TX-2026-05-27-481923",
  "amount": 540.00,
  "currency": "GHS",
  "delivery": {
    "channel": "sms",
    "fallback": ["push", "email"],
    "window_seconds": 60,
    "template": "ghipss_otp_gh_v3"
  },
  "audit_signature": "https://4notify.net/sig/bank/481923"
}
Sample message
SMS

GCB Bank: your code to confirm GHS 540.00 Ghana Pay transfer to K. Mensah is 482193. Valid for 5 minutes. Do not share it with anyone.

Compliance checklist
  • NCA provider filing maintained current
  • Tier-1 direct interconnect with MTN, Telecel and AT active
  • OTP P50 less than 4 seconds measured each quarter
  • Five-year hash-signed audit custody documented
The 4notify difference

4notify is the only A2P provider with simultaneous tier-1 direct interconnect on MTN Ghana, Telecel and AT plus five-year hash-signed audit custody for strong-customer-authentication delivery aligned with the Bank of Ghana cyber directive and GhIPSS Ghana Pay / MoMo Mobile Money Interoperability rules.

Frequently asked questions
Does 4notify reach Ghanaian banks directly or through an aggregator?

Tier-1 direct interconnect with MTN Ghana, Telecel and AT. We never route authentication traffic through grey-route aggregation.

Do push notifications count as a valid second factor?

Yes — an app-bound push is a recognised possession factor under the BoG cyber directive. Because the app cannot guarantee a durable medium, we always pair it with SMS or email.

Issued
4notify Department of Operations
2026-05-27 · AKW-GH-001

Start free

14 days, no card required. English-language support on business days.

Other proclamations in this edition