Cyprus (CY)
Cyprus is a Mediterranean island nation and EU member state situated at the crossroads of Europe, Asia and Africa.
Scam Warnings
Common scams targeting expats in Cyprus.
Cyprus is a generally low-crime EU member state, but several scams specifically target foreign nationals. Three golden rules: always instruct an independent Cyprus-Bar-registered lawyer before any property transaction — the island's historic title-deed problems are real and ongoing; verify any financial firm on the CySEC register at cysec.gov.cy before investing; and report online crimes to the Cyprus Police Cybercrime Unit at cyberalert.cy. As an EU country, Cyprus consumers benefit from the 14-day withdrawal right for distance and off-premises contracts under the EU Consumer Rights Directive.
Property Title Deed Fraud
criticalCyprus has a well-documented and ongoing problem with properties sold without clear or transferable title deeds. Developers sold units to multiple buyers, used buyer deposits as loan collateral, and in many cases title deeds were never transferred due to developer mortgage encumbrances. Forged ownership documents and fake licensed agents are also active concerns: Cyprus Police are initiating three to five criminal cases per day related to illegal brokerage and real estate fraud. This affects resale properties and new developments across Limassol, Paphos, and Larnaca.
- - Agent or developer cannot produce an unencumbered title deed showing the seller as registered owner
- - Title deed remains in the developer's name years after the purchase agreement was signed
- - Pressure to sign quickly without allowing full independent legal review
- - Agent is not verifiably registered with the Cyprus Real Estate Agents Registration Council (ETEK)
- - Price is suspiciously low for the area, often indicating a known encumbrance or dispute
Fake Investment Platforms and CySEC Impersonation
criticalCyprus's financial services cluster in Limassol (forex and CFD brokers) creates a backdrop for investment fraud. Unlicensed brokers and fake investment platforms — sometimes posing as real CySEC-regulated entities or even impersonating CySEC officials themselves — contact victims via social media, cold calls, or emails. CySEC has specifically warned that scammers copy CySEC's website and contact previous scam victims, falsely offering fee-paid "recovery" services for money already lost.
- - Guaranteed high returns (5–20% per month or annually) with no downside risk
- - Company does not appear on the CySEC public register at cysec.gov.cy
- - Caller claims to be a CySEC official offering to recover previously lost funds for an upfront fee
- - Withdrawal requests are refused or new conditions imposed each time you try to withdraw
- - Contact initiated via social media with romantic framing (classic "pig butchering" variant)
Rental Listing Scams
criticalFraudulent rental listings on Bazaraki.com, Facebook Marketplace, and property portals advertise attractive properties at below-market prices — often with stolen photos from legitimate listings. The "landlord" is typically abroad and demands a deposit before allowing a viewing. The property either does not exist or is not available for rent. Real-estate fraud reports in Cyprus rose sharply in 2025.
- - No in-person viewing offered before any deposit payment is requested
- - Landlord is "abroad for work" or otherwise inaccessible for a meeting or video call
- - Price is significantly below market rate for the area (check bazaraki.com live prices)
- - Payment requested via Western Union, PayPal Friends&Family, cryptocurrency, or a non-Cypriot bank account
- - Listing photos found duplicated at different addresses via reverse image search
Fake Government Service Websites
warningFraudulent websites impersonate official Cyprus government portals — CRMD (Civil Registry), Tax Department, GESY (health system) — and charge fees for free services or harvest personal information. These sites frequently appear at the top of Google results via paid advertisements.
- - URL does not end in .gov.cy or the established official domain (e.g., gesy.org.cy)
- - Requests payment for services that are free on official government portals
- - Website design looks slightly off or contains translation errors
- - First result in Google for a government service — always check if it is a paid ad
Unlicensed Immigration and Legal Advisers
warningNon-qualified individuals and unregistered companies sell immigration, residency, and company formation services at high fees with no legal accountability. Some provide incorrect advice that leads to failed permit applications or invalid structures. This is particularly risky for third-country nationals applying for the Cyprus Digital Nomad Visa, long-term residence, or company formation.
- - Adviser is not a registered member of the Cyprus Bar Association (cyprusbarassociation.org)
- - Guarantees residency approval or citizenship — no legitimate lawyer can do this
- - Requests a large upfront fee with no formal written engagement letter or contract
- - Cannot provide a verified business address or professional insurance
Job Offer and Trafficking-Adjacent Scams
warningFake job offers targeting international job seekers promise hospitality, modelling, or domestic work positions in Cyprus. Victims sometimes find conditions are exploitative on arrival, or are asked to pay upfront for work permits, accommodation, or training — which is always fraudulent.
- - Job offer arrives via WhatsApp or Instagram from an unverifiable contact, not through a formal recruitment agency
- - Asked to pay for visa, work permit, accommodation, or training before employment begins
- - Job description is vague with unrealistically high pay for the role
- - Employer cannot be verified in the Cyprus Department of Labour records or the Companies Register
Bank Phishing and SIM Swap Attacks
warningFraudulent SMS messages impersonate Bank of Cyprus, Hellenic Bank, or digital wallets (Revolut, Wise) asking users to "verify" account details or click a link. SIM swap attacks — where criminals convince mobile operators to transfer your number to their SIM — are increasingly used to bypass two-factor authentication on banking and Revolut accounts.
- - SMS from a non-official number claiming urgency about your bank account
- - Link in the message leads to a URL that is not the bank's official domain (.com.cy or official bank domain)
- - Message requests your OTP code, card number, or password
- - Sudden loss of mobile signal or inability to make calls (possible SIM swap in progress)
Reporting
Where to report: Cyprus Police Cybercrime Unit: cybercrime@police.gov.cy / +357 22808200 — report online at cyberalert.cy. General police emergency: 199. Consumer Protection Service (Ministry of Energy, Commerce and Industry): 1429 / consumer.gov.cy. Financial scams and unlicensed investment firms: CySEC at cysec.gov.cy. Immigration and civil registry: Civil Registry and Migration Department (CRMD) at crmd.moi.gov.cy.
Consumer helpline: 1429 (Cyprus Consumer Protection Service — consumer.gov.cy). EU cross-border disputes: European Consumer Centre Cyprus at ecccyprus.gov.cy. The 14-day withdrawal right applies to distance and off-premises contracts under the EU Consumer Rights Directive.