Skip to main content

Romania (RO)

Romania is the largest country in Southeastern Europe — a full Schengen EU member state blessed with the dramatic Carpathian mountains, medieval Saxon towns like Sibiu and Brasov, the legendary Transylvania region, a booming technology sector, and one of the lowest costs of living in the European Union.

Capital: Bucharest
Region: Europe
Language: Romanian
Currency: RON (lei)
Cost of living: Very affordable (index 38)
Emergency: 112
Premium

Scam Warnings

Common scams targeting expats in Romania.

The most common scams in Romania exploit newcomers' unfamiliarity with the bureaucracy, Bucharest's layout, and digital banking. DNSC (Directoratul Național de Securitate Cibernetică) recorded a 40%+ rise in digital fraud in Romania in 2024, driven predominantly by phishing and social engineering. Romania is an EU member in SEPA, and the EU Consumer Rights Directive applies — you have a 14-day withdrawal right (dreptul de retragere) for off-premises and online contracts. Golden rules: never hand cash to someone in the street, never transfer a rental deposit before viewing the property and verifying the extras de carte funciară, and never follow a link in an SMS or email that asks you to log in — always open your bank, ANAF, or ANPC portal directly in the browser.

Fake ANAF / Tax Authority Phishing

critical

You receive an SMS or email claiming to be from ANAF (Agenția Națională de Administrare Fiscală) saying you owe tax, are due a refund, or your SPV account will be blocked. A link leads to a convincing fake login page harvesting your credentials and card data. DNSC has flagged ANAF phishing as one of the most consistently reported fraud types in Romania.

How to spot it
  • - Any SMS or email from "ANAF" or "Ministerul Finanțelor" containing a link to pay or log in
  • - Sender domains like anaf-ro.com, anaf-romania.net, plata-anaf.com, or any domain other than anaf.ro
  • - Urgency language threatening account suspension, legal action, or sequestration
  • - Request for card details, CNP (Personal Numeric Code), or SPV password
What to do: Do not click the link. ANAF never sends payment links by SMS and never asks for card details by email. Check your tax status by opening anaf.ro directly in the browser and logging into the SPV portal. Forward phishing messages to antifrauda@anaf.ro and report card fraud to your bank immediately. Report to DNSC at dnsc.ro or call 1911.

Bank Phishing (BCR, BT, ING, Raiffeisen, BRD)

critical

An SMS or email pretending to be from your bank warns of a "suspicious login", "card blocked", or "unusual transaction" and provides a link to "reconfirm" your details. The page looks identical to the real bank site but captures credentials, OTP codes, and card data. DNSC has documented multiple waves of such campaigns targeting Romanian banks in 2024–2025.

How to spot it
  • - Any SMS or email from the bank containing a clickable link — real banks do not send login links by SMS
  • - Misspelled domains: bcr-secure.ro, bt-online.net, ing-login.com, raiffeisen-ro.com
  • - Requests for full card number, CVV, or the 3D Secure / SMS OTP code
  • - Urgent language demanding immediate action to avoid card cancellation
What to do: Never click. Type the bank URL directly (bcr.ro, bt.ro, ing.ro, raiffeisen.ro, brd.ro). Call the number printed on the back of your card. Report phishing to your bank (BCR: 0800 801 848; BT: 0800 802 228; ING: 031 406 2464; Raiffeisen: 021 306 3002; BRD: 0800 803 803) and file a report at politiaromana.ro. Report to DNSC at dnsc.ro or 1911.

Fake Apartment Listing / Rental Deposit Fraud

critical

Scammer copies genuine photos from a listing on OLX, Storia, or Imobiliare and reposts at below-market rent. The "owner" claims to be abroad and asks for a deposit by bank transfer, Western Union, or Revolut tag to "secure" the flat before a viewing. Bucharest and Cluj-Napoca are most affected given the active expat rental market.

How to spot it
  • - Rent 30–50% below comparable listings in the same neighbourhood
  • - Owner or agent refuses in-person viewing or live video call
  • - Request for deposit or first month's rent before signing a contract
  • - Urgency pressure ("there are many other interested applicants right now")
  • - Romanian with syntax errors or missing diacritics
What to do: Walk away. Never pay anything before viewing the property in person and verifying an extras de carte funciară (land registry extract, max 30 days old) proving the landlord is the registered owner. Report to Poliția at 112 or via politiaromana.ro and to the listing platform.

Unlicensed Airport Taxis at Otopeni (Henri Coandă OTP)

critical

Unlicensed drivers operating as "ARO", "Black Cab", or similar approach arrivals inside Henri Coandă airport terminal. Fares to central Bucharest run €80–€150 for an 18 km trip that should cost around 50–90 RON with a legitimate taxi or ride-app. Some drivers also detour to an ATM and pressure passengers to withdraw cash.

How to spot it
  • - Driver approaches you inside the terminal — not waiting at the official taxi rank
  • - No visible per-km tariff sticker in the rear passenger window (legally required)
  • - Vehicle colour or branding does not match airport-approved operators
  • - Driver refuses to start the meter or quotes a flat "package" price
What to do: Ignore anyone who approaches you in the arrivals hall. Use the official Otopeni taxi touchscreen terminals outside arrivals (Pelicanul Taxi, Cobălcescu, Speed Taxi are reliable), or book a Bolt, Uber, or Free Now from the app before leaving the terminal. Typical legitimate fare to central Bucharest: 50–90 RON.

OLX / Facebook Marketplace Fake Payment Links

critical

Scammer posing as a buyer on OLX or Facebook Marketplace sends a link for "OLX payment protection" or a fake Fan Courier delivery tracking page. The link harvests card credentials. Sellers are also tricked into sharing their CNP (national ID number) as "verification" for identity theft. This is among the most frequently reported online fraud types in Romania in 2024–2025.

How to spot it
  • - Buyer sends a payment or "escrow" link via WhatsApp or SMS rather than completing the OLX/marketplace checkout
  • - Link domain is not olx.ro or a recognised bank domain
  • - Buyer requests a copy of your buletin (ID card) or CNP for "identity verification"
  • - Any claim that OLX has an "escrow" or "buyer protection" requiring you to enter card details
What to do: Only accept payment through the platform's official checkout or cash on collection. Never click payment links sent via WhatsApp or SMS. Never share your CNP or ID card copy with a marketplace buyer. Report scam contacts to the OLX platform and to DNSC (dnsc.ro / 1911).

Pay-Upfront Job Offer / Fake Recruitment

warning

A recruiter (via WhatsApp, Telegram, or a copycat LinkedIn profile) offers a job in Romania or abroad — frequently in Germany, the UK, or the Gulf — but requires upfront payment for "training", "visa assistance", "work permit", or "accommodation deposit". The job never materialises.

How to spot it
  • - Any request to pay the employer or recruiter before starting work
  • - Contract sent as a JPG or PDF scan without an authentic company stamp or letterhead
  • - Contact only via WhatsApp or Telegram — never a corporate email
  • - Company has no verifiable presence in ONRC records (check listafirme.ro or termene.ro)
What to do: Stop contact. Legitimate employers never charge candidates. Verify any Romanian company at listafirme.ro or termene.ro (ONRC records are public). Report to Inspecția Muncii (inspectiamuncii.ro) and to Poliția via 112 or politiaromana.ro.

Door-to-Door "Cheaper Utility Contract"

warning

A salesperson claiming to represent "your current supplier" asks to see your latest bill and offers to switch you to a cheaper tariff. In reality they sign you up with a different provider on worse terms, with a long minimum contract and heavy exit fees. This is illegal under Romanian and EU consumer law when done without proper pre-contractual information.

How to spot it
  • - No appointment, no visible badge or company ID, no written quote with the supplier's name and registration number
  • - Pressure to sign immediately on a tablet or authorise via an SMS code
  • - Refusal to leave the contract text for you to review overnight
  • - Claim you must switch "urgently" before a price increase
What to do: Do not sign. Ask the person to leave. If you have already signed, EU law (implemented in Romania via OUG 34/2014) gives you 14 days to cancel (dreptul de retragere) for off-premises contracts — send written retragere by email with confirmare de primire post or registered mail. Report aggressive sales to ANPC (anpc.gov.ro / 021 9551) and to ANRE (anre.ro) for energy contracts.

Street Money Exchangers

warning

Individuals approach tourists near Piața Unirii, the Old Town (Lipscani), or Gara de Nord offering "better than bank" exchange rates. The notes given back may be counterfeit, short-counted, or withdrawn Romanian or euro denominations from the 1990s–2000s that are no longer legal tender.

How to spot it
  • - Anyone offering currency exchange on the street or from a parked car
  • - Rates that beat the BNR reference rate by more than 5%
  • - Refusal to conduct the exchange at a licensed casa de schimb valutar with posted rates
What to do: Never exchange money in the street — it is illegal for both parties under Romanian law. Use a licensed casa de schimb valutar (displayed BNR licence required), an ATM from a major bank (BCR, BT, Raiffeisen, BRD, ING), or simply pay by card. Report street-exchange operations to Poliția at 112.

Card Skimming at ATMs

warning

Skimmer devices and pinhole cameras or overlay keypads are mounted on standalone ATMs, particularly in tourist areas and transport hubs. Card data and PIN are captured and cloned for subsequent withdrawals. DNSC and Romanian Police regularly issue warnings about this method.

How to spot it
  • - Loose card slot, unusual bezel, or obviously added plastic parts on the ATM face
  • - Keypad feels spongy or sits higher than the surrounding surface
  • - Small lens or camera module visible facing the keypad from the ATM surround
What to do: Prefer ATMs inside bank lobbies during business hours. Cover the keypad with your free hand when entering the PIN. Use contactless, Apple Pay, or Google Pay where possible. If you notice anything suspicious, do not insert your card — report to the bank or 112. Dispute fraudulent transactions immediately (Romanian banks' dispute windows: typically 30–45 days).

Pickpocketing in Tourist Zones and Metro

warning

Organised groups target tourists in Bucharest's Old Town (Lipscani), Piața Universității, on the M2 metro line, and around Gara de Nord. Tactics include distraction with clipboards or maps, a staged "accident", or tight crowding on an otherwise empty metro carriage.

How to spot it
  • - Children or adults pushing a clipboard, newspaper, or map in your face without asking
  • - A staged spilled drink or dropped item that draws your attention away from your bag
  • - Unusual crowding on the metro when the carriage is otherwise empty
What to do: A firm "nu, mulțumesc" and keep moving. Carry a wallet in your front pocket or a zipped internal pocket. Use a crossbody bag worn in front on the metro. Report any theft at the nearest secție de poliție and obtain a document for your travel insurance.

Romance / Dating Scam

warning

A match on Tinder, Badoo, Bumble, or Facebook Dating develops a fast emotional relationship with someone claiming to live abroad or be travelling. Eventually they request money for a "medical emergency", customs release, plane ticket, or investment. Romanian expats abroad and foreigners in Romania are both targeted.

How to spot it
  • - Declarations of love within days, without ever meeting in person
  • - Technical issues or excuses every time a live video call is suggested
  • - Story involves the military, oil rigs, medical crises abroad, or customs holds
  • - Any money request, however small, regardless of the reason given
What to do: Stop contact. Do not send money. Report the profile to the platform and file a report at politiaromana.ro or with DIICOT (diicot.ro) if the amounts involved are significant.

Investment Fraud / Fake Crypto Platforms

warning

Scammers run Facebook and Instagram ads — often using AI-generated images of well-known Romanian personalities or politicians — to promote fake high-return investment or crypto trading platforms. ASF issued multiple warnings about unauthorised investment entities in 2024–2025, noting 82% of fraudulent entities are based in or claim to be based in third countries.

How to spot it
  • - Ad features a recognisable Romanian public figure endorsing an investment platform — likely fake or generated by AI
  • - Guaranteed annual returns of 15–40%+ with no risk
  • - Platform not listed on ASF's register of authorised entities (asfromania.ro)
  • - Investment requires transfer to a foreign account or cryptocurrency wallet
  • - Account manager calls you persistently to encourage additional deposits
What to do: Check ASF's investor alert page at asfromania.ro/en/a/19/investor-alerts before investing anything. If you have already invested, stop transferring money immediately and report to ASF (Tel Verde: 0800 825 627) and to Poliția at 112. Report the social media ad to the platform.

Reporting

Where to report: Emergency: 112 (police, ambulance, fire). Poliția Română — online fraud reports at politiaromana.ro. DNSC (National Directorate of Cybersecurity): dnsc.ro or call 1911 (cybercrime, phishing). ANPC consumer fraud: 021 9551 or anpc.gov.ro. ASF investment fraud: asfromania.ro, Tel Verde 0800 825 627. DIICOT (organised cybercrime): diicot.ro. For bank or card fraud, notify your bank immediately then report to Poliția.

Consumer helpline: ANPC (Autoritatea Națională pentru Protecția Consumatorilor): 021 9551 or anpc.gov.ro (Mon–Thu 08:00–16:30, Fri 08:00–14:00). ANRE for energy contracts: anre.ro / 021 327 8100. ANCOM for telecoms: ancom.ro / 0800 855 855 (free). ASF for financial / investment: 0800 825 627.