Spain (ES)
Spain is a parliamentary constitutional monarchy of 17 autonomous communities stretching from the sun-scorched Andalusian coast to the Pyrenean peaks, renowned for its passionate flamenco and football culture, world-famous gastronomy from tapas to Michelin-starred restaurants, 300+ days of sunshine on the Costa del Sol and the Balearic Islands, and a relaxed Mediterranean pace of life that consistently ranks it among Europe's most desirable destinations for expats.
Scam Warnings
Common scams targeting expats in Spain.
Spain is an EU/SEPA member — EU consumer protections apply, including the 14-day derecho de desistimiento (withdrawal right) under TRLGDCU for remotely contracted services. Scams targeting expats exploit language barriers and unfamiliarity with Spanish bureaucracy. Tourists and new arrivals are prime targets in Madrid (Sol, Gran Vía), Barcelona (Las Ramblas, metro L3), Málaga, and Sevilla. Spain's extreme housing crisis makes rental fraud in Madrid and Barcelona especially prevalent — hundreds of cases are reported annually. INCIBE's 017 helpline managed 142,767 cybersecurity enquiries in 2025 (+44.9% on 2024). Key rule: never transfer money before a signed contract and in-person viewing; never share DNI/NIE + IBAN via email; verify any official notice by calling the authority directly on their official website number. Report cyberscams to INCIBE 017; investment fraud to CNMV (cnmv.es); consumer disputes to OCU (ocu.org) or your local OMIC.
Fake piso on Idealista / Fotocasa / Badi
criticalScammer copies real listing photos, offers the piso 30–50% below market rate, claims to be an "expat working abroad" or handling "a family inheritance." Deposit demanded via Bizum, Western Union, crypto, or PayPal Friends before any viewing — sometimes via a fake "property management company" supposedly holding keys. Barcelona alone sees hundreds of cases annually; Madrid's rental crisis makes it equally vulnerable. A 2025 case saw one scammer defraud 40+ victims of a single Barcelona apartment advertised on Badi.
- - Rent 30–50% below comparable listings in that zone
- - Landlord refuses in-person viewing, offers only "video tour" or keys "via courier"
- - Urgency: "10 applicants ready to pay today"
- - Non-Spanish bank account for deposit (NL, LT, MT, HK IBANs)
- - Contract uses wrong terminology (e.g. "bail" instead of "fianza") or lacks LAU clause references
- - Refusal to meet at the piso or at a notario
Phishing SMS / email from "Correos," "Agencia Tributaria (AEAT)," or "DGT"
warningSMS claims "Tu paquete está retenido en aduanas, paga 1.95€" or "Hacienda te debe un reembolso, haz clic para validar" or "Multa DGT impagada — paga en 48h." Link leads to a fake payment page stealing card data and triggering subscription traps. INCIBE reported phishing, vishing and smishing as the single most common cybercrime category in Spain in 2025 (28% of all 017 helpline calls).
- - Any SMS/email asking for card details, IBAN or login via a link
- - Sender mobile number starting with 6XX (Hacienda/Correos never contact by SMS from personal mobiles)
- - Misspelled domains (correos-es.com, hacienda-reembolso.org, dgtmultas.es)
- - Correos never charges customs by SMS for intra-EU packages; AEAT never emails a refund link
- - Urgent threats of fines or parcel return within 24–48h
Bizum manipulation ("solicitud" disguised as payment confirmation)
warningSeller on Wallapop or Milanuncios asks for Bizum payment. Instead of sending a payment to you, they send you a Bizum request (solicitud de envío) disguised as a "payment confirmation." The victim accepts thinking they are receiving money, but actually sends money. A classic reversal-of-roles social engineering attack.
- - Bizum notification reads "¿Quieres enviar X€ a...?" — that is an outgoing payment, not incoming
- - Seller pressures you to approve quickly ("antes de que expire")
- - Seller insists on Bizum rather than in-person cash or bank transfer
- - Notification does not clearly say "vas a recibir" (you are receiving)
Fake plainclothes "Policía Nacional" ID check on the street
criticalTwo individuals in civilian clothes stop you in Madrid Sol / Barcelona Ramblas tourist zones, claiming to be plainclothes officers conducting "counterfeit-bill" or "drug-related ID" checks. They ask to inspect your wallet and cards — palming cash or cloning card details during the check.
- - Plainclothes individuals claiming to be Police without immediately presenting a placa (badge)
- - Asking to count your cash or examine credit cards
- - Real Policía Nacional / Guardia Civil / Policía Local wear uniform on routine street checks; plainclothes operations identify immediately with official credentials
- - Request to step to a private location away from the crowd
Fake gas / electricity inspector ("Endesa," "Iberdrola," "Naturgy")
warningPerson in unofficial or homemade uniform claims to be a utility company inspector and asks to see your bill and "verify" your meter — actually photographing your account number and signature to transfer you to a new provider on worse terms, or forging your signature on a new contract.
- - No appointment was previously confirmed via the utility's official phone number
- - Pressure to sign on a tablet or paper at the door
- - Refuses to allow you to call the utility to verify their identity
- - Uniform has no placa identificativa with company name and employee ID
Estafa del abrazo / pañuelo (hug or stain scam)
criticalClassic Barcelona Ramblas / Madrid Sol pickpocket setup. A stranger throws a sauce stain, ketchup, or "bird dropping" on your jacket, then helpfully offers to clean it — pickpocketing wallet and phone during the close contact. Variants: person "accidentally" hugs you in a crowd; woman pretends to faint nearby to draw attention.
- - Sudden stain on your clothes with a nearby "helpful" stranger
- - Close physical contact in crowded tourist zones
- - Distractions involving maps, petition-signing, or surveys
- - Pairs or trios working together
Timeshare resale scam (Costa del Sol, Tenerife, Mallorca)
warningVictims who previously bought a timeshare are cold-called by "agents" offering to resell it for a large profit, but require upfront "legal fees," "commission deposits," or "IBI tax clearance" payments of €2,000–15,000. No resale ever occurs. Spain's timeshare scam industry is among Europe's most persistent, particularly targeting British and German expats on the costas.
- - Unsolicited contact about reselling your timeshare at above-market price
- - Upfront fee required before any resale proceeds
- - Company has no verifiable Spanish registry entry (Registro Mercantil)
- - Claims a buyer is "ready" but paperwork holds things up
- - Pressure to decide within 24–48 hours
Fake employment agency targeting foreigners
warningAgencies advertise job placements in Spain for foreign workers, collecting large "registration," "placement," or "NIE processing" fees before disappearing or providing no real employment. Particularly targets non-EU expats unfamiliar with NIE procedures and labour regulations.
- - Agency requires fees before an employment contract is signed
- - No verifiable physical address in Spain
- - Cannot be found in the SISPE (National Employment System) or official SEPE lists
- - Offers jobs with unusually high salaries for the sector
- - Job offer arrived unsolicited via Instagram, WhatsApp, or LinkedIn
CNMV-warned unauthorised investment platforms / crypto brokers
criticalFake brokers and unlicensed trading platforms target expats with promises of high returns from forex, CFDs, or crypto. The CNMV regularly publishes lists of unauthorised entities (entidades no autorizadas). Victims are often shown fake profit dashboards; withdrawals are blocked by demands for "tax payments" or "verification fees."
- - Platform is not listed as authorised on cnmv.es
- - Contact initiated online — social media, dating apps, or unsolicited cold call
- - Guaranteed returns of 5–50% monthly
- - Any withdrawal triggers additional fees or "compliance holds"
- - Pressure to invest larger sums before "the window closes"
ATM / card skimming and Dynamic Currency Conversion (DCC) overcharge
warningSkimming devices on standalone Euronet and other third-party ATMs in tourist zones clone card data and capture PINs. Separately, many tourist-area ATMs push Dynamic Currency Conversion (DCC), showing prices in your home currency at 6–12% markup — declining DCC and paying in EUR always saves money.
- - ATM is standalone in the street (not inside or attached to a bank branch)
- - Card slot or keypad feels loose or has an unusual overlay
- - Screen offers "pay/withdraw in your home currency" — this is DCC, always decline it
- - Withdrawal fee displayed exceeds €3
Reporting
Where to report: Emergencies: 112. Policía Nacional: 091 (non-emergency, cybercrime). Guardia Civil: 062. Online denuncia (24/7, multilingual): policia.es/_es/denuncias.php. INCIBE (cybersecurity, phishing): 017 (free) | incibe.es. CNMV (investment and financial fraud): 900 535 015 | cnmv.es. OCU (consumer rights): ocu.org. OMIC (local consumer office): via your Ayuntamiento.
Consumer helpline: INCIBE: 017 (free, cybersecurity helpline — available daily) | incibe.es. OCU: 900 055 105 (members) | ocu.org. FACUA: 954 90 90 90 | facua.org. OMIC: via your local Ayuntamiento (free). CNMV (investment fraud): cnmv.es. Policía Nacional (online denuncia): sede.policia.gob.es.