Online Scams in Spain: Complete Guide 2026
Spain's National Cybersecurity Institute (INCIBE) managed over 118,000 cybersecurity incidents in 2025, with citizens and businesses reporting rising losses from phishing, online marketplace fraud, and banking scams. Spain's digital transformation — accelerated during the pandemic — has created new attack surfaces, and scammers target Spain-specific institutions and services.
Correos and Delivery Scams
Fake Correos (Spain's postal service) delivery notifications are the most common phishing attack. "Su paquete está pendiente de entrega" messages demand small fees and lead to credential-harvesting pages. SEUR, MRW, and GLS are also impersonated.
"Correos: Su paquete no pudo ser entregado. Pague la tasa de aduanas de €1.79 para proceder a la entrega: [phishing link]" — A common Correos phishing text. Correos does not request payment via SMS links.
Track packages only at correos.es. Customs fees, if applicable, are paid at the post office or through official Correos channels.
Think it might be a scam?
Paste it here for a free, instant verdict.
Free · No signup required · Cmd+Enter to scan
Agencia Tributaria (AEAT) Scams
Spain's tax authority is impersonated during the campaña de la renta (income tax filing season, April-June). Fake emails promise refunds ("La Agencia Tributaria le devolverá €324.50") and request bank details. Others threaten penalties for late filing.
The Agencia Tributaria processes refunds through your filed declaration. Access your tax account at agenciatributaria.es using Cl@ve, certificate, or DNI electrónico — never through emailed links.
Banking Scams
CaixaBank, BBVA, Santander, Sabadell, and Bankinter are all targets. Phishing messages about "tu cuenta ha sido bloqueada" (your account has been blocked) or "movimiento sospechoso detectado" (suspicious activity detected) direct victims to fake login pages. Bizum — Spain's ubiquitous instant payment system — is also exploited through fake payment requests and refund scams.
With Bizum scams, someone may send you a "request" instead of a "payment," hoping you'll approve what looks like incoming money but is actually an outgoing transfer. Always check whether you're receiving or sending before confirming any Bizum transaction.
Wallapop and Milanuncios Scams
Spain's popular marketplace platforms Wallapop and Milanuncios face fraud from fake buyers and sellers. Phishing links disguised as Wallapop's shipping payment system, overpayment scams, and fake escrow services are common. Keep transactions within the platform's official payment system for protection.
Reporting Scams in Spain
- INCIBE: 017 (free cybersecurity helpline) or incibe.es
- Policía Nacional: File a denuncia online or at a comisaría
- Guardia Civil (Grupo de Delitos Telemáticos): gdt.guardiacivil.es
- AEPD: For data protection violations — aepd.es
- OCU: Consumer organization — ocu.org
If you receive a suspicious message in Spain, check it with IsThisAScam for instant analysis of links and fraud patterns.
¿Mensaje sospechoso? Verifícalo gratis con IsThisAScam →