Stay Safe from Scams and Fraud
What to watch out for, how to protect yourself, and what to do if it happens to you
Scams are becoming more common, and scammers are getting better at tricking people. Anyone can be a target, it is not a sign of weakness or foolishness. This guide will help you spot the warning signs, protect yourself, and know what to do if something goes wrong.
This guide is for information only. If you have been the victim of fraud, contact your bank and the police immediately.
You do not have to give anyone your PIN, password, or bank details, ever. No bank, government office, or legitimate company will ever ask for these over the phone, by text, or by email.
What is a scam?
A scam is when someone tries to trick you into giving them money or personal information. They may pretend to be from a bank, the government, a utility company, a care provider, or even a friend or family member.
Scammers contact people by phone call, text message, email, letter, or in person. They are often very convincing, so do not feel embarrassed if you are unsure.
Following a data breach, (which happens when data is stolen by a cybercriminal breaking into a company’s system and stealing private information) scammers may also have access to some genuine personal details. This can make their approach feel more convincing than a random cold call, but it does not mean the caller or the message is legitimate.
Common types of scams
Phone call scams
You receive a call from someone claiming to be from your bank, a tax authority, a pension provider or the police. They say there is a problem with your account or that you owe money.
Warning signs
- They ask for your PIN, password, or bank card details
- They say you must pay urgently or something bad will happen
- They ask you to move money to a “safe account”
- They tell you not to tell anyone
- They claim your details need “re-verifying” because of a data breach
- They already seem to know some personal details about you, including health, mobility, or care information
Pensions and benefits scams
Many members of our community receive a UK State Pension, Disability Living Allowance (DLA), Attendance Allowance (AA), or other benefits. It is common for scammers to send messages claiming to be from the DWP, HMRC, or a pension provider, saying you need to “re-verify” your details, especially after news of a data breach. The DWP, HMRC, and pension providers will never ask you to confirm bank details or personal information by email, text, or unexpected phone call. If you receive a call that you are unsure is legitimate, put down the phone and contact the organisation directly using the number on your official paperwork.
Calls exploiting health or accessibility information
Be especially cautious of unsolicited calls or messages offering mobility aids, medical alert devices, or home care services, or calls claiming to be from a health insurer asking you to “confirm” personal or payment details. A caller who already seems to know about a mobility need or health condition can feel more trustworthy, but this knowledge does not mean they are genuine. Treat these calls exactly as you would a suspicious bank call.
Email and text message scams (phishing)
“Phishing” means a fake email or text that looks real, from your bank, Amazon, Correos, or a friend. It asks you to click a link and enter your details on a fake website.
Warning signs
- Spelling mistakes or strange wording
- The email address looks odd (e.g. bank@secure-update-info.com)
- You are asked to “verify” your account urgently
- There is a link you did not expect
Tech support scams
A message pops up saying your computer has a virus, or someone calls claiming to be from Microsoft or Apple. They ask to take control of your computer remotely.
Warning signs
- You did not contact them, they contacted you
- They want remote access to your computer
- They ask for payment in vouchers or bank transfer
Romance scams
Someone contacts you online, seems kind and interested, then after some time asks for money, often claiming to be stuck abroad or facing an emergency.
Warning signs
- They never want to meet in person
- They say they are in love very quickly
- They ask for money for travel, medical bills, or an emergency
Door-to-door scams
Someone knocks offering roofing, gardening, or cleaning. They do poor work, charge very high prices, or take money and never return. You never have to open your door to anyone that you don’t know.
How to spot a scam
Scammers use the same tricks. Recognising these gives you time to stop and think.
What they say or do | What it really means |
“You must act now or lose your money” | Urgency stops you thinking clearly |
“Do not tell your family about this” | Isolation stops others warning you |
“You have won a prize, just pay the fee” | If you didn’t enter, you can’t have won |
“I’m from your bank, there is suspicious activity” | Real banks never ask for your PIN |
“We need remote access to fix your computer” | Legitimate companies don’t cold-call about your device |
“Pay in gift vouchers or cryptocurrency” | No government office or real business asks for this |
“We already have some of your details on file” | A scammer having partial, genuine details doesn’t make the rest of the call genuine. |
How to protect yourself
On the phone
- Hang up if you feel pressured. You can always call back on an official number.
- Never give your PIN, password, or full bank details over the phone.
- If your “bank” calls, hang up and call the number on the back of your card.
- It is always okay to say: “I need to think about this. I will call you back.”
Online and by email
- Do not click links in unexpected emails or texts.
- Type website addresses yourself, do not follow links.
- Check the sender’s email address carefully. Genuine companies use their own domain.
- Use strong passwords and never share them with anyone.
- If you have an online account or portal login with a company or service provider consider updating the password, and any other account where you’ve reused the same password.
- If in doubt, delete it.
At your door
- You do not have to open the door.
- Never pay for work in advance or in cash before it is finished.
- Ask for written quotes and take time to think.
- Check with a trusted friend or neighbour before agreeing to anything.
Protecting your bank account
- Check your statements regularly, at least once a week, via online banking or paper statements.
- Watch for “micro-transactions”: scammers often test stolen bank details with tiny purchases first (e.g. €0.50 or €1.99). Small, unfamiliar charges are worth investigating.
- Set up bank alerts. If you use mobile banking, ask your bank to enable push notifications or SMS alerts for outgoing payments.
Protecting your identity documents (NIE, TIE, Passport)
Your NIE, TIE, or passport number is used in Spain to identify you for official services. If a fraudster obtains these, they may attempt identity theft, such as opening a mobile phone contract, applying for a loan, or arranging credit in your name.
- Never share images of ID documents online, including over unencrypted channels like social media or unverified messaging apps.
- Monitor official post closely for unexpected letters from financing companies, mobile phone operators, or debt collection agencies.
- Watch for unexpected mobile phone bills or contract confirmations. Opening a phone contract with a stolen NIE or passport number is a common form of identity fraud in Spain.
- Notice any unexpected changes to your post, including post that stops arriving as expected, which can be a sign of mail redirection fraud.
The three golden rules
Stop — take your time. Scammers want you to act without thinking.
Think — does this seem too good to be true? Trust your instincts.
Call — check with someone you trust before doing anything.
If you think you have been scammed
Do not panic, and do not be embarrassed. Act quickly, the sooner you act, the better chance you have of limiting the damage.
- Contact your bank immediately. Call the number on the back of your card. Tell them what happened. They can stop payments and may be able to recover money.
- Report it to the police.
- In Spain: 112, Policía Nacional on 091, or report online fraud to the Guardia Civil here. If money has been fraudulently taken, banks typically require an official police report (denuncia) before processing a refund, so this step matters even if it feels like extra effort.
- If you don’t speak Spanish, you can use the SATE (Servicio de Atención al Turista Extranjero) service, which provides English translation support to help you file a police report at your nearest Policía Nacional or Guardia Civil station. Bring your original ID.
- In the UK: Action Fraud at actionfraud.police.uk or 0300 123 2040.
- Keep full documentation. Retain a copy of the stamped police report (denuncia), along with transaction dates and amounts, to submit to your bank’s fraud department, or to prove you were a victim of identity fraud to banks or utilities.
- Tell someone you trust. By mentioning it to a trusted family member or friend so someone else is aware, they can help watch for warning signs alongside you.
How to safely check any message you receive
If you receive a phone call, email, or letter that feels unexpected or makes you uncomfortable from someone saying they are from a trusted organisation like Age in Spain, or any other organisation:
- Stop. Do not click any links, download attachments, or disclose personal details over the phone.
- Disconnect. If you’re on the phone, hang up. Scammers sometimes try to keep the line open, so wait 5 minutes before making another call. You could then ring a friend to make sure your line has cleared.
- Verify directly. Look up the official contact details for the organisation or your bank independently, via official website information or account statements you have previously received that you know to be legitimate. Do not use the contact number or link provided inside the suspicious message.
Get help
Age in Spain is here to support English speakers living in Spain. If you are worried about a scam or need advice, please get in touch.
Spain’s free cybersecurity helpline: Call 017
017 is the official, free, and confidential cybersecurity helpline operated by INCIBE (Spain’s National Cybersecurity Institute). It’s free from any landline or mobile within Spain [Operating hours 8:00am–11:00pm, 365 days a year.] Their team will guide you step-by-step if you have accidentally clicked a suspicious link, entered details on an unfamiliar website, or received fraudulent calls.