I haven’t been in Spain for long, and today I had a real scare that made me break out in a cold sweat. I have to post this to warn everyone! I almost fell for it; it feels like these bank scams here are everywhere and so hard to avoid.
Here’s what happened: this afternoon, I suddenly received an SMS on my phone. The sender’s name was displayed as Santander, and it appeared in the same conversation thread as the usual verification codes I get from the bank. The message said something like: “Your bank account has been temporarily suspended due to suspicious activity. Please click the following link immediately to verify your identity and restore your account.” My heart sank. I had just used my card online a couple of days ago, so my first thought was, ‘Has my card been skimmed?’
I honestly almost clicked the link, but thankfully I took a closer look. Even though the sender was ‘Santander,’ the domain in the link looked strange, not the official bank website santander.es. I immediately calmed down and opened the official Santander app directly. My account showed no issues at all, and my card was working fine. Looking back at that text message, it really gives me the chills! If I had clicked it and entered my account details and verification code, the consequences would have been unthinkable. This type of scam is known as “Smishing.” Scammers use technology to spoof the sender’s name to look like the bank, making you lower your guard.
I did some research online and found that this kind of scam is extremely common in Spain. Besides Santander, major banks like BBVA and CaixaBank are also heavily targeted. In addition to suspicious links in texts, there are other common scams to watch out for:
Summary of Common Scam Tactics
1. Bizum Transfer Scams
Be especially careful with this one! Many people encounter it when selling items on second-hand platforms like Wallapop. A scammer pretends to buy your item and says they’ll pay you via Bizum, but what they actually send is a “request for money.” If you aren’t paying attention to these bank scam SMS messages and think you’re accepting a payment, the moment you confirm, the money is transferred from your account to theirs! Remember: When someone is paying you, you don’t need to click anything or enter your password!
2. Email Phishing
This uses the same tactic as the text scams, but the fraudulent link is sent in an email. The email might be disguised as a notice from your bank, the tax agency (Hacienda), or even an electricity company, using excuses like “tax refund,” “billing error,” or “account upgrade” to trick you into clicking a link that leads to a fake login page designed to steal your information.
| Scam Type | Common Channel | Key Feature |
|---|
| Smishing | SMS | Spoofed sender, creates urgency, tricks you into clicking a link |
| Phishing | Email | Imitates official emails, uses bait like refunds or account issues |
| Bizum Scam | Instant Messaging / Second-hand Platforms | Disguises a ‘money request’ as a ‘payment’, exploiting user habits |
Everyone must remember a few key points: A bank will never ask you to click a link in an SMS or email to verify your identity or change your password. Anytime you need to enter personal banking information, always type the bank’s official website address manually or use the official app, which is the best way to avoid Spanish bank scams. If you receive a suspicious message, don’t hesitate—delete it immediately or call the bank’s official customer service line to confirm. I hope my experience can serve as a warning to everyone to protect your hard-earned money in Spain!
