A Spanish user who responded to a Telegram message offering paid tasks for Druni received €5 for liking products. Then came the catch: to continue, he was told to invest a much larger sum.
Repeated calls from a mobile number start the scam. A woman's voice, clearly a recording, urges the recipient to join Telegram. The offer sounds straightforward: do simple online tasks, such as liking Druni products, and get paid right away. The first payment arrives through Bizum, making the scheme look legitimate and encouraging people to keep participating. The National Cybersecurity Institute (INCIBE) notes that small upfront payments are a common trick to build trust before asking for more. Spanish police have also warned about the 'Bizum inverso' scam, in which victims think they are receiving money but actually authorize outgoing transfers.
Brand names as bait
Scammers use well-known brands to gain trust. In this case, the caller claims to be a Druni manager but has no connection to the real company. Real product images and familiar names make the offer seem genuine and push people to act quickly. The user said the tone changed after the first payment: the supposed employer insisted on an investment to support "other investors," promising even bigger returns.
“I know them by now, and I'm the one who scams the scammer,” the user said, explaining how he recognized the scam and managed to get more money out than he put in. That outcome is rare. INCIBE has tracked this type of fraud since January 2024, warning that early payments are a classic way to build trust before demanding more. Spanish media and cybersecurity authorities have noted that these scams are part of a wider pattern involving instant payment apps and fake job offers.
How the trap tightens
After the first small payout, the scam changes tactics. The victim can't keep earning without investing more. The supposed employer stops paying for tasks, leaving larger payments as the only way to continue. INCIBE's analysis of similar cases shows that after initial gains, the rules change: higher investments are required, while the promised returns never arrive. The setup is designed to make victims feel in control, but the risk grows with each step.
Spanish media and police have consistently reported parallel fraud schemes involving messengers and fake job offers. They follow a familiar pattern: simple work, a small initial payout, then a demand for money or confirmation of a suspicious transaction. Publications from 2026 report that Bizum-related scams remain widespread and are regularly adapted to new scenarios, including peer-to-peer sales and messenger-based fraud.
The user who shared his story did not lose money, but said others lost impressive amounts after investing more. No amount is safe: any money sent is at risk. Angela García Valdés, a cybersecurity specialist at INCIBE, explained in August 2026 that these scams use small, real payments to build confidence before demanding larger transfers. An initial payment does not mean the offer is real.
Verifying offers and protecting yourself
Druni's official job listings appear only on its website, where candidates can submit CVs and find real openings. Trusting a phone call or Telegram message is risky. Even when the products shown are real, there is no guarantee the person contacting you works for the company. Scammers have also impersonated other brands, including Lidl, using fake websites and social media groups with made-up testimonials to attract victims.
INCIBE advises checking job offers independently and contacting companies through official channels. Never trust group chats or testimonials from strangers. If someone asks you to invest money to unlock tasks or withdraw earnings, stop immediately. Save all messages, usernames, links and payment receipts, then report the incident to your bank and the authorities. If you have shared card details, tell your bank so it can act quickly. Recovering lost money is not guaranteed, but reporting promptly improves your chances.
Even if you get more money than you sent, don't assume the scheme is safe. The first payout is meant to draw you in. For advice on suspicious messages or possible fraud, INCIBE's free and confidential helpline (017) offers guidance on protecting your accounts and avoiding further losses.
Scammers use trusted brands and instant payments to trick people. Easy money is tempting, but the aim is to take as much as possible before vanishing. The best defense is skepticism: check offers independently and never send money to anyone asking for it in the name of a job.
