Criminals are exploiting public trust in Spain’s Guardia Civil, spoofing the official phone number of the Madrid Command in a sophisticated telephone scam. Victims receive calls that appear to come directly from the police. Fraudsters introduce themselves as agents and claim the recipient has already fallen victim to a previous scam. They then offer to help recover lost funds, guiding victims through steps that lead to the disclosure of sensitive personal and banking information. This type of telephone fraud, known as vishing, uses social engineering to persuade people to share information. An official-looking number does not authenticate the caller or mean the agency’s telephone system has been compromised.
Journalist Cruz Morcillo has shared details of the deception, which continues beyond the initial call. Victims are often told to contact another phone number, where someone asks for more information under the pretense of securing their bank accounts. In reality, the data is used to gain access to their finances. Seeing the Guardia Civil’s own number can lower victims’ guard and make the fraudulent request seem legitimate. The Guardia Civil’s warning is direct: “No official will ever ask for passwords or confidential banking details over the phone.”
The method is not limited to Madrid. Similar incidents have been recorded in other regions of Spain, prompting law enforcement to issue nationwide warnings. Spain’s Instituto Nacional de Ciberseguridad (INCIBE), through INCIBE-CERT, provides guidance on authentication risks and protecting access credentials. Anyone asked for passwords or confidential banking details by a caller claiming to be an agent should end the call. Do not call back on a number supplied by the caller.
Authorities recommend checking bank accounts through trusted channels and reporting unusual activity. Contact the bank using a number on its official website or bank card, or through its app, not a number given during the call. Do not share passwords, banking data or verification codes with an unexpected caller. If you have already disclosed information, contact the bank promptly through an official channel to secure the account, then report the suspected fraud to law enforcement.
Spain has seen a rise in scams that exploit public trust in institutions. Fraudsters have also used official-looking phone numbers in other schemes, including those targeting law enforcement. In a related case, officers were attacked during anti-drug operations off the Andalusian coast, as detailed in coverage of a violent clash involving the Guardia Civil in Huelva. These incidents show how criminal networks adapt their tactics and why public vigilance matters.
Spain’s Guardia Civil is one of the country’s basic law enforcement agencies, with responsibilities ranging from rural policing to countering organized crime. Its reputation for reliability makes the institution’s identity attractive to fraudsters. As digital and phone-based scams grow more sophisticated, Spanish residents are urged to question unexpected requests for sensitive information, even when a call appears to come from a trusted source.
