What to do if you fall victim to an online scam: a practical guide
What to do if you've been the victim of an online scam
Cyber scams are becoming increasingly common due to the growing professionalism of criminals and the use of new technologies such as artificial intelligence. Find out how to recognise an online scam, what to do if you've been a victim and how to prevent them.

It is important to act quickly when faced with an online scam to minimise the damage.
In Spain, cybercrime is on the rise. The latest report from NTT Data indicates that cases of phishing, digital extortion and data breaches rose by 45% in the first half of 2026 compared with the second half of 2025, driven by the increasing professionalism of criminals and the use of tools such as artificial intelligence. Nine out of 10 cybercrimes committed in the country are internet frauds.
Online fraud involves deceiving users to obtain an illegitimate financial gain. In many cases, this manipulation is convincing because the attackers already have access to the victims' real personal details. This makes fraudulent communications – such as fake calls or messages purporting to be from Iberdrola España requesting digital signatures, urgent payments or account confirmations – appear more credible.
Below we analyse some of the most common cyber-scam techniques and the warning signs that can help you spot them, prevent them and know how to act if you fall victim to an online scam.
Types of online scams using the name of Iberdrola España
Identity theft is one of the techniques most commonly used by cybercriminals to commit online fraud. Attackers pose as a legitimate and trusted organisation, such as Iberdrola España, to try to gain access to bank accounts or obtain confidential information. Depending on the communication channel used these cyber scams can take various forms, such as phishing, smishing and vishing.
Online fraud via email (phishing): warning signs in the name of Iberdrola España
Phishing is a manipulation technique based on identity theft used to obtain personal or banking information via email. Cybercriminals seek to gain your trust through fake emails so that you share private data or download malicious files.
You can identify a phishing scam impersonating Iberdrola España by looking out for these warning signs:
- Requests for urgent payments accompanied by threats of supply cuts without prior notice.
- A lack of transparency regarding the sender, the absence of official identifying features (such as logos) and email addresses not belonging to Iberdrola España. Although the absence of official logos is a cause for suspicion, many attackers include them to make the email appear more credible.
- Links that do not correspond to the Iberdrola España domain or unusual, unexpected attachments.
SMS cyber-scams (smishing): how to spot a scam impersonating Iberdrola España
When scammers carry out the scam via an SMS or instant messaging service it is a case of smishing. In this type of fraud, the message usually includes a link designed to direct the user to a fraudulent webpage, obtain data or trigger the download of malicious content.
To conceal the destination website attackers often add shortened or compressed links or include them via a QR code.
If in doubt avoid clicking on the suspicious link and go directly to the official website. Also check that the payment platforms are secure before carrying out any transaction. If you need further information, you can contact Iberdrola España.
Telephone scam (vishing): what Iberdrola España will never ask for over the phone
Vishing is a telephone scam that usually unfolds in several stages. In some cases, attackers make an initial contact with the aim of obtaining account login details followed by a second call to obtain the verification code required to complete a transaction.
Please remember that Iberdrola España will never ask for personal details such as passwords, bank details or one-off verification codes. Although we may contact you via the mobile app, email or telephone to send you certain service-related communications, we will always do so through our official channels.
How to protect yourself from online scams: digital security tips
Follow these tips to avoid falling victim to an online scam:

Secure passwords

Two-factor authentication
Add a second layer of verification to make it harder for anyone to access your accounts, even if they manage to get hold of your password.

Be wary of urgency

Check the sender and any links

Don't share sensitive information

Contact your company
What to do if you're the victim of an online scam: immediate steps to take
If you suspect you have been the victim of an online scam, it is best to act quickly to minimise the potential consequences. If you have provided bank details, made payments or noticed charges you do not recognise, contact your bank to report what has happened and discuss measures such as blocking or cancelling your cards.
If you have any queries or concerns about digital security, the National Cybersecurity Institute (INCIBE) has a helpline in Spain to assist you. It can be reached by dialling 017. This organisation also offers other support channels:
- WhatsApp: +34-900-116-117
- Telegram: @INCIBE017
- Email: incidencias@incibe-cert.es
- Online form
How to report a cyber scam in Spain: National Police and Civil Guard
If you have been the victim of an online scam, it is important to report it to the relevant authorities, such as the Police or the Civil Guard. You can also call 062 or fill in the online reporting form.
To help with the investigation, gather as much evidence as possible relating to the fraud:
- Screenshots of conversations on WhatsApp, email, text messages or social media showing the dates and contact details.
- Payment receipts for bank transfers or money transfers made via services such as Bizum or PayPal.
- Fraudulent posts or websites.
- Subsequent attempts by the fraudsters to contact you.
How to contact Iberdrola España if you have been the victim of an online scam carried out in its name
As well as contacting the authorities, you can get in touch with Iberdrola España to report a possible case of identity theft. This will enable us to investigate what has happened and take the necessary action.
If you have any queries about a notification or believe you have been the victim of an online scam carried out in the name of Iberdrola España, please use our official channels:
Customer service
- (+34) 900 225 235
- (+34) 94 646 01 25
- (+34) 91 919 52 73
Message us on WhatsApp
(+34) 601 225 235

Discover more articles on cybersecurity
Explore key topics in greater depth and stay up to date with the latest information on cybersecurity in Spain. Read our featured content.


Digital fraud: what it is, the most common types and how to protect yourself in Spain



