Being a victim of a digital scam from another country adds complexity: different jurisdictions, languages and platforms.
This guide, designed for people in Spain, explains what to do step by step, how to try to recover the money according payment method, where to report and what mechanisms European and international exist. Includes templates, checklist of pruebas, and FAQ real.
1) Immediate first steps
It works in minutes, not days.
- cut contact with the scammer and don't send any more money.
- Save evidence: emails, chats, ads, contracts, receipts, IBANs/wallets, URLs, profiles, and screenshots. Below, we explain how to certify evidence with "online witnesses."
- Notify your bank or card issuer y blocks payment methods. If there are charges Not allowed, the law obliges the supplier to refund immediately and, in general, your liability for losses before notice is limited to €50 (except fraud or gross negligence).
- Call 017 (INCIBE) for free and confidential help, or use their WhatsApp/Telegram channels. They'll guide you through reporting and protecting your accounts.
- Complaint: located on Civil Guard (Guardia Civil) (possible electronic complaint for “fraudulent card charges”, thefts and other cases) or National Police at the police station.
- Report on the platform involved (marketplace, social network, gateway): the DSA requires simple mechanisms for report illegal content or sellers and internal complaint systems.
- If there is identity theft or dissemination of sensitive data, go to the AEPD; for sexual or violent content without consent, use the Priority Channel for urgent withdrawal.
- Reports internationally if applicable: Europol (redirects to the reporting website of your country) and INTERPOL (always through your local police).
2) How to recover the money according to the payment method
2.1 Card (credit/debit)
- Unauthorized charges: your bank must return the amount "without delay" and at the latest by the end of the next business day after observing or being notified, unless there is reasonable suspicion of fraud. Your responsibility prior to notification is limited to €50 (except in cases of intent/gross negligence). Burden of proof: It is up to the provider to demonstrate authentication and correct execution. Act quickly and in writing.
- Dispute over undelivered goods/services: requests “chargeback” to your issuer as a reversal route; ECC-Net publishes practical guidance for the EU/EEA.
- If your bank refuses without a base, you can complain to your SAC and then, to Bank of Spain (complaints procedure).
2.2 Bank transfer (SEPA)
- General rule: an executed transfer is irrevocable; can request the recovery of funds to your bank, which will try to recall with the receiving bank. The speed it's key.
- If it was unauthorized (e.g., malware or phishing): the framework applies unauthorized operations (immediate reimbursement unless there is a well-founded suspicion of fraud/gross negligence).
2.3 Trading platforms/marketplaces/networks
- El DSA forces platforms to facilitate reports of illegal content/sales already cooperate with “trust markers"; uses its internal channels and keeps case numbers.
- From July 20, 2025 la ODR platform of the European Commission stopped operating; the EU redirects to mechanisms extrajudicial of the DSA (art. 21) already resources of ECC-Net.
2.4 Cryptocurrencies
- Payments on blockchain are usually irreversible. Contact immediately with the exchange (if it intervened), blocks accounts and complaint to facilitate traceability and possible preservation orders of evidence (international cooperation under the Budapest Convention and its Second Additional Protocol).
2.5 Investments and cryptoassets
- Always check in CNMV if the entity is authorized and check your list of warnings. If you suspect, don't invest y complaint.
3) How and where to report (Spain, EU and international)
- Spain – Main road
- Civil Guard (Guardia Civil): electronic complaint (requires Cl@ve/certificate) for several cases, including fraudulent card charges; or in person at the barracks.
- National Police: complaint in-person at the police station; check out the options on their website.
- 017 (INCIBE): guidance on reporting and protecting yourself.
- EU/EEA – Consumer Assistance
- If you bought from a company in another Member State (or Iceland/Norway), ECC-Net (European Consumer Centre) te informs and mediates for freeIn Spain, contact CEC-Spain.
- Europe – Police and cooperation
- Europol: portal that redirect to complaint website from your country; it does not collect complaints directly.
- INTERPOL: always you must report your local policeINTERPOL No. investigates direct complaints from individuals.
- Outside the EU
- econsumer.gov (FTC and agency network): international complaint cross-border fraud (accepts claims in multiple languages). Useful for sharing data with authorities in many countries.
- FBI IC3: admits complaints of Anyone, even non-US residents, about cybercrimes.
- Personal data / impersonation
- AEPD (y Priority Channel for sexual/violent content): urgent withdrawals and data protection claims.
4) Ways to resolve cross-border disputes in the EU
- ECC-Net: advises, mediates with the foreign merchant and guides you towards ADR (alternative resolution) where appropriate.
- DSA: In addition to reporting content, it provides out-of-court settlement bodies for disputes with platforms (Article 21). Use them when the internal channel fails to resolve the dispute.
- European Small Claims Procedure: for cross-border civil/commercial claims of up to €5.000 (excluding expenses), in all EU countries except Denmark. Mainly written procedure, with standardized forms (Form A).
5) Digital Evidence: How to Gather and Preserve Evidence
Objective: that the test be useful and acceptable.
- Catches from chats, emails, ads, profiles, receipts, logs and transaction numbers.
- Exports conversations (WhatsApp/Telegram/Signal) and emails complete with headers.
- Certify pages and content with “online witnesses” (time stamping/fingerprints). INCIBE explains its usefulness.
- Do not manipulate original files; works with copies.
- Guarda IBANs, crypto wallets, nicknames, domains and IPs if you know them.
- Create a timeline with dates and times.
6) Prevention and “red flags”
- Emergency pressure (“today or you lose the discount”), request for payment in crypto/vouchers, strange grammar, cloned domains.
- Verify companies: CNMV (investments), “unauthorized entities” of the Bank of Spain, consumer authority notices.
- Active 2FAuse unique passwords and check movements frequently.
- In Europe, platforms must offer visible channels to report illegal sellers or content (DSA). Use them.
7. Report: information checklist
- Personal data and contact.
- Timeline (dates/times).
- Platform/company and country.
- Screenshots and receipts (payment/IBAN/crypto).
- Economic impact.
- Possible witnesses and platform case number.
8) FAQs: questions you would ask yourself if you lived in Spain and were scammed from another country
Yes. Report in Spain activates international cooperation (Europol/INTERPOL) and allows measures to preserve electronic evidence. Interpol and Europol insist on report to the local police; they coordinate between countries
If the charge it was not authorized, your bank must refund immediately and your responsibility is limited to €50 before the notice, except for fraud or gross negligence. If it was authorized but you did not receive the product/service, asks chargeback; ECC-Net offers guidance.
Once executed, it cannot usually be cancelled; ask your bank recovery of funds as soon as possible. If the operation was unauthorized, applies the regime of reimbursement of the regulations of payments.
Use the first internal complaints system and the reporting channel (mandatory under the DSA). If it doesn't work, ECC-Net can mediate and guide you towards ADR or other ways.
No. The Commission Hill the platform ODR el July 20, 2025 and redirects to extrajudicial bodies of the DSA already resources of ECC-Net.
AEPD (claim) and Priority Channel for rapid removal of sexual/violent content. You can also report it to the police/civil guard.
Yes, for specific assumptions (e.g., fraudulent card charges). Requires Cl@ve or certificate; check the Electronic Office.
Yes: econsumer.gov centralizes cross-border complaints (global network coordinated by the FTC). If it involves the U.S. or services based there, IC3 accepts complaints from nonresidents.
Yes, through the European Small Claims Procedure (until €5.000, without charges) with forms standard and simplified procedure.
RRYP Global, cyberlegal lawyers.
