Cookie Settings

We use cookies to improve your experience. Essential and analytics cookies are automatically enabled. View cookie preferences

    Skip to main content
    Practical guide · Spain

    How to report a crypto scam in Spain

    Published: date not recorded · Reviewed 6 November 2026 · Editorial policy

    Filing a police report in Spain costs nothing, and you do not need a paid expert report (informe pericial) to do it. The police accept the raw evidence: transaction hashes, addresses, screenshots and bank statements. A report does not return money by itself, but exchanges and banks usually ask for one before they act, and a court needs it to order an account freeze. This guide covers the order of steps, what to collect and where to file.

    Check the scam address or link

    Six steps, from the first 30 minutes to the exchange

    01

    1. Isolate the wallet in the first 30 minutes

    If you signed an approval, revoke it on the same network. If you typed your recovery phrase anywhere, create a new wallet on a clean device and move what is left there. Do not keep sending gas to a wallet that is being emptied. If you paid by card or bank transfer to buy the crypto, call your bank now: a recent transfer can sometimes still be stopped.

    02

    2. Save the on-chain evidence

    For every transfer, note the transaction hash (TXID), network, date and time, amount and token, your address and the receiving address. Copy the explorer link: Etherscan, Tronscan, Polygonscan, Arbiscan or Basescan. Note also any contract address you interacted with. Write them in a plain text file in chronological order.

    03

    3. Save the off-chain evidence

    Take screenshots with the address bar visible, and save the website address. Export chats without editing them: in Telegram, also note the username and numeric user ID; in WhatsApp, the phone number. Keep emails with full headers. Download bank or card statements showing the payments to the exchange or seller.

    04

    4. Add a free technical summary

    Paste the receiving address, contract or scam link into our detector and download the PDF report. It records the risk signals found, such as known scam lists or contract permissions. It is an aid for the report, not an expert report and not proof of who is behind the address.

    05

    5. File the report with the police

    Policía Nacional: fill in the form on the Oficina Virtual de Denuncias, note the reference number and sign the report at the police station you chose within 72 hours; without that signature it has no legal validity. Guardia Civil: file online through its e-office or in person at any post. You can also go in person to any comisaría or to the duty court (juzgado de guardia). Bring your DNI or NIE, the printed evidence and a short chronological account. Always ask for a copy.

    06

    6. Send the report number to the exchange

    If the funds reached a centralized exchange, or are a stablecoin whose issuer can freeze it such as USDT or USDC, write to that platform's official support with the report copy, the hashes and the receiving address. Ask them to preserve and review the funds. Only official support channels: never a contact that wrote to you first.

    Got a link or message you are unsure about? Paste it into the free detector

    The second scam: recovery services

    • Victims are often contacted again by 'recovery agents', 'ethical hackers' or fake lawyers who promise to return the funds for an upfront fee. A blockchain transfer cannot be reversed by a third party for a fee. Do not pay.
    • No police force, court or exchange charges a fee to 'unfreeze' or release your funds. A message asking for one is part of the scam.
    • Never share your recovery phrase or private key with anyone helping you, including people claiming to be police or support.
    • Do not edit screenshots or chat exports before filing. Crop nothing out: the date, the address bar and the user ID matter.

    Already happened? First steps

    1. Send nothing more and sign nothing new.
    2. Save the transaction hash, the addresses and chat screenshots.
    3. Report it today through official channels; never pay 'recovery' services.
    Where to report crypto theft

    Questions people ask

    Do I need to hire a paid expert (perito) before going to the police?

    No. You can file with the raw evidence: hashes, addresses, screenshots and statements. An expert report may be useful later in court proceedings, but it is not a requirement to file.

    How much does it cost to file the report?

    Nothing. Filing a report with the Policía Nacional, the Guardia Civil or a court is free.

    Is an online report to the Policía Nacional enough?

    Not on its own. The Oficina Virtual de Denuncias gives you a reference number, and you must sign the report at the chosen station within 72 hours. Until then it has no legal validity.

    What if the scammers are outside Spain?

    File in Spain anyway. The police can request information from foreign platforms and work with other countries through international police cooperation channels such as Europol. Expect it to take longer.

    Can stolen tokens be frozen on an exchange?

    Sometimes. If the funds are still on a centralized exchange, or are a stablecoin whose issuer can freeze addresses, a fast report with exact hashes improves the chances. Funds already moved through private wallets or mixers are much harder to stop.

    Who can I call for free advice?

    INCIBE's cybersecurity helpline: 017, free and confidential, every day from 8:00 to 23:00. Also on WhatsApp (900 116 117) and Telegram (@INCIBE017). If a crime is happening right now, call 091 or 112.

    Keep reading

    Sources

    1. Oficina Virtual de Denuncias (Policía Nacional)
    2. Cómo denunciar si has sido víctima de un fraude o delito (INCIBE)
    3. FAQ Tu Ayuda en Ciberseguridad (017) (INCIBE)

    Got a suspicious message or link? Paste it into the free detector.

    Open detector

    Educational information only — not financial or legal advice.