Colombia Scams: Online, Phone & Investment Fraud Guide
Common scams in Colombia and how to report them to the Policía Nacional CAI Virtual, SIC, and your bank.
Emergency number: 123 — verify on official sources.
Last reviewed: 1 August 2026
Colombia faces widespread phone-based fraud, banking and card-cloning scams, online marketplace fraud, and investment schemes. The Policía Nacional operates the CAI Virtual portal, a 24-hour online reporting channel for cybercrime, and the Superintendencia de Industria y Comercio (SIC) handles consumer protection complaints.
Phone fraud runs on impersonation: calls from your 'bank' about suspicious charges harvest card numbers and OTPs, 'DIAN' demands settlement of invented tax debts, and extortion calls — including virtual kidnapping scripts — pressure immediate deposits before victims can verify family are safe. Digital wallet fraud has grown with Nequi and Daviplata adoption: fake 'wrong transfer' refund requests, phishing pages mimicking wallet logins, and social media 'promotions' harvesting credentials. WhatsApp account theft via stolen verification codes turns a hijacked account into a lever for pressuring the victim's contacts into urgent transfers. Marketplace fraud on Facebook and MercadoLibre features fake payment screenshots against sellers and non-delivery against buyers.
Visitors face specific risks that deserve blunt language: dating-app lures in Medellín and other cities have ended in druggings and robberies — meet first dates in public, watch your drink, and be sceptical of rapid escalation; the advisory pattern around scopolamine ('burundanga') druggings is real. Street-level, distraction teams work transport hubs, 'helpful' strangers at ATMs are card-swap crews, and unofficial taxis enable express robberies — use app-based transport. Investment fraud includes pyramid schemes with deep local history and modern crypto platforms. Report bank fraud to your bank immediately, file through CAI Virtual or a Fiscalía, and use 123 for emergencies.
Common scams
- Phone scams impersonating banks, tax authority (DIAN), or police
- Banking card cloning and ATM skimming
- Online marketplace non-delivery and overpayment fraud
- Investment and crypto scams
Tourist-specific scams
- Overcharging or unsafe unofficial taxis
- Distraction theft and fake 'good Samaritan' schemes
- ATM card-swapping in tourist areas
Online shopping scams
- Phishing and smishing impersonating banks or delivery services
- Fake online shops and social media marketplace scams
- Account takeover via credential phishing
Job scams
- Task scams via messaging apps
- Fake overseas or remote job offers requiring upfront fees
- Fake 'agencies' charging for visas and work permits abroad
Romance scams
- Dating-app and social media romance leading to financial requests or crypto investment grooming
- Dating-app lures used for druggings and robbery in major cities
- Hijacked WhatsApp accounts asking contacts for urgent transfers
Investment scams
- Pyramid and multi-level marketing investment scams
- Fake forex and crypto trading platforms
- Nequi/Daviplata 'promotion' phishing harvesting wallet credentials
How to report a scam here
- Contact your bank immediately to report and block fraudulent transactions
- Report cybercrime and online fraud to the CAI Virtual at caivirtual.policia.gov.co
- Report consumer protection issues to the SIC at sic.gov.co
- For emergencies, call 123
Local reporting & protection links
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Call your bank using the number on your card, never a number a caller gave you, and ask it to block the transaction. Colombian banks can attempt to freeze or reverse a fraudulent transfer most effectively within the first few hours, so speed matters more than a complete account of what happened. Tell them you were deceived into authorising the payment, ask for the receiving account to be reported, and keep the reference number. Report Nequi or Daviplata fraud in the wallet's official app channels as well, and never 'refund' a supposed wrong transfer on a stranger's instructions — verify in your own statement first. If your card was cloned or you shared a code, ask for the card to be cancelled and reissued, and change your banking and wallet credentials from another device. File through CAI Virtual or a Fiscalía so the bank claim has a case number, and escalate unresolved disputes to the Superintendencia Financiera, which oversees bank complaint handling.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
What is the CAI Virtual?
The CAI Virtual (Centro de Atención Inmediata Virtual) is the Policía Nacional de Colombia's online reporting portal for cybercrime, operating 24 hours a day. Victims can report digital fraud, phishing, and related crimes and receive guidance via the portal at caivirtual.policia.gov.co.
How do I avoid ATM card cloning in Colombia?
Use ATMs inside bank branches rather than standalone street machines, cover the keypad when entering your PIN, inspect the card slot for unusual attachments, and monitor your account immediately after any ATM use.
Does Colombia's tax authority DIAN contact people by phone demanding payment?
No. DIAN contacts taxpayers primarily in writing. Unsolicited calls claiming to be from DIAN and demanding immediate payment or threatening legal action are scams. Hang up and verify directly via the official DIAN website.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance