Malta Scams: Tourist, Online & Investment Fraud Guide
A guide to scams in Malta, covering tourist fraud, online phishing and investment schemes with official reporting guidance.
Emergency number: 112 (emergency) — verify on official sources.
Last reviewed: 1 August 2026
Malta is a small EU island nation whose two signature industries — iGaming and crypto regulation — both attract their own fraud. The 'Blockchain Island' branding gave scammers a ready-made costume: fake platforms claim MFSA or VFA registration, clone genuinely licensed Maltese funds and brokers, and pitch crypto 'opportunities' wrapped in Maltese regulatory language to victims across Europe. Meanwhile the gaming sector draws account-takeover and payment fraud, plus fake iGaming job offers aimed at the young Europeans who move to Malta for the industry — some charging 'training' fees, others harvesting identity documents.
Residents ride out recurring smishing waves impersonating Bank of Valletta and HSBC Malta — 'your account is suspended', 'a new payee was added' — followed by fake bank calls that talk victims through 'securing' their money, and parcel smishing in MaltaPost's name. The housing squeeze makes rental fraud unusually painful: fake listings for Sliema, St Julian's and Gzira flats collect deposits from arrivals who booked from abroad. Tourists face unlicensed taxi touts, restaurant overcharging on the strips, and social-media boat-trip and event-ticket sellers who vanish with the money.
The Malta Police Cyber Crime Unit investigates digital fraud, and the MCCAA handles consumer protection. Verify any investment firm on the MFSA register before depositing, and when money has moved, the bank call comes before everything else.
Common scams
- Online gaming and gambling account fraud
- Phishing impersonating Bank of Valletta and HSBC Malta
- Investment fraud exploiting Malta's VFA crypto-friendly reputation
- Fake rental and accommodation listings targeting tourists and expats
Tourist-specific scams
- Unlicensed taxi and transfer touts at Malta International Airport
- Overpriced restaurant menus in Valletta and St Julian's tourist strips
- Fake festival or event tickets sold through social media
- Boat trip scams with non-existent services or poor safety standards
Online shopping scams
- Phishing targeting Bank of Valletta and HSBC Malta customers
- Fake e-commerce sites delivering counterfeit or no goods
- Smishing impersonating Malta Post or customs services
Job scams
- Fake iGaming and tech job offers requiring advance training fees
- Task scams via Telegram promising online income then demanding deposits
- Bogus recruitment harvesting identity documents from arriving workers
Romance scams
- Online relationships with expat or tourist-targeting scammers
- Pig-butchering schemes initiated through Malta dating-app connections
- Romance grooming that ends on fake 'Malta-regulated' crypto platforms
Investment scams
- Unregulated crypto platforms falsely claiming MFSA or VFA registration
- Clone firm fraud impersonating MFSA-licensed brokers and funds
- 'Recovery' services charging upfront fees to reclaim earlier crypto losses
How to report a scam here
- Report cybercrime to the Malta Police Cyber Crime Unit on +356 2294 2231 or via pulizija.gov.mt
- File a general police report online or at any Malta Police district station
- Report consumer fraud to the MCCAA Office for Consumer Affairs at mccaa.org.mt
- Contact your bank immediately to freeze accounts and initiate a dispute
Local reporting & protection links
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Speak to your bank as soon as you can, through the number on your card, the official app or a branch, never a link or number from the message that reached you. Say you were deceived into authorising the payment, ask for it to be stopped or recalled and the receiving account reported, and keep the case reference number — instant SEPA transfers settle in seconds, so speed decides the outcome. Card-funded deposits onto fake platforms should be disputed as chargebacks, itemised payment by payment. File a parallel report with the Malta Police Cyber Crime Unit and pass that reference to the bank; investment fraud involving claimed MFSA or VFA status should also be reported to the MFSA so it can publish a warning. If codes or card details were shared, ask about a replacement card and fresh login credentials, and expect 'recovery' cold-calls to follow — they are the same fraud's second act.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
Is Malta a hotspot for crypto scams?
Malta gained a reputation as 'Blockchain Island' for its early crypto regulation, which scammers exploit by falsely claiming MFSA or VFA registration. Always verify any crypto firm on the MFSA register at mfsa.mt before investing. Legitimate firms will never solicit unsolicited investment.
How do rental scams target new arrivals in Malta?
Fake listings for flats in Sliema, St Julian's and Gzira — often copied from genuine adverts at a slightly lower price — collect deposits from people booking before they arrive. Never pay a deposit without a live video viewing, verify the landlord's identity against the lease, and prefer payment methods with recourse over instant transfers.
What should I check before an iGaming job offer in Malta?
Confirm the company exists on the Malta Business Registry and holds an MGA licence if it claims one, and treat any employer demanding 'training', 'equipment' or 'relocation' fees as fraudulent. Legitimate gaming companies in Malta recruit heavily but never charge candidates.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance