Mexico Scams: Phone, Banking & Online Fraud Guide
Common scams in Mexico and how to report to Condusef, the Policía Cibernética, and your bank.
Emergency number: 911 — verify on official sources.
Last reviewed: 1 August 2026
Mexico sees widespread phone-based fraud, banking and card cloning scams, online marketplace fraud, and investment scams. Condusef (the national financial consumer protection authority) operates a financial fraud reporting portal and publishes a 'No Caigas' list of known fraudulent websites and phone numbers, and cybercrime can be reported to the Policía Cibernética.
Phone extortion is a Mexican specialty that everyone with a local number eventually encounters. Virtual kidnapping calls ('secuestro virtual') claim a family member is being held and demand immediate deposits, exploiting panic before the victim can verify anyone is actually missing; other extortion scripts pose as cartel members or police. The defence is the same: hang up, don't confirm names or details, and call your relative directly. Bank impersonation follows the regional pattern — a call about 'suspicious charges' harvests card numbers and OTPs, or persuades victims to 'protect' funds via SPEI transfer to a fraudster's account. Card cloning and ATM skimming persist, especially at standalone machines in tourist zones, and some 'helpful strangers' at ATMs are running card-swap teams.
Online, marketplace fraud runs through social media and platforms like Mercado Libre — non-delivery, fake payment confirmations, and off-platform 'deposit to OXXO' requests are the standard tricks. Timeshare fraud deserves special mention for foreigners: high-pressure resort presentations selling near-worthless contracts, and a secondary scam where fake brokers offer to resell your existing timeshare for upfront 'taxes' and 'fees'. Investment fraud spans pyramid schemes ('flor de la abundancia'), fake forex and crypto platforms, and unregistered lenders requiring advance deposits. Report financial fraud to Condusef and your bank immediately, cybercrime to the Policía Cibernética, and urgent extortion attempts to 911.
Common scams
- Phone scams impersonating banks or government agencies (IMSS, SAT)
- Banking card cloning and ATM skimming
- Online marketplace non-delivery
- Investment and crypto fraud
Tourist-specific scams
- Overcharging or unsafe unofficial taxis
- Fake tour operators and excursion sellers
- ATM card-swapping at tourist areas
Online shopping scams
- Phishing and smishing impersonating banks or delivery services
- Fake online shops
- Social media marketplace scams
Job scams
- Task scams via messaging apps
- Fake job offers requiring upfront payments or 'guarantees'
- Recruitment ads collecting personal data for identity fraud
Romance scams
- Dating-app and social media romance leading to financial requests
- Long-distance partners with escalating 'emergency' deposits
- Romance grooming pivoting to crypto 'investment' platforms
Investment scams
- Fake forex and crypto trading platforms
- Pyramid and multi-level marketing fraud ('flor de la abundancia')
- Timeshare resale scams charging upfront 'taxes' and 'fees'
How to report a scam here
- Contact your bank's fraud line immediately to report and block transactions
- Report financial fraud to Condusef at condusef.gob.mx
- Report cybercrime to the Policía Cibernética
- For urgent crimes, call 911
Local reporting & protection links
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Contact your bank immediately using the number on the back of your card; Mexican banks can attempt to freeze or reverse fraudulent SPEI transfers most effectively within the first few hours, before funds are withdrawn or layered onward. Tell the fraud team you were deceived into authorising the payment, ask for the receiving account to be reported, and keep the reference number you are given. If the bank's response is unsatisfactory, escalate the dispute through Condusef, which mediates between consumers and financial institutions and can pressure banks over cloned-card and unauthorised-transaction claims. Never share banking credentials, OTPs, or card numbers with an unsolicited caller — banks do not call to 'verify' full card data — and if you already have, ask for the card to be blocked and reissued and change your access details. For card cloning, request the transaction record ('aclaración') in writing so you have documentation for the chargeback.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
What is the Condusef 'No Caigas' portal?
No Caigas is a Condusef tool where you can search and report fraudulent websites, phone numbers, and social media profiles used by financial fraudsters in Mexico.
How do I avoid ATM skimming in Mexico?
Use ATMs inside banks or hotels rather than standalone machines, cover the keypad when entering your PIN, check for loose or unusual fittings on the card slot, and monitor your account immediately after any ATM use.
What should I do if I get a virtual kidnapping call?
Stay calm, avoid confirming any names or personal details, hang up, and immediately call the supposedly kidnapped relative directly or through someone with them. These calls rely on panic and speed; verifying your family's safety defuses the scam. Report the attempt to 911 and the extortion number to authorities.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance