Portugal Scams: Online, Tourist & Investment Fraud Guide
Common scams in Portugal and how to report via the Cybercrime Office, PSP, and your bank.
Emergency number: 112 — verify on official sources.
Last reviewed: 1 June 2026
Portugal sees online fraud including phishing and smishing impersonating banks, CTT (postal service), or the tax authority (AT), as well as tourist-area street scams and investment fraud. The Cybercrime Office of the Public Prosecution Service (Gabinete de Cibercrime, cibercrime.ministeriopublico.pt) is the official channel for reporting cybercrime. The PSP (Polícia de Segurança Pública) handles general police complaints. Portugal's National Cybersecurity Centre (CNCS) provides public guidance on threats. Reporting suspected bank fraud as quickly as possible remains the most effective first step.
Common scams
- Phishing and smishing impersonating Portuguese banks or CTT
- AT (tax authority) impersonation
- Investment and crypto fraud
- Online marketplace non-delivery
Tourist-specific scams
- Overcharging restaurants and unlicensed taxis
- Distraction pickpocketing in Lisbon and Porto tourist areas
- Fake tour operators and street sellers
Online shopping scams
- Parcel-fee smishing impersonating CTT
- Fake online shops
- Account takeover phishing targeting banking credentials
Job scams
- Task scams via messaging apps
- Fake job offers requiring upfront fees or documentation payments
Romance scams
- Dating-app romance and cryptocurrency investment grooming
Investment scams
- Fake trading platforms and clone broker firms
- Crypto and 'AI bot' investment schemes
How to report a scam here
- Contact your bank immediately if money was transferred
- Report cybercrime to the Gabinete de Cibercrime at cibercrime.ministeriopublico.pt or by email at [email protected]
- File a police complaint with the PSP at a local station or via psp.pt
Local reporting & protection links
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Contact your bank immediately using the number on your card or official app. Portuguese banks can attempt to recall fraudulent transfers most effectively within the first few hours. No legitimate bank sends an SMS asking you to confirm credentials via a link.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
What is the Gabinete de Cibercrime?
It is the Cybercrime Office of the Portuguese Public Prosecution Service (Ministério Público), which receives and processes cybercrime complaints. You can report online at cibercrime.ministeriopublico.pt or by email at [email protected].
Does the AT (Autoridade Tributária) contact taxpayers by SMS?
The Portuguese tax authority may use SMS for some notifications, but it will never send a link asking for banking credentials or urgent payments. Treat any such message as a phishing attempt.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance