Spain Scam & Fraud Statistics
INCIBE handled 122.223 cybersecurity incidents in Spain in 2025, 26% more than in 2024, and 45.445 of them — around four in ten — were online fraud.
Last reviewed: 20 July 2026
This page gathers official Spanish cybersecurity and online fraud figures published by INCIBE, the national cybersecurity institute that sits under the Ministry for Digital Transformation and the Civil Service. Its Balance de Ciberseguridad 2025 recorded 122.223 cybersecurity incidents, 26% more than in 2024, of which 45.445 — roughly four in ten — were online fraud, a 19% rise on the previous year.\n\nTwo caveats matter. First, INCIBE counts incidents it detects or manages and consultations made to its helpline; it does not publish a national total of euros lost to fraud, so nothing on this page should be read as a loss figure and no currency amount is implied. Second, the survey percentages come from the first national cybercrime survey run by the Cátedra INCIBE–UPM and describe what respondents said they experienced, not confirmed offences. Spanish figures use a full stop as the thousands separator and a comma as the decimal mark, and are reproduced here exactly as published.
Key figures
122.223 incidents, 26% more than in 2024
Cybersecurity incidents managed by INCIBE in 2025
Source: INCIBE — Balance de Ciberseguridad 2025 (2025)
45.445 incidents, 19% more than in 2024
Incidents classified as online fraud — about four in ten of the total
Source: INCIBE — Balance de Ciberseguridad 2025 (2025)
142.767 consultations, 45% more than in 2024
Consultations answered by INCIBE's helpline (Línea de Ayuda)
Source: INCIBE — Balance de Ciberseguridad 2025 (2025)
28% of users
Share of helpline users who had received a phishing attempt, vishing call or smishing message
Source: INCIBE — Balance de Ciberseguridad 2025 (2025)
4.600 domains
Fraudulent .es domains shut down by INCIBE with red.es, mainly fake online shops
Source: INCIBE — Balance de Ciberseguridad 2025 (2025)
Key takeaways
- Online fraud is now around four in ten of all cybersecurity incidents INCIBE handles in Spain — 45.445 out of 122.223 in 2025.
- Nearly half the population (47,8%) does not know where to report a cybercrime; INCIBE's free helpline is the obvious starting point if you have been targeted.
- Messaging apps are the dominant scam channel in Spain: 70,7% of people surveyed had received a scam attempt through WhatsApp.
- Fake online shops on .es domains are a live problem — 4.600 fraudulent .es domains were closed in 2025 alone.
- INCIBE publishes incident and consultation counts, not euros lost, so these figures show exposure and workload rather than financial damage.
Frequently asked questions
How much online fraud does INCIBE record in Spain each year?
INCIBE's Balance de Ciberseguridad 2025 counted 122.223 cybersecurity incidents, 26% more than in 2024. Of those, 45.445 — roughly four in ten — were online fraud, a 19% rise on the previous year, and 25.133 were phishing. INCIBE counts incidents it detects and manages rather than euros lost, so these numbers describe exposure and workload, not the financial damage suffered by Spanish households and businesses.
How common are scam attempts in Spain?
Very common. In the first national cybercrime survey run by the Cátedra INCIBE–UPM, 70,7% of respondents said they had received scam attempts through WhatsApp. INCIBE's own balance found 28% of helpline users had received a phishing attempt, vishing call or smishing message. The same survey found 47,8% did not know the official channels for reporting cybercrime — a gap that keeps recorded statistics well below the true level of offending.