Lorraine Williamson
A surge in fake traffic fines and QR-code fraud is catching drivers off guard across Málaga and the Costa del Sol. The city’s local police have issued a stark warning after a string of incidents involving fraudulent fines and bogus payment pages designed to steal personal and financial data.
The latest scheme sees fraudsters distributing fake traffic fines disguised as official notices from the Dirección General de Tráfico (DGT) and the Spanish Ministry of the Interior. The counterfeit documents often look convincingly real, featuring institutional logos and formatting similar to genuine penalties.
However, crucial details are missing — including the issuing officer’s ID, the exact location of the offence, and full vehicle information. The fine amounts listed also tend not to match Spain’s official penalty rates.
Worryingly, the notices include a QR code with instructions to scan and pay — but victims are instead redirected to a fraudulent website designed to harvest personal and banking data.
The Málaga local police urge anyone unsure about a fine’s authenticity to verify it via official helplines: 951 926 010 or 010.
Parking meters also targeted
In a separate but related scam, cybercriminals have been tampering with parking meters in Málaga’s regulated zones, known locally as SARE areas. Fake QR code stickers have been spotted plastered over the original codes on machines in Soho, Huelin, and other busy neighbourhoods.
These bogus stickers redirect users to cloned payment sites that mimic the legitimate Smassa parking app. Once scanned, users risk falling victim to phishing schemes — or in some cases, malware installation that compromises their devices.
Although the municipal parking authority Smassa is removing the counterfeit stickers on a daily basis, new ones continue to appear.
British expats among the targets
The scam isn’t limited to locals. Several British residents along the Costa del Sol have reported fake fines left on windscreens, written in English and displaying QR codes that claim to link to a payment portal.
Clicking these codes leads to malicious websites — some designed to infect phones with tracking malware. Similar incidents have now been recorded in Valencia, Bilbao, Madrid, Tenerife and Mallorca, suggesting the scam is spreading nationwide.
How to stay safe
Authorities urge all drivers to remain vigilant. Never scan a QR code from an unknown source, and do not pay any fines unless you’ve received official confirmation by post, email, or directly from the DGT portal.
When using parking meters, inspect the QR code closely. Fake stickers often have uneven edges, air bubbles, or slightly misaligned placement. If a link doesn’t clearly direct to the official Smassa app or domain, don’t proceed.
Police urge caution as fraud spreads across Spain
With these scams becoming more widespread and increasingly sophisticated, the key message is simple: trust only official channels, stay alert, and share the warning — especially with older drivers and tourists who may be more vulnerable. Authorities say awareness is the best defence against this evolving digital fraud.
Sources: Diario Sur, Cadena Ser, Huffington Post