Lorraine Williamson
A growing number of users in Spain are falling victim to a new type of online scam involving Bizum. The so-called ‘reverse Bizum’ fraud preys on people selling items through second-hand platforms like Wallapop or Milanuncios.
The tactic is simple but effective—scammers send a request for money, disguised as a payment.
Rather than receiving funds, victims unknowingly authorise a payment. This misunderstanding can cost hundreds of euros, and once confirmed, Bizum transfers cannot be reversed.
A real example of how the scam works
The National Cybersecurity Institute (INCIBE) recently shared a case involving a woman selling a car online. A potential buyer contacted her and offered a €500 deposit to secure the vehicle. The scammer sent a Bizum link, which the seller clicked, assuming it was to receive funds.
Instead, she approved a request for €500, unknowingly sending money to the fraudster. Encouraged by her compliance, the scammer attempted to request an even higher amount. That triggered suspicion, and the seller checked her bank account—realising she had already lost money.
She contacted INCIBE’s free cybersecurity helpline (017) for advice.
Spotting the warning signs
The scam exploits haste and a lack of familiarity with Bizum’s functions. To avoid being caught out:
-
Always check if you’re accepting money or authorising a payment.
-
Be wary if the buyer seems unusually eager or offers to pay immediately without negotiation.
-
Don’t click on links from unknown senders.
-
Cross-check any urgent requests via another platform, like a call or video chat.
-
Check user profiles carefully on selling platforms—especially if they’re newly created or inactive.
-
Avoid deals that sound too good to be true.
Some messages may appear poorly written or rushed. Scammers also use urgency as pressure—another red flag.
What to do if you’ve been scammed
If you’ve fallen for the reverse Bizum scam, take these steps immediately:
-
Block the scammer’s number to prevent further contact.
-
Report the user on the second-hand platform used.
-
Gather evidence: screenshots of messages, the Bizum transaction, and user profiles.
-
File a police report, including all supporting documents.
-
Inform your bank about the incident and submit the report.
-
If your bank cannot help, escalate the case to the Bank of Spain.
INCIBE also recommends using tools like “Online Witnesses” (Testigos online) to certify messages and transactions.
Stay alert when using payment apps
While Bizum is convenient, its speed can work against users who fail to verify transaction details. Scammers rely on that vulnerability.
Double-check every Bizum notification. If you’re unsure whether you’re receiving or sending money—don’t act.
INCIBE’s cybersecurity team offers confidential, free support. You can reach them at 017 or through WhatsApp if you suspect a scam or need advice.
Final word
As digital payments grow, so do cyber threats. Staying informed and cautious is key to avoiding scams like the reverse Bizum. Sellers should take their time, double-check requests, and never feel pressured into confirming anything on the spot.