GUIDE · SCAMS IN PORTUGAL
Spot the scam before you fall for it.
The most common text, phone and WhatsApp scams in Portugal, explained in a few lines: how they work, the warning signs and what to do. Updated in October 2026.
THE MOST COMMON
Eleven scams going around today.
Tap a scam to read how it works, the warning signs and what to do. Based on public alerts from organisations such as CTT (the Portuguese post office), the Tax Authority, Social Security, EDP and Banco de Portugal.
A call from the “bank” after a text message
How it works. You get a text or email pretending to be from your bank. Shortly afterwards someone calls, says they are from the “security team”, that they saw a suspicious transaction and will “cancel” it. At the same time the scammer makes a real transfer and asks you for the code that has just arrived on your phone.
Warning signs.
- An unexpected call from the “bank” right after a text with a link
- Talk of a “suspicious transaction”, or of “cancelling” or “reversing” an operation
- Asks for codes, your PIN or for you to confirm an operation in the app
- In a hurry and won’t let you hang up
What to do. Hang up. Call your bank yourself, on the number on the back of your card. Banks never ask for codes or your PIN, and never ask you to “cancel” an operation.
Text about a “suspicious transfer” or a “blocked account”
How it works. A message in the name of a bank warns of a suspicious transfer or a blocked account and includes a link. The link leads to a copy of the bank’s website, built to steal your login details.
Warning signs.
- A bank’s name, a link and urgency in the same message
- A strange or shortened link address
- Asks you to “validate” or “unblock” your account
What to do. Don’t tap the link. Open your bank’s app or type the address yourself, and check there. Banks don’t send links by text to ask for your details.
Fake CTT: parcel held or a fee to pay
How it works. A text, email or WhatsApp message says your parcel is being held, that the address is missing, or that there is a small customs fee to pay. The link leads to a page asking for your card details.
Warning signs.
- Talks about a failed delivery, a held parcel, a fee or “rescheduling”
- The link is not the CTT website (ctt.pt)
- Asks for a small payment, to win your trust
What to do. Never pay anything through a link received in a message. CTT publishes its phishing warnings on its official website.
Fake Tax Authority: IRS refund or “settlement”
How it works. An email or text announces an income tax (IRS) refund or demands a “settlement”. The link leads to a page imitating the Portal das Finanças and asks for your tax number (NIF), date of birth and bank details.
Warning signs.
- “Refund”, “settlement” or a short deadline to reply
- A sender that is not the Tax Authority
- Asks for bank details in a form
What to do. The Tax Authority does not send links to confirm details or to pay. Always go to the Portal das Finanças by typing the address yourself.
Fake electricity, water or gas bill
How it works. An overdue bill arrives, with a threat to cut off the supply, and a payment reference or a link to pay. Some emails already include the customer’s real details, to look believable.
Warning signs.
- A debt and a threat to cut off the supply
- A payment reference or a link to pay
- Asks for bank details or codes
What to do. Check in your customer area or on the company’s official number. No serious company asks for codes or bank details by message.
Via Verde and unpaid tolls
How it works. A message says you have an unpaid toll and a button to “settle it now”. The link goes to a fake website.
Warning signs.
- An unpaid toll you don’t recognise
- A link to “settle” it, or a Multibanco reference sent by text
What to do. Only pay tolls on the official websites and channels, which you type or look up yourself. If in doubt, call the official number.
“Hi Mum” or “Hi Dad” on WhatsApp
How it works. A message from an unknown number says “I’ve changed my number” or “I lost my phone” and urgently asks for money, by MB WAY or bank transfer.
Warning signs.
- A new number claiming to be your son, daughter or a relative
- An urgent request for money
- Won’t accept a voice call
What to do. Call your relative’s old number, or ask a question only they would know, before paying. Never send money without checking.
MB WAY: “request” instead of “send”
How it works. A fake buyer (on a selling platform) gets you to approve a payment request instead of receiving money. In another version, someone sends money “by mistake” and asks for it back, but the first payment was fake.
Warning signs.
- To receive money, you are asked to approve or confirm something in MB WAY
- You are asked to return money “sent by mistake”
- Lots of hurry and pressure
What to do. Receiving money never requires you to approve anything. Always read what MB WAY shows on the screen: if it says “pay”, you are paying.
Fake technical support (Microsoft and others)
How it works. A call, or a window on your computer with a phone number, says your computer has a virus. They ask you to install AnyDesk, TeamViewer or another remote access program, then charge for a “clean-up” or steal your bank details.
Warning signs.
- A call nobody asked for, in the name of Microsoft or “support”
- A warning window with a phone number
- Asks you to install a remote access program
What to do. Never install anything at the request of someone who calls you. Microsoft doesn’t make calls like these. If you have already installed it, disconnect from the internet and ask someone who knows for help, such as our shop.
“Guaranteed” investments and cryptocurrencies
How it works. Adverts using famous people, Telegram or WhatsApp groups, or an “adviser” who calls promising guaranteed profits. They show fake gains on a platform until they ask you for more and more money.
Warning signs.
- Guaranteed profit, or far above normal
- An invitation to a messaging group
- A small first amount, then more
- Asks for access to your computer
What to do. Nobody serious guarantees profits. Always check that the company is authorised on the CMVM or Banco de Portugal website before handing over money.
WORTH KEEPING
The six golden rules.
- No real organisation asks for codes, your PIN or passwords by phone, text or email.
- Never install a program or an app just because someone asked you to on the phone.
- Be wary of urgency: “account blocked”, “final notice”, “you have 24 hours”.
- If in doubt, hang up and call the organisation’s official number yourself (the one on your card or on the official website).
- Don’t tap links in messages. Type the address yourself, or use the official app.
- Don’t be embarrassed to ask. Show the message to someone you trust, or come to the shop.
IF YOU HAVE ALREADY FALLEN FOR ONE
Act fast.
Call your bank straight away, on the number on the back of your card, and ask them to block your card and your access. Keep the messages, the numbers and the receipts, and report it to the police (PSP or GNR). The faster you act, the better the chance of stopping the money.
Help on your phone.
The Antifraud app warns you about suspicious calls and checks texts and links, all on your phone, with no internet and no accounts. These tips are inside it too.