Trust is cybercriminals' favorite weapon. There's no longer a need to steal complex passwords or breach computer systems: simply impersonating a friend or family member and urgently requesting money is enough. This is known as the 'fake friend' scam , a type of fraud that has resurfaced following a Civil Guard investigation in Granada.
The events stem from several complaints filed by individuals who received messages seemingly sent by trusted contacts. These messages requested immediate transfers via Bizum, claiming the recipients were in dire need. The investigation, conducted by the Lanjarón Civil Guard's Investigation Unit, has identified a 25-year-old woman as the alleged perpetrator of four counts of fraud and one count of identity theft . The fraud amounts to €1.070 and affects three people in the province of Granada and one in Huelva.
This is how the 'fake friend' scam worked
The scam is simple but effective. It all starts with a text message the victim receives on their phone. The message includes a link and a code that, if entered, allow the criminal to take control of the person's WhatsApp account. Once they have it, the scammer impersonates the account owner and messages their contacts, feigning a financial emergency.
The request for money usually comes with an urgent tone: a health problem, an unpaid bill, or any excuse that justifies an immediate transfer. The preferred method is Bizum, due to its speed and because it doesn't require complex bank details. In some cases, after receiving the first transfer, the supposed friend claims a mistake and requests a second transfer to increase the amount defrauded.
In this investigation, agents analyzed the conversations and traced the bank transactions. This allowed them to link the suspect to the accounts receiving the money. The woman was located in the province of Castellón and, with the collaboration of the Civil Guard in Onda, was brought before a judge. The investigation remains open, and authorities have not ruled out her involvement in other cases in different provinces.
Recommendations to avoid being deceived
The Civil Guard reiterates a key recommendation: be wary of any message requesting urgent money , even if it comes from a known number. The safest course of action is to call the contact directly using the number already saved in your address book and verify their identity. Never enter verification codes or click on links received via SMS or WhatsApp without confirming their origin.
If you've fallen for the scam, it's crucial to act quickly: contact your bank to try to block the transfer, keep all evidence (messages, screenshots, receipts), and file a police report. Every minute counts when it comes to trying to recover your money or preventing the fraud from spreading to more victims.
This case demonstrates that social engineering remains one of the most frequently used methods by cybercriminals. Trust and a sense of urgency are their greatest allies, and prevention remains the best defense. The investigation is ongoing, and authorities do not rule out the possibility that the number of victims may increase in the coming days.
