The landscape of digital fraud in Spain is being reshaped, and private messaging apps have become the focus of concern. What was previously concentrated primarily on open social networks is now shifting to encrypted channels where control is less stringent and it is more difficult to track down scammers.
In this new scenario, Telegram has become the platform with the highest concentration of cyber scams in Spain . Data compiled by Revolut in its latest Consumer Security and Financial Crime Report indicates that the messaging app is now the primary source of scams reported by Spanish users, and a major player in the surge of online fraud in Europe.
Telegram, the network where scams are growing the most
According to Revolut's analysis, fraud incidents originating on Telegram have increased by 233% globally since 2024 , making it the app where scams have intensified the most in the last year. This isn't just a striking percentage jump: the platform's share of the total is already very significant.
In aggregate terms, Telegram accounts for approximately one-fifth (21%) of all scams reported to Revolut worldwide. In other words, one in five scams reported to the company originates from this platform, which combines private chats, public channels with thousands of members , and a high level of relative anonymity for its users.
The report's authors point to a paradigm shift in how scammers operate . Instead of focusing on public social networks, they are increasingly opting to "take refuge" in encrypted environments, where they can move their campaigns quickly and with far less exposure. This shift to private messaging makes both early detection and a coordinated response from authorities and the platforms themselves more difficult.
Revolut emphasizes that Telegram's private and encrypted nature , highly valued by those seeking to protect their conversations, is also being exploited as a tool to conceal complex fraud schemes. The report describes the app as "particularly effective" at orchestrating sophisticated scams that combine social engineering, fake advertisements, and psychological pressure on victims.
Spain: Telegram leads in cyber scams, and online shopping is the target.
If we focus on Spain , the impact becomes even more evident. The report identifies Telegram as the social network with the highest concentration of scams in the country in 2025, accounting for 22% of the cases reported to Revolut by Spanish users. In other words, more than one in five cyber scams reported from Spain originated on this app.
The financial institution warns that criminals are exploiting the app's private and encrypted environment to scale their fraudulent operations "very quickly." Many practices that were previously carried out through ads or messages on public social networks have moved to Telegram channels and chats, where contact with the victim is more direct and oversight is significantly less.
By type, scams related to online shopping are the most common in Spain . In 2025, they accounted for 53% of all scams registered by Revolut in the country, slightly more than half of the total. They typically rely on supposedly irresistible offers, online stores that mimic established businesses, or highly sought-after products at prices too low to be real.
This type of fraud relies on fake websites, fraudulent payment gateways, and covert social media campaigns . The user believes they are on a legitimate website, enters their information, and makes the payment; however, when they try to claim the order, they find that the website has disappeared, the company never existed, or there is no way to contact anyone.
The interconnection between social networks and private messaging facilitates the circuit: the scam can begin with dubious advertising on platforms like Facebook, Instagram or TikTok and end in a closed Telegram chat, as happens in cases of buying houses through Telegram , where the scammer finalizes the operation and convinces the user to complete the payment without too many guarantees.
Fake job offers: Telegram accounts for more than half of global cases
Beyond fraudulent purchases, the Revolut study points to a particularly worrying phenomenon: the rise of scams related to job offers . Internationally, this type of fraud has tripled compared to the previous year, now accounting for 22% of all fraud cases detected in 2025.
In this area, Telegram plays a key role . According to the report, 58% of job scams worldwide originated on this platform. In practice, more than half of the detected job scams begin in Telegram chats or channels, disguised as attractive, flexible, and high-paying opportunities.
The modus operandi typically follows a recurring pattern: simple jobs, high income, or work-from-home opportunities requiring little to no experience are offered. Once the victim shows interest, the scammers request upfront payments for supposed materials, training courses, administrative fees, or special verifications. After the money is transferred, the process is halted, and the "company" vanishes.
This type of fraud thrives on job insecurity and the need for extra income , taking advantage of challenging economic times. Direct contact through encrypted messaging reinforces the feeling of closeness and personalized service, which can lead many people to lower their guard and accept conditions that, upon closer inspection, would raise suspicions.
Revolut points out that the boom in these fake offers demonstrates the extent to which scammers adapt their discourse to current concerns , using the language of entrepreneurship, remote work, or "passive income" to gain the trust of potential victims both in Spain and in the rest of Europe.
Meta remains in the lead in total volume, and TikTok is accelerating.
Telegram's rise in the realm of cyber scams doesn't mean the problem has diminished on other platforms. The report indicates that the Meta ecosystem remains the primary source of fraud globally , encompassing networks and services like Facebook, Instagram, WhatsApp, and Threads.
In 2025, meta-platforms accounted for 44% of all scams reported to Revolut worldwide, maintaining its position as the primary source of these fraudulent activities for the fourth consecutive year. Despite investment in moderation, ad filters, and reporting tools, the absolute volume of fraud remains very high.
Within the group, Facebook continues to be the network with the most detected cases , especially regarding peer-to-peer sales, cloned pages impersonating businesses, and fake promotions. Even so, the trend points to a gradual shift toward private messaging services—including WhatsApp and Telegram—where communications are less visible and, therefore, more difficult to monitor.
The report also draws attention to the evolution of TikTok . Although its absolute share of scams is still lower than that of Meta or Telegram, the percentage of fraud originating from the app has increased sixfold in just one year . This rapid growth suggests that the short-video platform is becoming fertile ground for targeted scam campaigns, especially those targeting young audiences.
Overall, the combination of Meta leading in total figures, Telegram as a major emerging focus, and TikTok with an accelerated rebound paints a picture in which virtually no social network or messaging app is unaffected by the problem, neither in Spain nor in the rest of Europe.
Fraudulent advertising and millions in revenue in Europe
A key part of the phenomenon lies in the deceptive advertising circulating on social media and digital platforms , a real risk to the future of e-commerce . The Revolut report, based on data from Juniper Research, estimates that the parent companies of major platforms earned around €4.400 billion in revenue in Europe during 2025 from fraudulent ads targeting users on the continent.
These figures reflect both the magnitude of the problem and the economic incentives that still exist for certain content to slip through the filters. Although most advertising campaigns are legitimate, a significant proportion promote nonexistent investments, phantom stores, financial services of dubious legality, or sweepstakes that never take place.
The sophistication of these campaigns has increased. It's becoming more and more common for them to mimic the image of well-known brands, financial institutions, or public entities , using highly polished visual identities and messages designed with the help of artificial intelligence tools. For the average user, distinguishing a fake promotion from a real one at a glance is becoming increasingly difficult.
The journey of these ads usually follows a fairly clear path: they start as seemingly normal advertising creatives , are displayed in the social media feed or on third-party websites, and, when the user clicks, they are redirected to forms or pages prepared to capture personal data, banking credentials or direct payments.
This scenario, coupled with the increasing shift of fraud to encrypted environments like Telegram , reinforces the need—according to the report—for major technology companies to take a more active role in detecting and filtering problematic content. The authors insist that protection cannot fall solely on the end user or on financial institutions that bear the cost once the fraud has been perpetrated.
Regulatory pressure in the EU and the financial sector's response
Faced with the steady rise in online fraud, the European Union is strengthening its regulatory framework to try to curb the trend. Among the most significant initiatives are the upcoming Payment Services Regulation (PSR) and a specific strategy against digital fraud that aims to impose stricter obligations on banks, payment providers, and large technology platforms.
In the case of Spain, the report positively assesses the measures the government has implemented to combat digital fraud . These initiatives aim to improve cooperation between financial institutions, telecommunications operators, and social media platforms, with objectives such as strengthening supervisory systems, streamlining information exchange, and clarifying responsibilities when a cyber scam occurs.
The financial sector is also adjusting its processes. Revolut says it dedicates nearly a third of its global workforce to preventing financial crime and combating fraud . Among the tools recently developed is an AI-powered scam detection chatbot, known as Scam Buster, which analyzes the context of customer transactions and issues personalized alerts if it detects suspicious behavior.
In addition, the entity has incorporated features such as Street Mode , which allows users to configure locations considered trustworthy for transactions, and call verification systems directly within the app , designed to help the user check if the person contacting them is actually an authorized employee or an imposter trying to obtain sensitive data.
The company has also promoted events such as the Revolut FinCrime Summit , which has brought together regulators, experts, and industry representatives to share best practices in the fight against financial crime. Its head of financial crime, Woody Malouf, summarizes the situation by pointing out that the speed at which scams spread on Telegram exemplifies how rapidly the criminal ecosystem evolves, and he calls for social media and messaging companies to make a stronger commitment to protecting users.
This scenario requires users to take extra precautions.
The data set that identifies Telegram as the platform with the fastest-growing cyber scams , Meta's continued leadership in total volume, and TikTok's strong resurgence paints a picture in which no major app is immune to risk. The shift towards encrypted chats, the rise of fraudulent job offers, and the prevalence of deceptive advertising create a demanding environment for regulators, businesses, and citizens alike.
In Europe, and particularly in Spain, the combination of fraudulent online purchases, employment scams, and manipulated advertising campaigns makes caution more necessary than ever. Calmly verifying the identity of anyone contacting you, being wary of deals that seem too good to be true, carefully checking website addresses, avoiding advance payments in dubious situations, and strengthening the security of your devices and accounts are basic steps that can make all the difference.
Everything suggests that digital fraud will continue to evolve at the same pace as online tools, and that cybercriminals will continue to exploit channels like Telegram to reach new victims. In this context, the combination of stricter regulations, greater involvement from platforms, and more cautious habits on the part of users will be key to reducing the impact of cyber scams, which are already considered one of the main digital risks in Spain.
