Cybercrime never rests, and mobile payment apps have become a favorite target. In recent weeks, the Civil Guard has focused on a scam known as the "fake friend" fraud, which has left several people without their money in a matter of minutes. The investigation has culminated in the identification of a 25-year-old woman as the alleged perpetrator of four counts of fraud and one count of identity theft.
The events came to light after several victims reported receiving messages from supposed trusted contacts requesting urgent money via Bizum. The fraud amounts to €1.070 and affects three people in Granada and one in Huelva , although the investigation remains open and more victims are possible.
This is how the 'false friend' network operated
The scam is as simple as it is effective. It all starts with a seemingly harmless text message the victim receives on their phone, containing a link and a verification code. If the person enters the code, the cybercriminal gains control of their WhatsApp account and, from there, impersonates the account holder to message their contacts.
The request for money is usually accompanied by an emergency excuse: a health problem, an unpaid bill, or any situation that justifies an immediate transfer. Urgency and trust are the perfect weapons to prevent the victim from thinking and end up pressing the send button without checking anything.
In this case, the Civil Guard officers in Lanjarón, Granada, analyzed the conversations and traced the bank transactions. Thanks to this tracking, they were able to link the suspect to the accounts receiving the money . The woman was located in the province of Castellón and, with the collaboration of the Civil Guard in Onda, was brought before a judge.
Recommendations to avoid falling into the trap
The Civil Guard reiterates a key recommendation: be wary of any message requesting urgent money, even if it comes from a known number. The safest course of action is to call the contact directly using the number you already have saved and verify their identity. Never enter verification codes or click on links received via SMS or WhatsApp without confirming their origin.
If you've fallen for the scam, it's crucial to act quickly: contact your bank to try to block the transfer, keep all evidence (messages, screenshots, receipts), and file a police report. Every minute counts when it comes to trying to recover your money or preventing the fraud from spreading to more victims.
This case demonstrates that social engineering remains one of the most frequently used methods by cybercriminals. Trust and a sense of urgency are their greatest allies , and prevention remains the best defense. The investigation is ongoing, and authorities do not rule out the possibility that the number of victims may increase in the coming days.