The 6 Most Common Phone and Text Message Scams in Mexico: How to Spot Them and Protect Yourself

In Mexico, attempts at phone and text message scams have become an everyday occurrence. According to the report *State of Scams in Mexico 2025*, an adult receives an average of 86 attempts per year—one every four days. WhatsApp, phone calls, and text messages are the criminals’ preferred channels, and Condusef reported an increase in complaints of possible fraud in 2026, many of which were linked to social engineering (vishing).

Here we present the six most common scams, adapted to the Mexican context, along with how they operate and practical tips to avoid falling for them.

1. The Fake Financial Advisor or Bank Executive

This is the most commonly reported scam. Someone pretends to be a representative of your bank (BBVA, Banorte, Santander, Citibanamex, etc.) or the security department. They alert you to an unrecognized charge, an attempted card cloning, or the imminent blocking of your account. They then ask you for SMS codes, your PIN, a token, or to transfer your money to a “secure account.”

Golden rule: No Mexican bank ever asks for passwords, PINs, verification codes, or transfer details over the phone or via WhatsApp. Hang up immediately and call the official number listed in your app or on the back of your card.

2. Illegal debt collection and “debt collection agencies”

You receive aggressive calls or messages from supposed collection agencies or quick-loan apps (known as “debt mills”). They threaten you with asset seizures, defamation in front of family members, or legal action if you don’t pay inflated amounts for debts you don’t recognize or never requested.

Tip: Legitimate institutions do not resort to threats or defamation. If it’s a loan app, check to see if it’s registered with Condusef’s SIPRES. Do not make payments under pressure, and report the incident to 089 or the Cyber Police.

3. Fake Packages and Deliveries

WhatsApp messages, text messages, or calls that pretend to be from Amazon, Mercado Libre, DHL, Estafeta, or Correos de México. They tell you that a package is being held, that you must pay a tax or delivery fee, or that there is a problem with your order. They include links to fake websites or ask for your credit card information.

What to do: Never click on links in unsolicited messages. Only track your shipments through official apps or websites. This tactic is often combined with the "fake bank advisor" scam.

4. Fake police officer, agent, or government official (telephone extortion)

Someone poses as a police officer, a prosecutor, a staff member of the Mexican Social Security Institute ( SAT, IMSS), or an employee of a prosecutor’s office. They mention an investigation, a fine, a seizure, a virtual kidnapping of a family member, or an urgent matter. They demand immediate money transfers or personal information under threat.

Important: Authorities never request payments or confidential information over the phone. Hang up, do not call back, and verify the information directly with the institution or your family members. Report it to 089 (anonymous tip line) or 911.

5. Investments and "miracle" financial "opportunities"

Promises of high returns on cryptocurrencies, trading, foreign platforms, or pyramid schemes via phone calls, WhatsApp, or social media. They use fake testimonials and pressure to get you to invest “today.”

Protection: Always verify that the company or broker is licensed by the CNBV or registered with Condusef. Be wary of guaranteed or excessively high returns. If it sounds too good to be true, it’s almost always a scam.

6. Any unexpected call or message that creates a sense of urgency

The general rule: any unsolicited contact that pressures you to act immediately is suspicious. It may be disguised as technical support, a prize, an IMSS data update, or SAT, or even a family member in trouble.

Key Recommendations for Staying Safe in Mexico

• Never share PINs, passwords, SMS codes, tokens, or card information over the phone or via WhatsApp.
• Hang up and call the official numbers yourself.
• Check for suspicious numbers using the Condusef tool (“Check and Report Suspicious Numbers”).
• Report fraudulent text messages and calls.
• If you are a victim: Contact your bank immediately, file a report with the Public Prosecutor’s Office, and contact Condusef (55 53 40 09 99 or condusef.gob.mx). You can also report the incident to the Cyber Police (55 5242 5100) or call 089.

Prevention is your best defense. Criminals rely on fear and haste: take a few seconds to double-check—that time could save you thousands of pesos and a lot of headaches. Share this information with your family, especially with older adults and people who use WhatsApp a lot.

These same social engineering techniques—creating a sense of urgency, impersonation, and psychological pressure—are also used to compromise a company’s security: an email or phone call that appears to come from “technical support” or a senior executive can be the gateway to an incident far more costly than an individual scam. If your subsidiary in Mexico wants to train its team and fortify its processes against this type of fraud, learn how we approach cybersecurity for businesses in Mexico —and if you’re interested in the other side of the coin, also read about what to do if your company suffers a ransomware attack, or how scams evolved when a virus went viral on Messenger.