Frequently Asked Questions

Banking phishing is a digital fraud in which cybercriminals impersonate your bank to steal your data and your money. They may contact you via SMS (smishing), email, phone calls (vishing) or even WhatsApp, mimicking your financial institution's branding. The goal is always the same: to get you to click a fake link, share your credentials or authorise transactions without realising it. In Spain these scams have surged and thousands of people lose money every year. The good news is the law protects you. At DMD Asesores we charge nothing upfront — we only charge if we win your case.

The 4 main types of phishing are: 1) Smishing (the most common): you receive an SMS that appears to come from your bank with a fraudulent link. It is the most widespread method in Spain because the messages slip into the same thread as legitimate SMS from your bank. 2) Vishing: they call you pretending to be bank staff, even spoofing the bank's real number on your screen. 3) Email phishing: you receive an email that perfectly imitates your bank's look and feel, asking you to 'verify' your details. 4) Pharming: you are redirected to a fake website identical to your bank's without realising it. Whatever the method, if you have been a victim we can help you recover your money.

If you have been a victim of phishing, act fast: 1) Immediately block your cards and access via your bank's app or by calling customer service. 2) Change all your banking passwords. 3) File a report with the National Police or Civil Guard, detailing what happened. 4) Claim from the bank in writing within a maximum of 13 months. 5) Contact a specialist lawyer. At DMD Asesores we analyse your case for free and handle the entire process. We charge nothing upfront — we only charge if we win your case.

Yes, in most cases. The Payment Services Law requires the bank to refund unauthorised transactions, unless they can prove you acted with gross negligence (and sharing data after a sophisticated scam does not qualify). At DMD Asesores we have a 95% success rate in phishing claims. The bank is obliged to refund the amount by the end of the next business day after notification. If they refuse, we take care of it. We charge nothing upfront — we only charge if we win your case.

You have 13 months from the date of the fraudulent transaction to claim from the bank. It is essential to notify the bank as soon as you spot suspicious activity, because speed is key to recovering your money. Don't let time pass: the sooner you act, the greater your chances of success. Contact us and we'll guide you free of charge.