How to Report Cybercrime and Online Fraud in Gibraltar (2026)
Scammed or hacked in Gibraltar? Who to call (999/112 and the Royal Gibraltar Police), how to preserve evidence, and how to try to get your money back.
Gibraltar is a British Overseas Territory with its own police force, the Royal Gibraltar Police (RGP), so if you are scammed or hacked here you report locally, not to UK Action Fraud. This guide shows you exactly who to contact, how to preserve evidence, and how to try to get your money back. Speed matters most: the sooner you tell your bank, the better your odds.
Primary sources: Royal Gibraltar Police: contact and reporting · RGP cyber-crime guidance · Gibraltar Regulatory Authority (data protection)
On this page
First: stop the loss
- Contact your bank or card issuer immediately. If you sent money or shared card details, call the number on your card or statement, report the fraud, and ask them to stop or recall the payment and freeze the account. For card payments, ask about a chargeback. Our chargeback guide explains how.
- Stop all contact with the scammer. Never send more money to "release" or "verify" funds. That is the scam. Block the number, email and account.
- Secure your accounts by changing passwords, signing out other devices and turning on two-step verification. If you clicked a link, see what to do after clicking a phishing link.
- Keep evidence: emails, texts, payment references, names, numbers and account details.
Who to report to
- Emergency or a crime in progress: call 999 or 112.
- Fraud, scams and cyber-enabled crime: report to the Royal Gibraltar Police on the non-emergency line (+350) 200 72500, or online through the RGP online reporting tool. Fraud is investigated by the RGP Economic Crime Unit, which includes the Fraud Squad.
- A data breach involving your personal information can be raised with the Gibraltar Regulatory Authority, which acts as the Information Commissioner.
Reporting does not by itself return your money, but it creates an official record and feeds local intelligence. Report even if you did not lose money, because the information still helps stop the next victim.
Getting your money back
Gibraltar uses the Gibraltar pound, which is at par with and interchangeable with pounds sterling. How you paid decides your options, and speed is everything.
| How you paid | What to do |
|---|---|
| Bank transfer | Call your bank within minutes and ask them to stop or recall the payment and freeze the receiving account. Ask whether it will reimburse you, and claim. |
| Debit or credit card | Ask your card issuer for a chargeback and dispute the transaction in writing. Card payments carry the strongest protection. |
| Crypto, cash app or gift cards | Rarely recoverable. Report to the platform and the police immediately, and ignore "recovery agents" who contact you, that is a common second scam. |
Because many scams targeting Gibraltar are run from overseas, a full recovery can need cooperation between banks in different countries. Report to the RGP first and give them every detail.
Scams that hit Gibraltar
The RGP has warned repeatedly about:
- Phishing emails and messages that harvest personal and banking details.
- Lottery, advance-fee and "you have won" scams that invent fees to release a prize that does not exist.
- Mystery-shopper and fake-job scams advertised on social media, and impersonation or "fake friendship" scams. See how the messaging works in our explainer on how phishing works and how to stop it.
The law and your data
Gibraltar has no standalone computer-misuse statute. Cyber offences, such as unauthorised access to a computer, unauthorised acts impairing its operation and unauthorised interception, are set out in the Crimes Act 2011. Your personal data is protected by the Data Protection Act 2004, with the Gibraltar Regulatory Authority acting as the supervisory Information Commissioner.
FAQ
Can I report to UK Action Fraud from Gibraltar?
No. Gibraltar has its own police force. Report to the Royal Gibraltar Police. If a scam clearly originates abroad, the police can liaise with agencies in that country.
My email or social media was hacked. Who do I tell?
Secure the account first: change the password, sign out other devices and turn on two-step verification. Then report to the RGP, especially if money, identity or business communications were affected.
I only received a suspicious message and lost nothing. Should I still report?
Yes. Reporting scam numbers and messages to the police helps them warn others and track offenders. Block the sender and keep a screenshot.
Sources: Royal Gibraltar Police (contact) · RGP online reporting · RGP cyber-crime guidance · Crimes Act 2011 · Gibraltar Regulatory Authority (data protection)
If you have been targeted, you are not alone. See our country-by-country cybercrime help hub for step-by-step reporting and recovery guides.