Residents Targeted in Sophisticated Phone Scams

The Local Police of Santa Coloma de Gramenet have issued an urgent alert following multiple reports of attempted fraud involving impersonation of Endesa employees. On Friday 6th November 2026, authorities confirmed that several residents had received calls from individuals claiming to be from the energy provider, using personal data obtained in a cyberattack earlier this year to gain trust and extract bank details. According to police, the scammers already possess some personal information belonging to victims, such as names and contract details, which they recite during calls to appear legitimate. They claim urgent procedures are needed and request confirmation of contract numbers and bank account details, information that would allow full access to victims’ savings.

How the Scam Works

The fraud follows a pattern known as 'vishing', voice-based phishing, where criminals use social engineering over the phone. In this case, the breach of Endesa’s systems at the beginning of 2026 has given attackers a dangerous advantage: verified personal data that makes the deception more credible. Once trust is established, callers pressure residents to act quickly, often under the guise of resolving billing issues or updating records. The Local Police stress that no legitimate company, including Endesa, will ever ask for bank details or contract numbers over the phone.

Never give personal or banking information over the phone if you didn’t initiate the call. When in doubt, hang up and contact the company directly using official channels.

How to Protect Yourself

The Ajuntament de Santa Coloma de Gramenet and Endesa both advise extreme caution. If you receive such a call, do not engage. Instead:

  • Hang up immediately.
  • Do not reply to suspicious SMS messages or click on links.
  • Verify any request by contacting Endesa through its official website or visiting a local office.
  • Report the incident to the Local Police on 934 624 010, 092, or 112.
  • Save evidence, such as call logs or message content, for reporting purposes.

Endesa also provides step-by-step guidance on how to report energy-related fraud via its official fraud reporting page, including actions to take with your bank if information has already been shared. Residents are reminded that similar scams may impersonate other entities, including the Social Security or the town hall, and can arrive via SMS, email, or messaging apps. The same rules apply: verify through official sources, never share sensitive data, and report suspicious activity.

Sources: El Nacional, endesa.com.