Madrid residents fight image theft in rental scams and fake profiles

Dozens of Madrid residents say their personal photographs have been lifted from social media accounts and repurposed in scams targeting the city's already strained rental market, fake employment agencies, and fraudulent immigration services. The problem, long treated as a digital nuisance, has sharpened into something more damaging as the city's housing crisis pushes desperate renters to hunt for flats on unofficial channels where verification is minimal.

The timing matters. Madrid's rental market is under extraordinary pressure. Average rents in central districts hit record highs earlier this year, with one-bedroom flats in Malasaña and Chueca regularly listed above €1,400 per month, forcing many residents, particularly recent arrivals and young workers, onto informal platforms and WhatsApp groups where fraudulent listings proliferate and stolen profile images are used to construct convincingly fake landlord personas.

Who is being targeted, and how

Community groups in Lavapiés, one of Madrid's most densely multicultural neighbourhoods, say the scam architecture is predictable. A fraudster takes a photograph from a real person's public Instagram or Facebook profile, constructs a fake listing, typically a well-priced flat on Calle Embajadores or in the streets around the Rastro market, and collects a deposit before disappearing. The real person whose image was stolen then faces harassment from defrauded victims who tracked them down.

The Red de Apoyo Mutuo de Lavapiés, a neighbourhood solidarity network active in the area since the early 2010s, has documented multiple cases this year in which community members discovered their photographs embedded in fraudulent rental listings on Fotocasa, Wallapop, and unmoderated Telegram channels. Wallapop has policies against housing fraud but enforcement on peer-to-peer rental listings remains inconsistent, according to community volunteers who cross-reference reported listings.

The problem extends beyond rentals. Several residents in Chamberí, a district with a large Latin American community concentrated around Calle Bravo Murillo, describe finding their images attached to fake job offers circulated through WhatsApp. The listings, often posing as domestic work or logistics roles, are used to solicit identity document copies and upfront registration fees from job seekers. Some of those targeted had migrated to Spain under the EU's long-term residence permit framework and say they fear that handing over documents to fraudsters could compromise their legal status.

What recourse exists, and where it falls short

Spain's Agencia Española de Protección de Datos, known as the AEPD, handles complaints about unauthorised use of personal images under the country's data protection law, which aligns with the EU's General Data Protection Regulation. The AEPD processed more than 14,000 formal complaints in 2024, though the agency does not break down figures by complaint type in its publicly available annual summary. Filing a complaint requires documentation that can be difficult for victims to assemble quickly, particularly if the fraudulent content has already been taken down by the time they discover it.

The Oficina Municipal de Información al Consumidor, which operates drop-in advice centres across Madrid including a main office on Calle Príncipe de Vergara, offers guidance on digital fraud cases and can help residents prepare reports for both the AEPD and the Policía Nacional's cybercrime unit, the Brigada Central de Investigación Tecnológica. Community workers in Lavapiés say the gap between reporting and resolution remains wide, often stretching over months, by which point victims of rental scams have lost deposits they cannot recover.

For residents who discover their images being misused, the most immediate practical steps are to report the content directly to the platform hosting it, file a denuncia at any Policía Nacional station, the commissary on Calle Leganitos in the Argüelles district is one of the busiest in central Madrid, and submit a formal complaint to the AEPD through its online portal. Taking screenshots and preserving URLs before content is removed is essential. Community organisations in Lavapiés and Chamberí have begun running informal digital literacy sessions to help residents set accounts to private and audit which platforms hold their images publicly. The next session in Lavapiés is scheduled for mid-July at the Centro Social Comunitario Casino de la Reina on Calle Tribulete.