Madrid Residents Discover Identity Photos Stolen From ID Documents Online

The problem arrived without warning for many. A Senegalese market trader working in the Rastro area noticed his photograph on a listings page for a rental apartment in Leganés, a flat he had never visited, let alone offered for rent. A Bangladeshi woman who has lived in Lavapiés since 2019 found her face on a WhatsApp forward circulating through neighbourhood groups, attached to a fabricated social services fraud claim. Neither had consented. Neither knew how to stop it.

The practice, loosely called duplicate image replacement, where a person's photograph is extracted from one digital context and inserted into another, often to deceive or defraud, has been escalating in Madrid's densely connected immigrant and working-class communities. Advocates say the city's 2025-2026 surge in digital rental scams and the widening use of AI-assisted photo manipulation tools have made the problem significantly worse in the past eight months.

Barrios on the Front Line

Lavapiés, home to one of Madrid's most concentrated multicultural populations within the Distrito Centro, and Carabanchel to the south, have seen the highest volume of reported incidents according to caseworkers at Karibu, the Madrid-based association that supports migrant and refugee families. The organisation, which operates from Calle Embajadores, has handled a growing caseload of individuals whose identity images were scraped from municipal registration documents, WhatsApp profiles, or neighbourhood association websites.

The Agencia Española de Protección de Datos, known as AEPD, received more than 14,000 complaints related to unauthorised image use during 2025, its highest annual total since it began publishing category-specific data. Community-level caseworkers say the numbers coming through their doors reflect only a fraction of real incidence, because many affected residents, particularly those with irregular immigration status, do not file formal complaints for fear of drawing official attention to themselves.

The Comunidad de Madrid's own consumer and data rights office, the Instituto Madrileño de Consumo on Calle Ventura Rodríguez, offers a complaints channel, but legal aid workers say the process requires documentation that undocumented residents often cannot produce. That structural gap leaves a significant portion of the affected population with no practical remedy through official channels.

What Community Members Are Doing

In the absence of reliable institutional routes, affected residents are developing informal systems of mutual protection. In Carabanchel's Asociación Vecinal Aluche, volunteers have been running monthly digital literacy sessions since February 2026, teaching participants how to run reverse image searches and submit takedown requests to platforms including Google and Meta. The sessions, held in Spanish, Arabic and Urdu, regularly fill their 30-seat room in the neighbourhood cultural centre on Avenida de los Poblados.

The practical advice coming from those sessions is specific: check your own image monthly using Google Images' search-by-photo tool; set WhatsApp profile photos to contacts-only; watermark photographs before uploading them to any housing or employment platform; and report suspicious use immediately to the AEPD's online portal rather than waiting for platform responses, which can take weeks.

The rental market dimension is particularly acute. With average asking rents in central Madrid districts now regularly exceeding €1,400 per month for a one-bedroom flat, fraudulent listings using stolen images to impersonate landlords have multiplied. Prospective tenants desperate to secure accommodation in a tight market are transferring deposits before verifying identities, and the fake landlord photographs are often pulled from real community members' social media accounts.

For the individuals whose faces are used, the harm is not merely economic. It is reputational, psychological and, for some, legal, when their image appears alongside false accusations of benefit fraud or criminal activity. Karibu's caseworkers have been coordinating with the Oficina de Atención a la Víctima del Delito in Calle García de Paredes to help the most seriously affected residents access victim status, which opens pathways to free legal representation. The Fiscal de Sala de Criminalidad Informática, the national cybercrime prosecutor's office, has flagged manipulated identity images as a priority category for 2026 prosecutions, though individual cases still move slowly through the system.

For now, community members are not waiting. The sessions in Carabanchel and Lavapiés continue every month. The next one is scheduled for 18 July.