Malaga Tourist Scams: What to Watch For in 2026
Last updated July 2026, this guide to Malaga tourist scams covers the handful of tricks worth knowing before a trip. Petty scams here are opportunistic and low-risk compared with Madrid or Barcelona, concentrated around Calle Larios, the cathedral, and Malagueta beach. Read on for the specific tactics, current prices where they apply, and where to report an incident if one happens.
Malaga Tourist Scams: How Common Are They?
Malaga's scam climate is mild compared with Barcelona or Madrid, where organized pickpocketing crews operate more openly. The is Malaga safe for tourists guide covers the city's broader safety picture in more depth. Most Malaga tourist scams rely on distraction, a small unwanted gift, or a confusing price rather than confrontation. The tactics mirror the rest of Spain: bump-and-lift pickpocketing, unsolicited rosemary branches, and inflated taxi fares near transit hubs. Staying alert in three areas covers most of the risk: Calle Larios, the cathedral area, and Malagueta beach. Here is a quick reference before the full breakdown below.
| Scam Type | Where It Happens | Red Flag | How to Avoid |
|---|---|---|---|
| Rosemary branch | Cathedral area, Calle Larios | Unsolicited "free" gift | Say no; don't extend your hand |
| Ticket resale | Online, near Caminito del Rey and the Alhambra | No ID required at purchase | Buy only from official sites or verified aggregators |
| Bird poop / spill | Transit hubs, Maria Zambrano station | A stranger touches your clothing | Keep walking; check yourself in private |
| Taxi overcharge | Airport, port area | No meter running, "fixed price" quoted | Confirm the meter or use a rideshare app |
| ATM skimming | Plaza de la Constitucion, busy ATMs | Loose or added attachment on the card slot | Use an ATM inside a bank branch |

The Rosemary Ladies: A "Free" Gift That Isn't Free
The rosemary ladies are one of the most reported Malaga tourist scams. A woman offers a small rosemary branch as a free gift or a symbol of luck. Accepting it, or letting her take your hand, starts an unsolicited palm reading. She then demands payment, typically anywhere from €5–€20. Refusing to pay can trigger a loud, embarrassing scene meant to pressure you into handing over cash.
- Where it happens: near the Malaga Cathedral (La Manquita) and along Calle Larios
- What to do: say "No, gracias" firmly and keep walking
- Key rule: never let her touch your hand or open your palm

Caminito del Rey and Alhambra Ticket Resale Scams
Third-party websites sell tickets for the Caminito del Rey and the Alhambra at inflated prices, sometimes around three times the official rate. Some of these listings are invalid vouchers rather than real reservations. Tickets for both sites are typically tied to the visitor's name and an ID or passport number. Staff check ID at the entrance, and a mismatched name can void the ticket outright. Buy only from each attraction's official ticketing portal, or from a reputable, verified aggregator such as GetYourGuide or Tiqets.
Scam or Tourist Trap? Knowing the Difference
Not every overpriced experience in Malaga is a scam. A cafe on the beachfront promenade charging more for the same coffee sold two streets inland is a tourist trap, not a crime. The price is posted and legal. You are paying for the location, not being cheated. A real Malaga tourist scam always involves deception or theft: a fake ticket, an unmetered taxi ride, a hand in your pocket. If a price feels high but is clearly displayed on a menu, treat it as a trap. If something is hidden, unsolicited, or backed by a fake authority, treat it as a scam and report it.
The official airport taxi supplement of €5.50 overlaps with the €5–€20 rosemary ladies demand, showing that cost alone cannot reveal a scam. Legitimate charges are posted and metered, while scams hide behind unsolicited offers or fake authority.
Distraction Scams: The Bird Poop Trick and "The Spill"
This is a classic two-person con. One person alerts you to a stain on your clothing, sometimes a white liquid they sprayed on you moments earlier. While "helping" you clean it off, an accomplice works your pockets or bag. It shows up most often in crowded transit hubs, including around Maria Zambrano train station. If a stranger points out a stain, do not let them touch you. Step into a secure, private space, such as a hotel lobby or shop, and check yourself there instead.
Taxi and Rideshare Overcharging
Most Malaga taxi scams involve a driver skipping the meter and quoting a flat "minimum fee" instead, especially for short airport or port trips. Malaga's official airport supplement is posted at around €5.50 as of 2026. Confirm the current tariff card displayed inside the cab before the ride starts. If a driver refuses to run the meter, or names a figure well above that supplement, it is reasonable to get out and find another car. Rideshare apps such as Uber, Bolt, and Cabify lock in a price before you accept the trip, which removes the negotiation entirely.
Restaurant Menu Surprises and Surcharges
Spanish law requires restaurants to display prices for everything they sell, including daily specials written on a chalkboard. Listed prices must already include VAT, so there should be no separate tax line added at the table. Restaurants can legally charge for bread or olives if that charge appears on the menu. It only becomes a problem when it shows up unannounced on the final bill. Skip restaurants near tourist landmarks that post English-only menus with no prices, or that use touts to pull people in from the street.
ATM Skimmers and the "Helpful Local" Trick
Skimming devices occasionally turn up on ATMs in high-traffic areas, including around Plaza de la Constitucion. A skimmer reads and copies your card's data the moment you insert it. Check the card slot for anything loose, added, or misaligned before using a machine. A second version of this scam involves someone jamming the slot, then a "helpful" stranger offering to assist once your card appears stuck. Decline any offer of help at an ATM. Withdraw cash inside a bank branch during business hours instead, so staff are nearby if something goes wrong.
Fake Police: What Real Officers Actually Do
Fake police scams are more associated with Madrid and Barcelona than with Malaga, but the pattern is worth knowing anywhere in Spain. A stranger claims to be an undercover officer, flashes a fake badge, and asks to inspect your wallet for counterfeit bills. Real Spanish police always carry a visible placa (badge) and will not ask to search your cash on the street. If anyone claiming to be police asks for your wallet, insist on continuing the conversation at the nearest police station.
If anyone claiming to be police asks to inspect your wallet on the street, they're impersonating an officer. Real officers carry visible badges and won't make such requests, so call 091 to report the impostor and contact actual authorities.
Malagueta Beach: Don't Leave Bags Unattended
Bag theft from beach loungers is one of the more frequently reported forms of theft along Malagueta beach. The pattern is simple: a bag left unattended while its owner swims can disappear within minutes. Take turns going into the water with a companion, so someone always has an eye on your belongings. Leave passports and spare cards at the hotel, and carry only what you need for the beach that day.
Neighborhoods and Times to Stay Extra Alert
Crowd-dependent scams cluster in the same handful of places: Calle Larios, the entrance to the Alcazaba, and the beachfront promenades. The areas to avoid in Malaga guide breaks down specific neighborhoods worth extra caution. Petty theft risk also shifts once night falls in certain zones. The Malaga safety at night guide covers which areas to treat differently after dark. None of this means avoiding the city center. It means keeping bags zipped and phones out of back pockets in dense crowds.
What to Do If You're Scammed in Malaga
Report incidents to the SATE office (Servicio de Atencion al Turista Extranjero), located at Plaza de la Marina in central Malaga. Confirm current opening hours before visiting, since these can change. Filing a denuncia, a formal police report, is necessary if you plan to claim travel insurance for stolen items. For general emergencies, call 112. To reach the National Police directly, call 091. Keep a copy of any police report for your insurer, and cancel any compromised cards right away.
Further reading: Malaga on Wikivoyage · Malaga on Wikipedia
Frequently Asked Questions
Is Malaga dangerous for tourists?
No. Violent crime against tourists is rare in Malaga. The real risk is opportunistic petty theft and scams, similar to other major Spanish cities but generally milder than Barcelona or Madrid. Staying alert in crowded tourist areas covers most of the risk.
What is the rosemary lady scam in Malaga?
A woman offers a small rosemary branch as a free gift, usually near the cathedral or along Calle Larios. Accepting it, or letting her hold your hand, leads to an unsolicited palm reading followed by a demand for payment, typically €5–€20. The safest response is a firm "No, gracias" without stopping.
Are taxis in Malaga safe to use?
Licensed taxis in Malaga are metered and regulated. Confirm the meter is running before the ride starts, and know that the official airport supplement is roughly €5.50 as of 2026. Rideshare apps like Uber, Bolt, and Cabify show a locked-in price before you accept the trip.
What should you do if you get scammed in Malaga?
Report the incident at the SATE office (Servicio de Atencion al Turista Extranjero) at Plaza de la Marina. File a denuncia, a formal police report, if you need documentation for a travel insurance claim. Call 112 for general emergencies or 091 to reach the National Police directly.
Should you buy Caminito del Rey or Alhambra tickets from third-party websites?
Only from the official ticketing portal for each site, or a reputable, verified aggregator such as GetYourGuide or Tiqets. Some resale sites sell tickets at several times the official rate, or issue vouchers that staff reject at the entrance. Names on tickets are typically checked against ID, so a mismatch can void the entry outright.



