In Spanish law, fraud (estafa) means using sufficient deception, with intent to profit, to induce another person into a disposition of assets that causes loss, to themselves or to a third party. It is set out in articles 248 to 251 of the Spanish Criminal Code (Código Penal). Basic fraud carries six months to three years in prison, and where the amount does not exceed EUR 400 it is punished with a fine of one to three months (art. 248 CP). In the most serious cases the penalty reaches eight years. The whole of any defence turns on a single test: whether the deception was “sufficient” (engaño bastante), and whether there was intent (dolo) from the outset.
This article explains the Spanish offence of estafa, not fraud as defined in the UK, the US or any other system. If you are a foreigner facing an investigation in Spain, the rules below are the ones that apply to your case.
What fraud is and the protected legal interest
Estafa protects a double interest: the victim’s property and, in the background, the socioeconomic order. That is why it sits among the offences against property. Not just any lie qualifies. The law requires deception with enough weight to move an average person to hand over money or assets. That requirement, “sufficient deception”, is the line that separates fraud from a mere breach of contract or a harmless lie, and it is where most of the defence is concentrated.
The elements of fraud
For fraud to exist, several linked elements must come together, and in this order. The sequence is not a technicality: if it breaks, there is no fraud.
Objective elements (in sequence):
- Sufficient deception (engaño bastante). A prior manoeuvre weighty enough to induce error. We return to it below, because it is the core of the offence.
- Error in the victim. The deception produces a false picture of reality in the person who disposes.
- Disposition of assets. Moved by that error, the deceived person hands over money or assets, or assumes an obligation.
- Economic loss. The disposition causes financial harm to the deceived person or a third party.
- Causal link. Each step must cause the next: deception causes the error, the error causes the disposition, the disposition causes the loss.
Subjective element:
- Intent to profit and intent to deceive (dolo). The offender seeks a benefit and acts knowing they are deceiving, intending to do so from the start (art. 248 CP).
The practical rule is simple: the deception must come before and cause the handover. If the money was handed over for another reason and the problem arose later (a deal that went wrong, a payment that stopped), the matter is probably civil, not a criminal fraud.
Minor and basic fraud: the EUR 400 threshold
The amount defrauded marks the first line, inside article 248 itself. If the amount does not exceed EUR 400, the penalty is a fine of one to three months (minor fraud). Above EUR 400 it is basic fraud, punished with six months to three years in prison. To set the penalty within that range, the court weighs the amount defrauded, the harm caused, the relationship between victim and offender and the means used (art. 248 CP).
Where there are several frauds carried out under a single preconceived plan, the rules on the continued offence apply (art. 74): the penalty for the most serious offence is imposed in its upper half and, for offences against property, the court looks at the total harm caused. In practice, that can substantially raise the penalty for a trickle of small frauds.
Penalties: from minor fraud to the most aggravated cases
Fraud does not carry a single penalty but a scale running from a fine up to eight years in prison. This is the full structure, with its legal basis:
| Type | Penalty | Legal basis |
|---|---|---|
| Minor fraud (amount not over EUR 400) | Fine of one to three months | art. 248 CP |
| Basic fraud (over EUR 400) | Six months to three years in prison | art. 248 CP |
| Computer fraud and fraud with means of payment | Six months to three years in prison | art. 249 CP |
| Aggravated fraud (one circumstance of art. 250) | One to six years in prison and a fine of six to twelve months | art. 250.1 CP |
| Hyper-aggravated fraud (concurrence of circumstances or over EUR 250,000) | Four to eight years in prison and a fine of twelve to twenty-four months | art. 250.2 CP |
| Improper fraud (art. 251) | One to four years in prison | art. 251 CP |
The jump between bands is large, which is why the legal characterisation of the facts is everything. Whether a case falls under basic fraud (with possible alternatives to prison) or hyper-aggravated fraud (with a four-year floor) can depend on a single fact: the exact amount, or whether one of the article 250 circumstances applies.
Aggravating factors (article 250)
Article 250 raises the penalty to one to six years in prison and a fine of six to twelve months when the fraud involves any of these circumstances:
- It affects essential goods, housing or other items of recognised social utility.
- It is committed by abusing another’s signature, or by taking, concealing or destroying, in whole or in part, a file, record, protocol or public or official document.
- It affects goods forming part of the artistic, historical, cultural or scientific heritage.
- It is especially serious, given the scale of the harm and the economic situation in which it leaves the victim or their family.
- The value defrauded exceeds EUR 50,000, or it affects a large number of people.
- It is committed by abusing the personal relationship between victim and offender, or the offender exploiting their business or professional credibility.
- Procedural fraud is committed (manipulating proceedings to mislead the judge or court).
- At the time of the offence the offender had already been finally convicted of at least three offences of the same chapter (repeat offending).
Article 250.2 reserves a higher penalty, four to eight years in prison and a fine of twelve to twenty-four months, for the gravest cases: where circumstances 4, 5, 6 or 7 concur with circumstance 1, or where the value defrauded exceeds EUR 250,000. That EUR 250,000 threshold is, in practice, what turns an economic fraud into one of the most serious property offences in the Code.
Computer fraud and the modalities of article 249
Alongside the “classic” estafa of article 248, article 249 punishes, with the same penalty of six months to three years in prison, a group of conducts designed for technological and payment-instrument fraud:
- Computer manipulation. Using a computer manipulation or similar device to achieve an unauthorised transfer of an asset to the detriment of another. This is the legal basis for much of phishing and online banking fraud.
- Fraudulent use of cards and cheques. Operating to the detriment of the holder or a third party using credit or debit cards, traveller’s cheques or the data held on any of them.
- Manufacture and supply of instruments. Manufacturing, importing, possessing or supplying computer programs, equipment or instruments specifically designed to commit these frauds.
- Unlawful holding or acquisition of means of payment. For the mere holding or acquisition, knowing their unlawful origin, of fraudulently obtained payment instruments, the article applies the penalty in its lower half.
In everyday terms, this article underpins the most common forms of fraud today:
- Phishing, smishing and impersonation, and the unauthorised transfers that follow.
- Investment fraud and pyramid schemes, including crypto.
- Property fraud: deposits or non-existent rentals, double sales.
- Romance scams.
Improper fraud (article 251)
Article 251 punishes, with one to four years in prison, a set of frauds that do not fit the classic deception-error-disposition scheme but which the law treats as fraud. There are three cases:
- False power of disposal. A person who, falsely claiming a power of disposal they do not have over movable or immovable property, sells, charges or leases it to another.
- Double sale and concealment of charges. A person who disposes of movable or immovable property while concealing any charge over it, or who, having already sold it, sells, charges or leases it again before the final transfer to the buyer.
- Simulated contract. A person who enters into a simulated contract to the detriment of another.
This is a common offence in property and corporate transactions, where the line between bad contractual practice and a crime can be very thin.
Can a company commit fraud?
Yes. Since the 2010 reform, a legal person can be criminally liable, and fraud is one of the offences for which that liability is expressly provided (art. 251 bis CP). The company is liable in addition to the individuals (directors, managers or employees) who physically commit the offence.
When the company is liable. Article 31 bis makes a legal person liable in two ways: for offences committed by its legal representatives or by those with decision-making power, acting in its name and to its benefit; and for those committed by subordinate employees where the duty to supervise them was seriously breached.
How it can be exempt: compliance. A company can be exempt from liability if, before the offence, it had adopted and effectively implemented an organisation and management model (a compliance programme) suited to preventing offences of that nature. Article 31 bis requires that model, among other things, to identify the activities at risk, set decision-making protocols, manage the resources to prevent the offence, impose a duty to report risks to a supervisory body with autonomous powers, and provide a disciplinary regime and periodic review of the model itself.
What penalties apply. Article 251 bis sets, for the legal person, a fine calculated on the amount defrauded: from three to five times the amount defrauded if the offence committed by the individual carries a prison penalty of more than five years, and from two to four times the amount in the remaining cases. On top of that fine, the more serious penalties listed in article 33.7 may be imposed (among them dissolution of the company, suspension of activities, closure of premises, a ban on operating or judicial intervention), under the rules of article 66 bis.
Fraud versus related offences
Getting the characterisation right from the start changes the offence and the penalty. Estafa is often confused with other figures, and drawing the line is usually the first ground of defence.
| Fraud (estafa) | Misappropriation | Disloyal administration | Theft | |
|---|---|---|---|---|
| How the asset reaches the offender | Through prior deception that triggers the handover | Received lawfully (deposit, agency, administration) | A third party’s assets are managed with powers to do so | The offender takes it without the owner’s consent |
| Core of the offence | The deception preceding the handover | Failing to return, or diverting, what was received | Exceeding or abusing administration powers, causing loss | The taking of the item |
| Prior deception | Yes, essential | No | No | No |
The most relevant distinction in practice is with misappropriation: in fraud the deception is prior and triggers the handover; in misappropriation the item is received lawfully and the problem arises later, when it is not returned or is diverted. Against disloyal administration, the key is that there is no deception triggering a handover, but an abuse by someone who already held powers to manage another’s assets. And against theft, that the fraud victim hands over the asset (deceived), whereas in theft the asset is taken without consent.
Proving sufficient deception and intent in complex economic cases
This is where most fraud cases are won or lost, and where we concentrate the defence. A conviction requires proving two things that are not always obvious: that the deception was sufficient, and that there was intent from the outset.
“Sufficient deception” is not just any lie. The deception must be weighty enough to induce error in an average person placed in the victim’s specific position. Case law qualifies this with the idea of self-protection: where the victim, with the minimum diligence required in ordinary dealings, could have discovered the falsehood and did not, the deception may not be “sufficient” in criminal terms, and the matter shifts towards the civil courts. This is not about blaming the victim, but about defining how far criminal law protects mere credulity.
Intent is almost always proved by inference. No one confesses to having deceived from the start. Intent is therefore inferred from objective facts: the offender’s real solvency at the time of the contract, what they did with the money, whether they concealed essential information, whether from the outset they had no intention or ability to perform. The difference between a deal that failed (no offence) and a fraud (prior intentional deception) lies precisely in that initial moment.
Where the proof is. In complex economic dealings, that proof rests on emails, contracts, bank records, accounts and, at times, intercepted evidence. Contesting their validity, their chain of custody and, above all, their interpretation is where much of the case is decided. The same email can read as proof of deception or as a legitimate negotiation, and that reading is built by the defence.
Is attempted fraud punishable?
Yes. There is an attempt where the offender deploys the deception aimed at obtaining the disposition but the result, the loss, does not occur for reasons beyond their control: because the victim does not hand over the money, or discovers the scheme in time. An attempt is punished with the penalty lowered by one or two degrees from that of the completed offence (arts. 16 and 62 CP), which opens a real margin of defence where the disposition was never completed.
How a fraud charge is defended
An effective defence does not just deny the facts: it attacks the elements of the offence one by one. These are the four lines that yield the most, and they are almost always combined:
- There was no sufficient deception. The manoeuvre lacked the weight to induce error, or the victim could have discovered the truth with minimum diligence (self-protection). If the deception falls, the fraud falls.
- Intent and intent to profit are missing. The accused acted in good faith; what happened was a deal that went wrong, not an intention to deceive from the start.
- It is a civil breach, not a criminal one. There was no deception before the handover: the money was handed over on a valid basis and the problem arose later. It belongs to the civil courts.
- Insufficient or void evidence. Proof of the deception or the intent does not meet the criminal standard, or the evidence was obtained in breach of rights.
To these are added, depending on the case, the dispute over the amount (which decides the penalty band and whether the EUR 250,000 threshold is crossed), challenging the article 250 aggravating factors and, where appropriate, repairing the harm, which can mitigate the penalty. If you are under investigation, instructing a criminal defence lawyer in Spain experienced in economic crime early makes the difference: the first decisions (what is stated, what is produced, how the amount is set) shape the whole proceedings.
A worked example
Take an illustrative case. A person invests EUR 60,000 in a project presented to them by an acquaintance, with contracts, profit forecasts and regular meetings. The project fails and the money is lost. Is it fraud? It turns on one point: whether the person who received the money had, from the start, a real intention and ability to put it into the project (a failed business, a civil matter), or whether that project never existed and the money was diverted from day one (prior intentional deception, fraud, and aggravated for exceeding EUR 50,000). All the evidence will revolve around the bank movements and what the accused knew and could do at the moment of receiving the money. It is a hypothetical example, but it reflects the usual battlefield: not the later events, but the initial intent.
If you are a victim: where and how to report fraud in Spain
If you are the victim, fraud is reported to the Policía Nacional or the Guardia Civil, or directly at the investigating court (juzgado de instrucción), providing all the documentation available (contracts, emails, payment records, conversations). For frauds committed online, the report can equally be filed with those forces, which have units specialised in cybercrime. Gather the evidence as soon as possible, because in digital fraud the traces (accounts, domains, communications) disappear quickly. If you are a foreigner, you can report and follow the case in Spain even from abroad through a lawyer; Spanish proceedings are conducted in Spanish, so working with counsel who can act in your language matters from the first step.
Frequently asked questions
From what amount is fraud a crime?
Any fraud is an offence; what changes is its seriousness. If the amount does not exceed EUR 400, it is minor fraud, punished with a fine of one to three months. Above EUR 400 it is basic fraud, with six months to three years in prison (art. 248 CP).
What is the penalty for fraud over EUR 50,000?
Where the value defrauded exceeds EUR 50,000, aggravated fraud under article 250 applies, with one to six years in prison and a fine of six to twelve months. If it exceeds EUR 250,000, the penalty rises to four to eight years in prison and a fine of twelve to twenty-four months (art. 250.2 CP).
Is failing to pay a debt fraud?
Not by itself. Non-payment is usually a civil breach. It is only fraud if there was prior, sufficient deception aimed at obtaining the money, with an intention not to perform from the start.
What is the difference between fraud and misappropriation?
In fraud there is prior deception that triggers the handover of the asset. In misappropriation you lawfully receive something (a deposit, a sum to administer) and the problem arises later, when you fail to return it or divert it. The characterisation changes the offence and the penalty.
Can a company be convicted of fraud?
Yes. A legal person can be criminally liable under articles 31 bis and 251 bis, alongside the directors and managers who act. The company may be exempt if it proves an effective compliance programme adopted before the offence.
What if I am a foreigner or the case is cross-border?
The Spanish offence of estafa applies to facts connected with Spain regardless of your nationality. Proceedings are conducted in Spanish, with the right to an interpreter, and you can be defended in Spain even while abroad. Early advice from Spanish counsel is decisive, because the characterisation and the evidence are built from the outset.
Does fraud become time-barred?
Yes. Like all offences, fraud is subject to a limitation period that depends on the maximum penalty for the form in question: the more serious the type (for example the aggravated form under article 250), the longer the period. Because that calculation varies with the specific characterisation of the facts, have a criminal lawyer determine the period applicable to your case before ruling anything out.
If you are under investigation or charged with fraud in Spain, review your defence as soon as possible with a criminal defence lawyer in Spain specialised in economic crime. In fraud, the characterisation of the facts and the proof of deception decide the case, and they are built from the very first moment. If the matter touches on laundering the defrauded money, it also helps to understand how pre-trial detention in Spain can apply in serious economic cases.
Official source: Organic Law 10/1995, of 23 November, on the Criminal Code (BOE, consolidated text).