Costa Rica Reports 41% Surge in Digital Fraud as Cybercriminals Target Travel Sector and Payment Portals

Cyber fraud cases in Costa Rica jumped 41% with losses hitting ₡6 billion. Authorities warn of cloned travel sites and SINPE payment traps targeting tourists.

By: AXL Media

Published: Apr 20, 2026, 10:02 AM EDT

Source: The Tico Times

The Industrialization of Digital Deception

The landscape of criminal activity in Costa Rica has shifted dramatically toward the digital realm, with 10,027 reported cases of online fraud in 2025—a staggering 41% increase from the previous year. Law enforcement officials have identified a pattern of "professionalized" scams where illicit groups create polished, high-fidelity clones of legitimate banking and travel websites. By altering only a single character in a URL, these operators intercept sensitive banking data, leading to a direct economic impact of approximately ₡6 billion in stolen assets.

Fraudulent Travel Agencies and Ghost Bookings

A significant portion of recent criminal activity has targeted the tourism sector, Costa Rica's primary economic driver. Judicial authorities recently dismantled a sophisticated ring that operated a "chameleon" travel agency, frequently changing its name and physical location to evade detection. This single operation allegedly defrauded 112 victims of ₡165 million by selling nonexistent vacation packages. Beyond simple theft, these groups often use captured credit card details to initiate unauthorized secondary charges, leaving travelers with substantial debt and no travel accommodations.

Vulnerabilities in the SINPE Payment Ecosystem

The rapid adoption of the SINPE instant transfer system has created new opportunities for exploitation. Fraudsters have developed tactics specifically aimed at mobile numbers that remain linked to bank accounts despite being inactive or reassigned. Reports of these payment-based scams rose by 88% compared to the previous year, with losses nearing ₡3 billion. In response, telecommunications providers and financial institutions are implementing real-time reporting protocols to ensure that disconnected phone lines are immediately unlinked from banking profiles to prevent "faceless" transfers.