What this is and why it works
Most of the fraud a visitor runs into in Mexico does not happen down a dark alley. It happens at a counter with a logo, in a taxi with visible plates, or at a card terminal that looks entirely ordinary. The person cloning your card is often wearing a bank or hotel uniform. The person selling the timeshare package has an air-conditioned office, a printed contract and a professional smile. That appearance of legitimacy is the whole mechanism: travellers lower their guard around a uniform or a logo because they associate those symbols with an institution, not with one particular person who might be lying.
The other trait they share is speed. Every one of these scams depends on the victim deciding something within seconds: signing before reading, entering a PIN before checking the amount, getting into the taxi before asking the fare. None of them work if there is time to think, and that is the single most useful fact in this whole piece. The sections that follow cover five specific mechanisms — ATMs, terminals, taxis, timeshare and street tours — and exactly what to do the moment they happen, not afterwards, when it is too late for almost everything.
ATMs and the cloned card
Card cloning almost always happens at standalone machines: the ones on the street, inside a bar or bolted to a convenience store, not the ones inside a bank branch under camera watch. A thin device fits over the original slot and copies the magnetic stripe of every card that enters, while a tiny hidden camera, or a fake keypad laid over the real one, records the PIN typed in. Whoever installs the device does not need to be present: they return days later to collect it with dozens of cards' data already stored, and the fraudulent charge usually shows up weeks afterwards, far from Mexico.
The practical defence is simple and needs no technical skill. Use ATMs inside a bank branch, during office hours, with a visible guard, and avoid the ones standing alone on the street or in bar districts. Before inserting the card, wiggle the slot with your hand: if it gives or moves, something is fitted over it and that machine should not be used. Covering the keypad with your other hand while entering the PIN defeats most hidden cameras. If an unfamiliar charge appears, calling the bank straight away is usually enough to reverse it.
The currency-conversion trick at the terminal
Dynamic currency conversion, known as DCC, is the most legal fraud of them all: the terminal asks whether to charge in dollars or pesos, and choosing dollars feels more convenient because you know instantly how much you are paying. The catch is that the exchange rate is not set by your own bank but by the merchant, and it usually carries a margin of ten to fifteen percent above the real rate. There is no technical trickery here: the machine does exactly what it says, and the customer signs a receipt on which the markup is printed, though almost nobody checks it before signing.
The instruction is always the same and works at any terminal or ATM in the country: choose the option in Mexican pesos, never in dollars, even if the machine pushes back or the clerk suggests otherwise. Your card network — Visa, Mastercard, whichever it is — will apply its own exchange rate once the charge reaches your home bank, and that rate is usually better than anything offered at the counter. Saying clearly "en pesos, por favor" before the charge goes through avoids the problem almost every time, and cancelling and redoing the transaction is fine if the wrong option was already tapped.
Taxis and fake cooperatives
Airports and bus stations have taxi counters with a vest, a badge and a printed fare list that look entirely official, and in most cases they are: they charge through a prepaid ticket at a fixed price that is usually double or triple what the same ride costs through a ride-hailing app. It is not fraud in the legal sense — the price is posted and the customer agrees to it when paying — but it relies on nobody knowing that a much cheaper option exists fifteen metres away, out on the arrivals concourse or just outside the terminal perimeter.
Outside the terminals, the most common variant is the street taxi that claims its meter is broken and negotiates an inflated price once already moving, or that takes a deliberately long route through a city the passenger does not know. The simplest defence is not to rely on street taxis in big cities: using a ride-hailing app, which fixes the price before you get in and logs the route and the plate, removes practically the whole problem. If a street taxi is the only option, agree the price before getting in and check the visible plate matches the vehicle.
The welcome desk and the timeshare
The mechanism almost always starts the same way: someone with a badge greets the traveller right off the luggage belt or in the hotel lobby, offers a gift, a free transfer or tourist information, and asks in return for just ninety minutes for a presentation with breakfast included. Those ninety minutes turn into three or four hours of high-pressure selling, with several salespeople taking turns and discounts that only exist "today". The contract signed at the end is legal, clearly worded, and the buyer accepts it of their own free will, even if exhausted after hours unable to leave the table.
Mexican consumer protection law gives five business days to cancel a purchase of this kind without penalty, but exercising it requires sending the cancellation in writing and keeping proof of delivery, something the salesperson almost never volunteers during the pitch. The most effective strategy is not to let the conversation start at all: decline any "gift" offered at the airport or in the hotel lobby that is conditional on attending a presentation, however appealing the free transfer or the tour discount sounds. No genuine need for tourist information requires ninety minutes at a table with a commissioned salesperson and no way to leave.
The phone-number switch on street tours
Outside busy archaeological sites and museums, people appear presenting themselves as certified guides or discount ticket sellers, and ask for payment upfront by transfer to a phone number, instead of cash or card handed over face to face at the moment the service is delivered. At the moment of booking the number exists, replies promptly to messages and even sends a confirmation with a logo that looks entirely official; the problem shows up the next morning, when the number no longer answers or has changed owner, and there is no ticket and no guide waiting at the agreed meeting point.
The rule that avoids this fraud is never to pay in advance to an unknown phone number, however official the confirmation received looks. Tickets for archaeological sites and federal museums are bought at the official window, never from someone approaching in the queue or the car park, and a certified guide wears a visible badge issued by the relevant authority, not just a shirt with an embroidered logo. Paying at the moment, in cash or by card, face to face with the person providing the service, removes practically any chance of the number changing hands that same night.
What people always ask
These are the six questions that come up most often about fraud in Mexico, answered concretely and without softening what has no easy fix. None of the scams on this list require the traveller to be careless or naive: most are specifically designed to look like normal procedures, with uniforms, counters and contracts that mimic legitimate processes perfectly. Recognising them has nothing to do with travel experience and everything to do with knowing in advance the five or six specific mechanisms that repeat across the whole country, from Cancún to Mexico City, with barely any variation.
It is worth repeating the central idea of the whole piece: almost all of these scams depend on speed and on an appearance of legitimacy, never on darkness or isolation. A tampered ATM sits on a busy street in broad daylight, and a timeshare salesperson wears a suit and works from an air-conditioned office. The defence is not blanket distrust of the country but deliberate slowness: taking a minute before signing, entering a PIN or getting into a vehicle is usually enough to avoid the vast majority of these problems.