Correos delayed fraud detection protocol by two weeks into regularization process

caught between two incompatible mandates with no clear way forward
Postal workers face contradictory instructions on data retention and fraud reporting that violate their signed confidentiality agreements.

En España, la institución encargada de gestionar miles de solicitudes de regularización migratoria cada día se encontró, dos semanas después de haber comenzado, con un protocolo de detección de fraude que llegó tarde y cargado de contradicciones. Correos, convertida por mandato gubernamental en primer punto de contacto administrativo con documentos potencialmente falsificados, vio cómo sus empleados quedaban atrapados entre obligaciones incompatibles: detectar lo que no se les enseñó a detectar, y conservar datos que habían prometido no guardar. Es la historia recurrente de las instituciones que improvisan sobre la marcha cuando la urgencia política supera a la previsión institucional.

  • Durante dos semanas, unas 3.500 solicitudes diarias de regularización pasaron por las ventanillas de Correos sin ningún protocolo activo para identificar documentación falsa.
  • El manual V05, publicado el 8 de mayo, llegó tarde y con instrucciones contradictorias: los trabajadores debían detectar fraudes sin formación alguna para hacerlo, y retener datos que sus propios acuerdos de confidencialidad les prohibían conservar.
  • Los sindicatos policiales ya habían advertido que la verificación de documentos requiere formación especializada que los empleados postales simplemente no tienen, poniendo en cuestión la legalidad y eficacia del sistema.
  • La contradicción interna del manual —guardar datos para reportar fraude versus destruirlos según el acuerdo de confidencialidad— coloca a los trabajadores ante una disyuntiva sin salida legal clara.
  • Correos, bajo la dirección de Pedro Saura, no ha ofrecido ninguna explicación pública sobre el retraso del protocolo ni sobre el destino de las miles de solicitudes ya procesadas sin salvaguardas.

Correos pasó dos semanas procesando en torno a 3.500 solicitudes diarias de regularización migratoria antes de activar cualquier protocolo para detectar documentos fraudulentos. Cuando el manual llegó —el 8 de mayo, con el proceso ya en marcha— no resolvió el problema: lo complicó.

El Gobierno había encomendado a Correos un papel administrativo aparentemente sencillo: recibir solicitudes, volcar datos en el sistema y remitirlas. Sus 373 oficinas participantes se convirtieron así en el primer punto de contacto con una documentación que podía ser falsa. La respuesta de la empresa fue el manual V05, que instruía a los empleados a señalar cualquier papel sospechoso y reportarlo a la unidad de fraude de inmigración, conocida como UTEX. El problema es que no les enseñaba cómo hacerlo. Ningún ejemplo, ninguna guía, ninguna formación. Solo la orden de detectar lo que no sabían detectar. Los sindicatos policiales ya habían advertido públicamente que esa labor requería conocimientos especializados que los trabajadores postales no poseen.

Pero la contradicción más grave era interna al propio manual. En una sección, se ordenaba conservar los datos del solicitante cuando se sospechara fraude. En otra, apenas unas páginas antes, se prohibía expresamente archivar cualquier documento o dato personal tras prestar el servicio. Los empleados, además, habían firmado acuerdos de confidencialidad. Cumplir con el reporte de fraude implicaba violarlos; cumplir con la confidencialidad impedía completar el formulario de denuncia, que exigía metadatos concretos del expediente.

Fuentes sindicales señalaron que Correos había advertido que sus oficinas se habían convertido en un colador para solicitudes incompletas o problemáticas, y que el manual era un intento tardío de corregirlo. El daño, sin embargo, ya estaba hecho: miles de solicitudes habían avanzado por el sistema sin ningún filtro. Ante las preguntas sobre las contradicciones del manual y el retraso del protocolo, Correos no ofreció ninguna respuesta pública. Sus empleados quedaron solos ante una encrucijada sin salida clara.

Spain's postal service, Correos, spent two weeks processing roughly 3,500 immigration regularization applications per day before activating any protocol to catch fraudulent documents. When the fraud detection manual finally arrived on May 8th—two weeks into the process—it created a tangle of contradictory instructions that left postal workers in an impossible position.

The government had tasked Correos with a straightforward administrative role: receive applications, capture data into the system, and pass them along. The company operates 373 offices participating in the regularization program. But as applications piled up at the counter, something became clear to management: the postal workers were the first line of contact with documents that might be forged. So Correos issued a new manual—version V05—instructing employees to flag any paperwork that seemed suspicious and report it to the immigration authority's fraud unit, known as UTEX.

The problem was immediate and structural. The new instructions told postal workers to fill out a form whenever they suspected a document was fake, noting the applicant's details, the case number, and their concerns about which papers looked fraudulent. They were told not to warn the applicant that something looked wrong. But the manual provided no training on how to actually identify forged documents. No examples. No guidance. Just the instruction to detect what they had no expertise in detecting. Police unions had already argued publicly that only trained officers should perform this work—that document verification required specialized knowledge postal workers simply did not possess.

There was more. The same manual that told workers to flag suspicious documents also contained a direct contradiction. In one section, it instructed employees to preserve applicant information when they suspected fraud. In another section, just pages earlier, it explicitly told them not to keep or archive any documents or personal data after providing service. Workers had also signed confidentiality agreements promising to protect applicant information. Now they were being asked to retain data specifically to report suspected fraud—which meant breaking the confidentiality pledge they had signed.

Union sources told the newspaper that this contradiction was not accidental. Correos, they said, had realized its offices had become a sieve for incomplete and problematic applications. The company was trying to plug the leak by turning postal workers into document authenticators. But the legal exposure was real. If a worker kept data to report fraud, they violated confidentiality. If they destroyed data as their agreement required, they could not complete the fraud report form, which demanded specific case metadata.

The timing made the problem worse. Two weeks of processing without any fraud protocol meant thousands of applications had already moved through the system. When asked to explain the new manual and its contradictions, Correos declined to comment. The company, led by Pedro Saura, offered no public account of why the protocol had been delayed, how it would resolve the legal conflicts embedded in the instructions, or what would happen to the applications processed before the safeguards were in place. The postal workers were left to navigate the contradiction themselves, caught between two incompatible mandates with no clear way forward.

Correos placed employees in an unsustainable legal contradiction—formally defined as simple administrative support but practically required to act as document authenticity experts
— Union sources consulted by ABC
If the worker retains data to report fraud, they break their confidentiality pledge. If they destroy data as required, they cannot complete the fraud report form
— Union sources on the manual's contradictions
La Conversación del Hearth Otra perspectiva de la historia
Inventor

Why did it take two weeks for Correos to put fraud detection in place?

Model

The company didn't anticipate the volume or the risk. They were set up to process applications, not verify documents. Once they realized what was flowing through their offices, they scrambled to add a control.

Inventor

But they didn't train anyone to spot forged documents?

Model

No. They just told workers to flag what looked wrong to them personally. A postal clerk is not a document examiner. The police unions made that point clearly—this is specialized work.

Inventor

What's the actual legal problem here?

Model

Workers signed agreements to keep applicant data confidential. The new manual tells them to retain that data to report fraud. Those two things are incompatible. You can't both protect privacy and preserve evidence without explicit legal cover.

Inventor

So what do workers actually do when they see something suspicious?

Model

They're supposed to fill out a form and send it to the immigration authority. But they're also told not to mention it to the applicant. It puts them in the middle of something that should be handled by trained investigators.

Inventor

Did Correos explain any of this?

Model

They refused to comment. Two days the newspaper waited for a response. Nothing.

Inventor

What happens to the applications that went through before the protocol existed?

Model

That's the question no one is answering. They're already in the system.

Quieres la nota completa? Lee el original en ABC ↗
Contáctanos FAQ