Valletta's St John co-cathedral is warning visitors of "fake tickets" sold by social media profiles and websites impersonating the foundation that cares for the 16th-century building.
"We have been made aware of a scam that is targeting our visitors. Fraudulent profiles and domains are being created to impersonate the St John's Co-Cathedral Foundation, with the intention of selling fake tickets," it warned on Facebook.
"Please note that all tickets must be purchased directly through our official website and authorised channels. Do not purchase visitor entry tickets, concert tickets, or performance tickets from third-party sources."
The foundation added it would never send unsolicited links or ask for sensitive information via messages or emails.
It would also never ask for personal details, passwords, or PINs.
It urged people to report suspicious messages on 2122 0536 or info@stjohnscocathedral.com