Poczta Polska warns customers against cybercriminals and advises caution on the internet
Since the beginning of the ongoing pandemic, Poczta Polska has noted a disturbing increase in customer reports of cybercrimes involving phishing, i.e., the impersonation of a brand name to obtain data or steal money. The company's customers have been targeted by attacks, so Poczta Polska urges customers to exercise extreme caution online and report any such cases to law enforcement.
Poczta Polska (Polish Post) is specifically warning against three of the most common forms of customer attacks. The first involves cybercriminals impersonating Poczta Polska and sending fake text messages claiming a parcel has been held for disinfection. The message contains a link that redirects to a fake website created specifically for the purpose of the crime, purporting to track the parcel, along with false information about the hold. To ensure the parcel reaches the recipient, the victim is encouraged to pay extra. After clicking the "PAY" button, the system redirects to a fake payment intermediary website, and then – after selecting a bank – the customer is directed to a fake website ostensibly their own bank. The attack is so well-crafted that the customer is led to believe they are logging into their bank's website, but this website is also fake (the link in the address is different from the bank's address – it's worth checking for typos in the address). The customer defines the person to whom the amount is to be transferred and approves the transfer with a code received via text message (the code is visible to the thief because the website is fake and every transaction performed on the website is monitored in real time). The amount the customer was supposed to pay in the received text message is not equivalent to the amount stated in the text message (PLN 1.00); in fact, it may be several hundred times higher.
At the same time, Poczta Polska reminds that the shipments it handles are safe and there is no need to disinfect them.
Another form of fraud involving the Polish Post Office is fake emails that may contain malware or redirect to a fake website. In such cases, you should ignore the message, avoid clicking on attachments and links, and report it to the appropriate authorities.
The company also warns against cybercriminals who attempt to steal customer data or money by impersonating the Polish Post Office and encouraging participation in fake contests where the prize could be, for example, a mobile phone. In such situations, you should also avoid responding to suspicious messages and ignore attachments and links, as they may contain malware.