Beware of fake messages pretending to be from Poczta Polska
Poczta Polska (Polish Post) is warning of another phishing campaign in which cybercriminals are impersonating our company and attempting to extort data and funds from customers.
The scam involves sending messages claiming a shipment has been held. Senders claim a small payment is required, presented as a customs or tax fee, or a fee for further processing of the shipment. The message contains a button encouraging immediate payment.
How to recognize a fraud attempt?
The following news should raise particular caution:
- informing about the detention of the shipment due to unpaid fees,
- creating time pressure and the need to act quickly,
- requiring a small amount to be paid to unblock the shipment,
- containing buttons or links leading to payment pages,
- coming from suspicious email addresses or phone numbers.
Cybercriminals often use small amounts, hoping that recipients will not verify them carefully.
What to do after receiving such a message?
If you receive a message like this:
- do not click on links or buttons in the content,
- do not provide login details, payment card details or authorization codes,
- verify the status of the shipment only through official Poczta Polska channels,
- delete the message and report it as a phishing attempt.
Safety first
Poczta Polska constantly monitors cases of abuse involving the unauthorized use of its name and image. We urge customers to exercise particular caution when dealing with messages regarding shipments and payments, and to always verify their authenticity before taking any action.
Where to report attempted fraud?
If you receive a message pretending to be from Poczta Polska, please report it. This will help us more quickly block websites used by criminals and limit the reach of phishing campaigns.
- Please send reports of attempts to impersonate Poczta Polska to the following address: jakoincident@poczta-polska.pl
- Report suspicious messages to CSIRT NASK via the website https://incydent.cert.pl or by sending a suspicious SMS message to 8080.
- If you provide payment or login details, please contact your bank immediately and change the passwords for the services you use.