CERT Orange Polska warns of new OLX phishing scams

CERT Orange Polska has issued a warning regarding a new phishing scam targeting users of the OLX marketplace. Unlike previous fraud attempts involving fake shipping notifications, this variation uses SMS messages—often appearing under the sender name ‘Verify’—to claim that account verification is required.

The fraudulent messages direct victims to a sophisticated counterfeit website that mimics legitimate OLX listings, including correct product details and seller information to build trust. The site ends in the suspicious domain ‘eu.cc’. Once on the site, users are prompted to select a bank for verification, leading to a fake login page designed to steal banking credentials and authorization codes.

Reports indicate that scammers are specifically exploiting high demand for products like the PS5 Pro to lure victims with attractive prices. Users are advised to carefully inspect website addresses before entering any personal or financial information.