CERT Polska warns of PGE phishing scam claiming electricity overpayment

CERT Polska issued an alert about a renewed phishing campaign in which fraudsters impersonate the Polish power utility PGE. The messages claim that recipients have received an over‑payment for electricity due to a system error and invite them to click a link to a fake login portal to retrieve the funds. The agency advises users to verify any refund information only through the official PGE website or contact centre, and to report suspicious emails or SMS messages to CERT Polska via its portal, the mObywatel app, or the 8080 hotline.

The warning highlights that the counterfeit websites closely resemble the legitimate PGE site but differ in the URL, and that the attackers aim to harvest login credentials. CERT Poland urges the public not to provide personal data on the fraudulent pages.