CERT Polska warns of tax refund and traffic fine phishing scams

CERT Polska has issued warnings regarding new phishing campaigns targeting Polish citizens. Scammers are using deceptive messages involving alleged traffic fines and tax refunds to steal sensitive information.

In one campaign, fraudulent SMS messages claim a driver has committed a traffic violation and must pay a fine immediately. These messages contain links to websites that impersonate the official e-TOLL service, where criminals attempt to collect vehicle registration numbers and credit card details.

A second campaign targets taxpayers by promising a refund of overpaid taxes. Victims are directed to fake websites mimicking the Tax Office (Urząd Skarbowy) to steal login credentials, personal identification numbers (PESEL), and payment card information. These scams often rely on creating a sense of urgency or financial incentive to manipulate recipients into clicking malicious links.