Cybersecurity alerts issued in Poland over phishing and smishing scams

Cybersecurity authorities and financial institutions in Poland are warning against increasing phishing and smishing campaigns. CERT Polska has identified a phishing campaign where criminals impersonate the telecommunications operator Play. These fraudulent emails claim there are unpaid invoices to create a sense of urgency, directing users to fake websites designed to steal login credentials and credit card information.

Simultaneously, VeloBank has issued an alert regarding smishing attacks, where scammers use SMS messages to impersonate trusted entities such as banks, courier services, or energy providers. These messages often claim accounts are blocked to trick recipients into clicking malicious links or installing harmful applications. Experts advise users to avoid clicking links in unsolicited messages and to always access banking services through official apps or by manually typing the bank's address into a browser.