InPost customers face phishing SMS attacks, CERT Poland issues warning

CERT Poland has issued an alert about a new phishing campaign in which fraudsters send SMS messages that appear to come from the courier service InPost. The messages claim there is a problem with a delivery and contain links to counterfeit websites designed to harvest personal details, payment‑card numbers and other confidential information.

Users are advised to verify any delivery status only through the official InPost app or by manually entering the company's web address, to avoid clicking links in suspicious texts, and to forward dubious messages to CERT Poland on the free number 8080. The scheme targets InPost customers throughout Poland, with a higher risk in large cities such as Warsaw where parcel volumes are high.