Course Content
Finances at a New Address

Exercise: Recognize a BLIK scam

Imagine you are selling something on Vinted. You received a message: “Hi, I’d love to buy! I paid through InPost courier service. Click on the link to accept the payment: inpost-przesylki.pl/confirm-transfer.”

  • What are the elements of this message that should arouse your suspicions?
  • What should I/should I do in such a situation?

Scammers send you SMS messages that impersonate courier companies (InPost, DPD), telecommunications companies (Play, T-Mobile), or banks.

Typical scenarios:

  • Fake SMS from “InPost”: You get a message that the package is waiting for a surcharge of several zlotys. In the SMS is a link. When you go to the link, you are taken to a fake page that asks you to enter your bank card details. This is how scammers steal your data.
  • Fake SMS from “bank”: You get a message saying you must click on a link to update your information because your account will be blocked. This also takes you to a fake site.
  1. Don’t click on links from text messages you don’t expect
  2. If you get a text message about a parcel surcharge, check the status of the parcel in the official app or on the courier’s website by entering the parcel number
  3. Remember, the bank never asks for login or card details via SMS
  1. Don’t click on any links!
  2. Do not give out your data or passwords.
  3. Report the incident to CERT Polska (Computer Emergency Response Team) at: https://incydent.cert.pl/.
  4. If in doubt, call your bank’s official hotline or the police emergency number 112.

Remember, everyone has the right to make a decision at their own pace. If someone pressures you, claiming that “the opportunity will not be repeated,” it is most likely an attempt at fraud.