
Exercise: Recognize a BLIK scam
Imagine you are selling something on Vinted. You received a message: “Hi, I’d love to buy! I paid through InPost courier service. Click on the link to accept the payment: inpost-przesylki.pl/confirm-transfer.”
- What are the elements of this message that should arouse your suspicions?
- What should I/should I do in such a situation?
“Fake SMS” scam
Scammers send you SMS messages that impersonate courier companies (InPost, DPD), telecommunications companies (Play, T-Mobile), or banks.
Typical scenarios:
- Fake SMS from “InPost”: You get a message that the package is waiting for a surcharge of several zlotys. In the SMS is a link. When you go to the link, you are taken to a fake page that asks you to enter your bank card details. This is how scammers steal your data.
- Fake SMS from “bank”: You get a message saying you must click on a link to update your information because your account will be blocked. This also takes you to a fake site.
How to protect yourself?
- Don’t click on links from text messages you don’t expect
- If you get a text message about a parcel surcharge, check the status of the parcel in the official app or on the courier’s website by entering the parcel number
- Remember, the bank never asks for login or card details via SMS
What to do if you suspect fraud?
- Don’t click on any links!
- Do not give out your data or passwords.
- Report the incident to CERT Polska (Computer Emergency Response Team) at: https://incydent.cert.pl/.
- If in doubt, call your bank’s official hotline or the police emergency number 112.
Remember, everyone has the right to make a decision at their own pace. If someone pressures you, claiming that “the opportunity will not be repeated,” it is most likely an attempt at fraud.