Komenda Główna Policji:
We warn against false information concerning the coronavirus (COVID-19) epidemic that urges bank customers to make financial transactions. This warning is addressed to customers of all Polish banks.
Criminals use announcements and false information related to the coronavirus (COVID-19) epidemic as a backdrop for their activities. They impersonate institutions of public trust, such as banks and central, state and local government offices.
The messages sent contain links leading to criminals’ websites, whose sole purpose is to steal internet banking login details and passwords, as well as authorization codes that enable transfers to criminals’ accounts to be approved.
In some cases, the links may lead to websites containing malicious code that takes control of the customer’s device on which the message was received.
Officers warn:
Victims of attacks who fail to exercise caution may lose their savings. In addition, unaware consumers who disclose their identity to criminals may enable it to be used to conclude agreements in their name and, consequently, for example, incur financial liabilities.
What do the services recommend?
- we remind you that the only genuine sources of information are announcements issued by the services and/or posted on official websites. Because of the need to limit the spread of COVID-19, the infectious disease caused by the coronavirus, representatives of the highest state authorities are also providing regular announcements through the mass media;
- check the browser address bar to see whether the web address matches your bank’s website address. If the address differs from usual, do not log in on that website—do not provide your details there and notify your bank;
- always read very carefully the content of every SMS containing an authorization code or the authorization message sent through your bank’s mobile application. If your bank allows it, replace SMS authorization with authorization through the mobile application;
- if you suspect that you are the victim of online fraud, report it as soon as possible to your bank, the nearest Police unit, and then the CERT.PL incident response team (at https://incydent.cert.pl/). The institutions listed above will provide you with information about the next steps/actions.
KGP adds:
Remember!
During this particular period, sending an email may prove to be the most effective way to contact your bank. Due to epidemiological restrictions that also affect banks and their employees, the time needed to connect by phone with a consultant may be longer. Try to understand the situation. Your email report will be analyzed and appropriate action will be taken.