Scammers are once again using email to commit crimes. This time, they are impersonating Poczta Polska and sending emails in its name about an alleged package awaiting customs clearance.
Your package is waiting
Your package with the number CP029329384PL is waiting.The package has been declared for customs clearance. Please settle the customs duties and taxes of PLN 18.99 as soon as possible using the link below.
Once the payment is completed, you will receive confirmation, and your package will be delivered as soon as possible.
https://www.poczta-polska.pl/PL029329384/
Thank you
Electronic Sender
Poczta Polska S.A.
For the “package” to arrive, you need to make an “additional payment” by clicking a link that only visually resembles a link to the postal service’s website. After clicking it, you are redirected to another page and a browser warning appears:
Your connection is not private
Hackers may be trying to steal your data (e.g. passwords, messages or credit card information).net::ERR_CERT_COMMON_NAME_INVALID
In reality, the link leads to a completely different website created by the scammers. That is exactly what the scammers are waiting for. By visiting such a website and sharing your data, you give the scammers access to your money.
After checking the suspicious package number in the postal tracking system, we receive a message stating that there is no data for such a package and asking us to check whether the information is correct. This additionally confirms that we are dealing with an attempted scam.
We urge caution.
Poczta Polska itself warns against this type of fraud:
⚠️ How do scammers operate?
📩 They send emails containing information about an alleged package.
🌐 The messages contain a link to a fake website impersonating Poczta Polska.
🔓 The aim is to obtain your personal and login details.📩 If you receive a suspicious message:
do not reply to it and report it to incydent@poczta-polska.pl