Government Warning: Protect Your Polish Online Accounts

27 March 2026 Poland Radar 0 Comments

Government warns Poles may lose access to their accounts amid tax-season phishing. Read safety steps and expat guidance.

The government issued an urgent warning about a nationwide phishing campaign, saying Poles may lose access to their accounts. The cyber office urged immediate caution during tax season.

Table of Contents

Poles may lose access to their accounts: how the scam works

On March 25, 2026 the Plenipotentiary for Cybersecurity, Krzysztof Gawkowski, published an official alert. Moreover, he said criminals exploit the busy tax window. Consequently, attackers send fake emails and SMS messages. However, their messages look professional and use official logos. In addition, they often claim a new notification awaits in the e-Tax Office. The message includes a login link. Therefore, victims who click reach a fake Profil Zaufany sign-in page. Profil Zaufany acts as a digital key in Poland. For context, it grants access to many services such as ZUS (social insurance) and e-Doręczenia (official mail).

KSeF, tax season and why this matters to you

KSeF, the national e-invoice system, became mandatory in 2026. Moreover, criminals use KSeF-themed lures about certificate updates or invoice errors. Consequently, businesses that handle many invoices daily may panic and click links. However, official KSeF communications never include direct sign-in links. In addition, legitimate sites use domains ending with .gov.pl. Therefore, check every URL before you click. For expats, know that fraudsters can hijack your tax refund details. They can also change where refunds land. In addition, attackers may use credentials to access health data held by NFZ (public health fund).

Practical steps to stay safe

If you suspect compromise, act fast. First, change your Profil Zaufany password directly at profil.zaufany.gov.pl. Moreover, log out of all unknown sessions in the profile panel. Second, contact your bank and request security holds if needed. In addition, block your PESEL number in the mObywatel 2.0 app to prevent credit fraud. Third, report the incident to CERT Polska via their hotline or website. Therefore, every report helps shut down fake domains and protect others.

💡 GOOD TO KNOW: If you are an expat, understand three Polish systems. First, Profil Zaufany is your verified online ID. It links to ZUS (social insurance), NFZ (public health), and tax services. Second, PESEL is your national ID number and can enable credit in your name. Third, use mObywatel for secure government messages and to freeze your PESEL if fraud happens. Consequently, never follow login links in emails. Instead, type official addresses manually or use trusted apps.

Authorities emphasize vigilance through April 30, the PIT deadline. Moreover, the CIT deadline on March 31 increases attack volume. However, by following clear steps you reduce your risk. In addition, use two-factor authentication wherever possible. Finally, remember that official correspondence uses formal phrasing. Therefore, aggressive or urgent language is a red flag.

Source: Read original article