Scam Alert: Fake mObywatel SMS Can Steal Your Cash

5 June 2026 Poland Radar 0 Comments

CERT Polska warns of mObywatel phishing SMS that mimic official notices; one click can expose bank accounts.

CERT Polska issued an urgent warning after scammers launched a new mObywatel phishing campaign. One click on a fake link can cost you access to your bank account and savings.

Table of Contents

How the mObywatel phishing messages work

Scammers send SMS messages that look like official state notices. Consequently, recipients often react without thinking. The text may claim you must verify a trusted profile. Moreover, it can warn of a fake fine or a problem with an e-ID (mDowód). The message ends with a link. However, that link leads to a counterfeit site. The site may mimic a government portal or a payment gateway. In addition, it asks you to enter login details, PESEL number, or card data. Therefore, criminals capture your credentials and drain accounts.

Why impersonating public services succeeds

Polish citizens and residents trust government tools. For example, people use mObywatel to show ID or check points and documents. Consequently, mObywatel became a prime phishing lure. Moreover, services like ZUS (social insurance), NFZ (public health fund), and local authorities send real notices. Therefore, a fake SMS about a mandate (mandat) or expiring document looks plausible. Scammers exploit this trust. In addition, some phones group messages into threads. As a result, the fake message may appear in a list with real alerts. That makes it even harder to spot fraud.

What to watch for and how to react

Never log into public services or banks through an SMS link. Instead, type the official address yourself. Moreover, open the official app from Google Play or the App Store. If you clicked a suspicious link, act fast. Contact your bank immediately and block accounts if needed. In addition, report the message to CERT Polska by forwarding it to 8080. The service collects patterns to block malicious campaigns. Also, file a police report if you lost money. Consequently, quick steps can limit damage.

Why Warsaw faces higher risk

Large cities like Warsaw present bigger targets. Many people use mobile banking and government apps here. Therefore, scammers send mass SMS waves and expect hits. Moreover, busy residents may respond faster to urgent-sounding texts. As a result, attacks often yield more victims in urban areas. However, rural users also face risks. Thus, everyone must stay alert.

💡 GOOD TO KNOW: If you are an expat, note that Polish services use PESEL (national ID number) and common institutions like ZUS (social security) and NFZ (health fund). Do not provide PESEL, bank login, card details, or BLIK codes via links. Instead, call your bank and check official government portals directly. Forward suspicious SMS to 8080; the service is free and helps block scams.

Source: Read original article

📚 Looking for more help settling in Poland? Browse our complete Expat Guides.