To avoid becoming a victim of criminals, one must exercise caution at every step. Scammers try new ways to manipulate their victims and extract data that can later be used to steal their money.
Fake toll for highway passage
One of the latest data‑fraud examples involves users of the A4 highway. It concerns a specific section between Kraków and Katowice managed by Stalexport Autostrada Małopolska. According to the company, many people started receiving SMS messages claiming a supposed fine for speeding on this route. Naturally, the fine is false.
“The company urges caution, emphasizing that it does not send such messages or demand payments via SMS” – reads the Stalexport Autostrada Małopolska statement.
The company stresses that if you receive such a message, the best course is to forward it via a free SMS to number 8080 to CERT Polska, an institution fighting fraudsters trying to steal data.
The mechanism in this case was similar to those we already described on the FXMAG portal. The SMS contained a link that redirected to a page asking the user for data, including vehicle registration number, personal details such as name and address, and credit card information, including its number, expiry date, and CVV security code.
Scammers impersonate an insurance company
Another method of data and money theft is impersonating insurance companies. Recently, Poles began receiving fake emails claiming a refund of an overpaid premium – the Financial Ombudsman reported.
Scammers posed as one insurer, sending emails claiming the insurance premium was paid twice. In this case, messages reached customers of that insurer, and the site mimicked the original. However, there were clues revealing the fraudsters. Clicking the link in the email redirected the recipient to home[.]update-subscription[.]net, indicating a scam. The site has already been listed on the Warning List maintained by CERT Polska, which blocked access for all users from Poland.
“More people receive messages from scammers posing as insurers. They promise quick refunds, but in reality they try to steal card data or account access” – reads the Financial Ombudsman’s statement.
It is important to follow a basic “ABC” of procedures to avoid falling victim to scammers, the Ombudsman reminds. These include:
- Check the sender’s address – it often has nothing to do with the company,
- Pay attention to the website address – it often reveals fraud.
The Financial Ombudsman reminds that under no circumstances should anyone share data, such as a card PIN, CVV code, or account login details.
“An insurer never asks for that” – the Ombudsman states, adding that if in doubt, such a message should be reported to CERT Polska via incydent.cert.pl or mObywatela.
See also: Beware of scammers! Another wave of fake emails and SMS. One reached our editorial staff
