Poland Scams: Online, Banking & Investment Fraud Guide
Common scams in Poland and how to report to CERT Polska, the police, UOKiK, and your bank.
Emergency number: 112 — verify on official sources.
Last reviewed: 1 June 2026
Poland faces significant volumes of online fraud including phishing and smishing impersonating banks or courier companies, investment scams, and social engineering attacks. CERT Polska (cert.pl) operated by NASK is the national cybersecurity incident response team and maintains a public list of dangerous and phishing websites. Criminal complaints are handled by the police, and the Central Cybercrime Bureau (CBZC) specialises in digital offences. The UOKiK (Office of Competition and Consumer Protection) handles consumer rights complaints. Reporting suspected fraud to your bank as quickly as possible is critical for any chance of halting a transfer.
Common scams
- Phishing and smishing impersonating Polish banks or InPost parcels
- Investment and crypto fraud
- Online marketplace (OLX, Allegro) non-delivery and overpayment scams
- Remote-access fraud via fake bank helpdesk calls
Tourist-specific scams
- Overcharging unlicensed taxis in city centres
- Fake tour or accommodation listings
Online shopping scams
- Parcel-fee smishing impersonating InPost or DPD
- Fake online shops
- Account takeover phishing targeting banking credentials
Job scams
- Task scams via messaging apps
- Fake job offers requiring upfront registration or document fees
Romance scams
- Dating-app romance and cryptocurrency investment grooming
Investment scams
- Fake trading platforms and clone broker firms
- Crypto and 'AI bot' investment schemes
How to report a scam here
- Contact your bank immediately if money was transferred
- Report cybersecurity incidents to CERT Polska at incydent.cert.pl
- File a criminal report at the nearest police station or with the CBZC
- Report consumer fraud to UOKiK at uokik.gov.pl
Local reporting & protection links
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Contact your bank immediately using the number on your card. Polish banks can attempt to recall fraudulent transfers most effectively within the first few hours. No legitimate bank or courier will send you an SMS asking for card details or a BLIK code.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
What is CERT Polska?
CERT Polska (cert.pl) is Poland's national cybersecurity incident response team, operated by NASK. It maintains a public warning list of phishing and dangerous websites and allows citizens to report cybersecurity incidents at incydent.cert.pl.
What is the BLIK scam?
Scammers impersonate a friend on social media claiming to be in urgent need of money, asking you to share a BLIK code. The code allows them to withdraw cash from ATMs. Never share a BLIK code with anyone, even someone who appears to be a friend — verify by calling them directly.
How do I report cybercrime in Poland?
Report cybersecurity incidents to CERT Polska at incydent.cert.pl. For criminal matters, file a report at your nearest police station or submit information to the Central Cybercrime Bureau (CBZC) via cbzc.policja.gov.pl.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance