CERT Polska Warns of Fake InPost Parcel SMS Messages
CERT Polska is warning about a wave of text messages impersonating InPost and claiming a parcel cannot be delivered. The aim is to steal personal and card data.
CERT Polska, Poland's computer emergency response team, has issued a warning about a wave of fraudulent SMS messages that impersonate the parcel locker and courier company InPost. The texts claim there is a problem with delivering a package.
According to the warning, the messages have a single purpose: to extract personal data and payment card information from recipients. The supposed delivery issue is only a pretext meant to make people act quickly and without thinking.
Why this scam works
Parcel notifications are now an everyday part of online shopping, so a short message about a delivery problem looks routine to many people. Criminals exploit exactly that familiarity, borrowing a recognisable brand name to appear credible. Anyone expecting a package, or simply used to receiving such alerts, may be tempted to respond.
What readers should do
The general advice for this type of fraud is consistent: treat unexpected messages about delivery problems with suspicion, do not open links in them, and never enter personal or card details on a page reached through a text message. If you are waiting for a parcel, check its status directly in the official app or on the carrier's website, typing the address yourself.
If you have already entered card details after receiving such a message, contacting your bank without delay is the sensible step, so the card can be blocked. Suspicious messages can also be reported to the relevant authorities, which helps CERT Polska track and shut down such campaigns.
The warning is a reminder that impersonating well-known delivery brands remains one of the most common methods for stealing data via SMS, and that such waves tend to return under new wording.
Apps worth a look
Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.
Talk to an AI conversation partner; every sentence comes back corrected and explained in your language. 9 languages, A1 to C2.
Open EDIFACT and X12 messages, see every segment explained, convert to JSON/XML, export PDF and Excel. Runs locally, no upload.
Pick who it is for, the occasion and their personality. The search engine reads product descriptions from local shops and ranks what fits. Free, no sign-up.
More from this day
See all →
Poland's eUS Tax Portal Adds Google Pay and Apple Pay Payments

France drops article banning encryption backdoors in Résilience law

Orange launches Orange France super-app with AI aggregator



