Osegi
Security·1 min read

CERT Polska Warns of Fake InPost Parcel SMS Messages

CERT Polska is warning about a wave of text messages impersonating InPost and claiming a parcel cannot be delivered. The aim is to steal personal and card data.

CERT Polska, Poland's computer emergency response team, has issued a warning about a wave of fraudulent SMS messages that impersonate the parcel locker and courier company InPost. The texts claim there is a problem with delivering a package.

According to the warning, the messages have a single purpose: to extract personal data and payment card information from recipients. The supposed delivery issue is only a pretext meant to make people act quickly and without thinking.

Why this scam works

Parcel notifications are now an everyday part of online shopping, so a short message about a delivery problem looks routine to many people. Criminals exploit exactly that familiarity, borrowing a recognisable brand name to appear credible. Anyone expecting a package, or simply used to receiving such alerts, may be tempted to respond.

What readers should do

The general advice for this type of fraud is consistent: treat unexpected messages about delivery problems with suspicion, do not open links in them, and never enter personal or card details on a page reached through a text message. If you are waiting for a parcel, check its status directly in the official app or on the carrier's website, typing the address yourself.

If you have already entered card details after receiving such a message, contacting your bank without delay is the sensible step, so the card can be blocked. Suspicious messages can also be reported to the relevant authorities, which helps CERT Polska track and shut down such campaigns.

The warning is a reminder that impersonating well-known delivery brands remains one of the most common methods for stealing data via SMS, and that such waves tend to return under new wording.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:cert polskainpostsms phishingscamcybersecurity

More from this day

See all →

More in: Security

See all →