In recent days, there has been a sharp increase in cybercriminal activity, with criminals using the image of Bank Pekao S.A., the Netflix platform, and the e-TOLL system to steal data and money. The latest Revolut report indicates an alarming, 233 percent increase in the number of scams on Telegram. Victims in Poland are losing from several hundred zloty for alleged fines to over 360 thousand zloty for fake investments in Orlen shares.
Critical attacks on Pekao customers
Scammers are sending emails with malware that allows them to take control of the victim's online banking.
Telegram a haven for scammers
The number of extortions on this messenger increased by 233 percent, becoming the main source of fake job offers.
Gigantic losses on investments
An 84-year-old resident of Krakow lost 360 thousand zloty, believing in a fake advertisement for an investment in shares of the Orlen conglomerate.
Analysis of recent security incidents indicates an unprecedented intensification of phishing and vishing attacks. The most serious warning has been issued by Bank Pekao S.A., whose customers are receiving fake emails with infected attachments. Opening the file results in the installation of malware, giving criminals full control over the device and access to savings. Similar campaigns are targeting drivers who receive SMS messages about alleged arrears in the e-TOLL system, and users of streaming platforms warned about subscription expiration. Simultaneously, Revolut's financial report sheds light on a systemic change in the operations of criminal groups. While Meta group platforms (Facebook, Instagram) still generate 44% of fraud, the Telegram messenger recorded the highest growth rate. Criminals are moving their operations there due to the high degree of anonymity and message encryption, which makes them harder to detect by law enforcement. On this platform, fake job offers and advanced investment scams dominate, with victims suffering an average loss of 21 thousand zloty. In 2025, the number of reported incidents in Polish cyberspace increased by 100%, exceeding 222 thousand cases, making cybersecurity a critical challenge for state stability.The police also note a return to traditional methods, albeit with a modern twist. In Lower Silesia, scammers posing as firefighters are on the prowl, offering paid furnace inspections and selling carbon monoxide detectors. The services remind that the State Fire Service never charges for instruction and does not conduct direct-to-home acquisition of detection devices. „Protecting users must be a shared priority across the industry, including the platforms where these scams originate.” — Woody MaloufAnother dangerous trend is the so-called BLIK overpayment refund scams. Criminals transfer a small amount to the victim and then call asking to send it back to a different number. In this way, the user's legitimate funds end up with the scammers, and they themselves may unknowingly be drawn into laundering dirty money from other crimes.
Mentioned People
- Krzysztof Gawkowski — Deputy Prime Minister and Minister of Digital Affairs, informing about the record number of cyberattacks.
- Woody Malouf — Head of the financial crime department at Revolut.