Fake SMS messages about unpaid parking – police warn of data theft
Cybercriminals are sending SMS messages with fake payment links for parking charges. Police urge caution and explain how to report the incident.
Fake SMS messages about parking: new wave of card data fraud
Google News PL — Crime (pl) reports an increase in scams involving the distribution of false SMS messages concerning alleged outstanding parking payments. Police have issued a warning, urging mobile phone users to exercise particular caution.
The perpetrators' scheme is based on creating time pressure. The recipient receives an SMS stating that an overdue parking fee must be paid immediately. The message contains a link supposedly leading to a quick payment service.
Upon clicking, the user arrives at a page closely resembling the official portal of a paid parking zone operator. In reality, it is a fake website, prepared solely to extract confidential information.
New method of bypassing security
Perpetrators have introduced a new element: they encourage recipients to reply to the message or manually copy and paste the website address into a browser. In this way, the victim independently circumvents system security mechanisms that protect against dangerous links. Legitimate operators of paid parking zones never ask customers to disable or bypass security measures on their devices.
On the fake page, the victim is asked to provide the vehicle registration number, personal data, and full payment card details. The registration number can later be used to prepare more credible fraud attempts. The greatest threat, however, remains the disclosure of card data, which may lead to immediate loss of funds from the bank account.
Security rules
Experts point to several basic rules:
- do not click on links in SMS messages from unknown senders;
- carefully check the website address – fake domains often differ from the original by one letter, an additional full stop, or a non-standard extension;
- if in doubt about a parking charge, verify it independently on the official website of the city office or operator;
- do not provide payment card data on websites whose authenticity you cannot confirm.
How to report an incident
Suspicious SMS messages should be forwarded in unaltered form to the free number 8080, operated by CERT Poland. An incident can also be reported via a form on the incydent.cert.pl website or in the mObywatel application, using the "Safely online" function.
If card details have already been entered on the fake website, contact your bank immediately and block the card. It is advisable to keep the message content, link, and screenshots – they may serve as evidence when reporting the matter to the police.
Source: Google News PL — Crime (pl)