Scammers trying to get into your computer have a new way of doing it. This time they use the CAPTCHA mechanism - a short test that is used on some websites to confirm that the user is not a robot.

What does it look like?

A correct CAPTCHA requires, for example, entering some letters or indicating certain objects in a picture.

The criminals have adapted this scheme, but they provide on-screen steps for the user to follow. These steps are altered compared to the standard CAPTCHA. If you follow the instructions and click the sequence, you open access to your device to the hacker. Your computer will download and install the malware.

---

What is the risk ?

If you follow the instructions and end up installing malware, the fraudster can:

• get your passwords stored on disk and in cookies
• take over your social network accounts
• encrypt or destroy files on your device
• take over your account credentials and this way steal your money or even your identity

---

How can you protect yourself?

First of all, be vigilant! The legitimate CAPTCHA can take many forms, but it will never require you to use the WIN (Windows button) + R key combination.

---

QR codes, or black-and-white pictograms with encrypted data, can make it easier to find information or order a payment. They act as direct links, often connecting offline and online spaces. However, they are worth using with caution, as their convenience and speed are increasingly being exploited by cybercriminals. This modus operandi has even gained its own name - quishing.

How does quishing work?

Criminals create a fake website and then generate a QR code with a link to that website. They then place the code in a location from which it can be easily scanned - at bus stops, parking meters, leaflets and brochures or in emails.

The scammers come up with all sorts of ways to convince you to scan the code and enter your details or download a malicious app. When you scan such a code, you end up on a fake website. Therefore, it is always worth checking the address of the page to which the QR code redirects you.

---

When to be more careful?

• When you see a sticker with a QR code in a public place, such as a bus stop or car park. The sticker tells you that this will make it quicker for you to buy a ticket or pay for your parking time. Beware, criminals can use this to direct you to fake websites where they want to scam you out of your details and money.
• When you receive a leaflet or brochure on the street with discounts, e.g. to a shop or drugstore.
• Also beware of QR codes sent for example in text messages or emails. If you don't know the sender or you see an error in the email address or in the body of the message, don't scan the code.

---

Fraudsters have found a new way to scam people. They offer "a job" that involves sending transfers from your account to other bank accounts to receive a salary. A supposedly easy profit can turn into a quick loss when, after a few transfers, the money is no longer coming back. These types of offers appear on social media and in closed groups on popular messengers.

What does it look like?

You receive a message in which someone stranger offers you money in exchange for completing some non-committal tasks. Initially, this might be liking, commenting or sharing some material on the internet. You get paid for completing the task. These first steps are intended to build your confidence and encourage you to continue your "cooperation".

You then get a task to make a transfer from your account to get a return transfer plus an additional "bonus". You send the stranger your own money to get a return with the declared profit. The higher the amount of the transfer, the greater the promised return to your account.

At first, this scheme works - this is how criminals want to gain your trust and deceive your vigilance. Until, at some point, when you transfer a larger amount to an unknown account, the refund does not come and contact with the 'employer' stops.

---

How to protect yourself?

• Don't fall for the promise of easy money.
• Do not give out your personal details and do not engage with a company or person whose activity is unclear to you.
• Make sure the company is legitimate before you start work.
• Do not send your money to unknown accounts when persuaded to do so by a stranger - you may be participating in money laundering this way.

---

We changed the address of the website where you log in to Millenet.

The domain in the site address has changed. You received more details in the message after logging in. Remember, we do not inform about the login changes in an email, but only in the bank's channels. We also do not send links in SMS messages.

What changed?

• You now log in from this address: https://login.bankmillennium.pl/retail/login/
• We also refreshed the website design.

---

What didn't change?

• The steps of logging in and the data we require (Millekod, Password 1 and 2 characters of the identifier) did not change
• The appearance of the website after logging in to Millenet did not change
• The address of the main page of the bank did not change: https://www.bankmillennium.pl - you can still start logging in on the homepage and we will redirect you to the login page

---

Watch out for fake websites

When you log in to your account via Millenet, remember these rules:

• Check the address bar before you enter your personal details
• If you see errors, typos or don't recognise the address - do not log in
• We always ask for only Millekod, Password 1 and two random characters from your ID (e.g. PESEL number)
• Do not enter your full ID or payment card details on the login website - we never ask for this
• In the Millenet settings you can enable the security image - it will always be displayed after you enter your Millekod. This way you can be sure that you are logging in on our website
• Remember that we do not send links in external emails and SMS messages

---

How do they operate?

They impersonate Bank Millennium and other well-known companies (popular VOD platforms, music services, courier companies, online stores) and send fake e-mails. For example, you can get information about your subscription expired on the streaming platform or about unusual activity on your account and the need to unblock it. Later, the scammer's pattern of operation is similar - they urge you to log into your account and provide your personal and payment card details, or download malicious applications.

---

What to keep in mind?

1. Always double-check the sender of the message
2. Do not click on unknown links and do not install any applications from such messages - we never send login links in e-mails and text messages
3. If you want to visit the Bank's website, do not use external links, it is safer to enter the address manually in the browser
4. Never log into your bank account on websites other than the Bank's website
5. Do not provide confidential data (login details, card details, document numbers, etc.) if you do not know the sender or the form of the message raises your doubts
6. Always carefully check the content of the message from the Bank confirming the transaction

---

Przestępcy wysyłają SMS-y, w których podszywają się pod firmę kurierską InPost oraz Pocztę Polską. W treści informują o błędnym adresie paczki lub brakujących dan

Fraudsters send SMS messages pretending to be from the courier company InPost and the Polish Post Office. In the content, they inform about an incorrect parcel address or missing details. They also provide a link to a page where payment card details must be entered.

In this way, the fraudsters gain access to the data with which they can pay with your card on the Internet or add it to a virtual wallet.

W ten sposób oszuści zyskują dostęp do danych, dzięki którym mogą płacić Twoją kartą w internecie lub podpiąć ją do wirtualnego portfela.

What might such a message be like?

• "Your parcel is being held up due to a missing street number on the parcel"
• "Your parcels cannot be delivered due to an incorrect address. Please update your address for redelivery"
• "Hello, your parcel cannot be delivered due to an incorrect house number, please update"

The message always ends with a link. Be careful and do not click on the link!

 

---

What else you should keep in mind

Do not enter your payment card details on a site you are on for the first time and always check the website address carefully. If you spot a typo, spelling mistake or strange domain - don't enter your card details, passwords or other sensitive data!

---

Scammers send text messages with a link to funds that someone supposedly transferred to you using BLIK. If you receive such a message, do not click on the link!

Neither we, nor the BLIK payment operator - send such SMS.

If someone sends a BLIK transfer to mobile, funds will automatically be on your account and you do not need to confirm that you want to receive them.

How to be protected

If you receive such a message, do not click on the link! Keep in mind other security rules.

• Do not download applications that you do not know - you can unknowingly infect your device.
• Log in to your account only in the application and on the bank's website
• When logging in to your account, do not give your full ID, PESEL or payment card details - we only ask for two random characters.
• Do not give your bank or email login details to anyone - this is confidential data.

 

If anything raises your doubts, please let us know. You can call us on the special telephone line: 22 598 44 44 (fees according to the operator's price list) or via e-mail: kontakt@bankmillennium.pl.

 

---

Cybercriminals are not idle, this time they impersonate tax offices. You may receive an e-mail or text message about your tax refund - beware of such messages. If you receive such an SMS or e-mail, report it to us.

How they work

Scammers send out false information that you can get a tax refund. They will send you a link to a site that impersonates a tax authority or government site such as the Ministry of Finance, the National Tax Administration and the Tax Office.

Do not click on the link sent in such correspondence! Tax offices or Ministry of Finance do not offer taxpayers to collect overpaid tax via e-mail or SMS.

If you inadvertently go to such a page, do not give out your personal details, internet banking login details, payment card details and account numbers!

---

What to look out for

• The sender of the message - verify the website address and sender details.
• The content of the message - there may be spelling mistakes in the message.

---

Watch out for new phishing attempts by cybercriminals! Scammers send email or SMS messages telling you that you need to update or authenticate your data to avoid having your account locked. We do not send such messages and never offer any system or data updates via email or SMS. If you receive such an SMS or e-mail, report it to us - write via inbox or call the dedicated helpline at 22 598 44 44 (fee according to your operator's price list).

How they work

Scammers send out false information that:

• Your account is not compliant with the "new security system"
• Access to your account has been or will be blocked

At the same time, the message contains a link to: update, authenticate or unlock. Do not click on such links!

And if you by mistake go to such a page, do not enter any personal information, online banking login details, payment card details and account numbers. Inform us immediately about such a situation.

---

Pay attention to content and sender

• The content may include language and spelling errors or colloquial and ungrammatical phrases.
• Whenever you receive a message that your account is blocked or needs to be authenticated, call us and confirm it!
• Pay attention to what address or number the message was sent from and compare it to the communication you receive from your bank.

---

The scammers impersonate PGE (Polska Grupa Energetyczna) or other providers and inform that you are in arrears with the payment and you are at risk of power cut. Be careful and don't click on the link in the SMS.

If you have any doubts, if the message is true, please contact your electricity provider. Always search for the current contact number on the provider's website.

Tell us about anything suspicious by calling the dedicated helpline: +48 22 598 44 44 (fees in accordance with the operator's price list) or via e-mail: kontakt@bankmillennium.pl.

As a gesture of solidarity with the war-stricken Ukrainians, we have waived our fees for foreign transfers to Ukraine. We want to help, but at the same time we ask you to be vigilant.

When others join forces to help, scammers waste no time and take advantage of our good intentions.

Therefore, before you transfer money, check the account numbers and credibility of the collections you are supporting with your donations.

• Before you donate, check the official website of the organization to see if it runs a collection. Compare the information and account numbers.
• If you make transfers to private recipients - send money to those you really know, do not copy account numbers from social media.
• Use verified payment methods and avoid those you don't know.
• Don't give others information about fundraising that you can't verify.
• Don't fall for phone calls from purported uniformed services that "extort" you to donate money.
• Don't click on links in e-mails and text messages.
• Don't give out your account or e-mail passwords or payment card details to anyone or enter them on unverified websites.
• Only log into your bank account on our website or through our mobile app.
• Update the operating system and anti-virus software on the devices you use.

If you suspect an attempted crime or if you have been defrauded in this way, inform us and report it to the police.

Your passwords for confirming operations will be now delivered from the sender named Millennium. Currently, from Millennium sender you receive for example, information about important documents waiting for you in Millenet or agreements to sign. Before entering the code from the SMS, always check if the name and amount of the transaction agree with the operation you are performing – if you see a different transaction name, do not enter the SMS P@ssword and contact us.

If you want, you can change the method of confirming transactions and instead of retyping passwords, confirm operations in the Bank Millennium mobile app.

Find out more about Mobile Authorization

Recently, fake ads impersonating Bank Millennium's offer and informing about cash prizes for loyal clients have appeared on social network. To get the prize, you are asked to give your MilleCode.

How to defend yourself?

Remember these rules to use online banking system safely:

• do not give your MilleCode and login details to anyone
• do not log in to your account on websites other than Bank Millennium's websites
• do not enter the entire PESEL / ID card / passport number and telephone number when logging in (only 2 randomly selected identifier digits are required when logging in)
• do not enter payment card details while logging in - we never ask for it
• read carefully each SMS that you receive from us - check the operation you are confirming (the amount, type and number of the transaction), mind the language of the message

 

If anything raises your doubts, please let us know. You can call us on the special telephone line: 22 598 44 44 (for landline and mobile phones; fees according to the operator's price list).

 

---

How do scammers operate?

We have received signals about false e-mails sent by scammers impersonating Bank Millennium. They inform about money transfer. To see the details and invoice you are asked to click on the image with link. In fact, it leads to website with malware in order to steal your data and get control over your device.

We never send any links via e-mail or SMS!

Messages with transfer confirmations are sent only when you request it and they are sent only from the address: powiadomienia@bankmillennium.pl

---

Notice

• The sender - false e-mail was not send from bank address, but foreign domain.
• In e-mails with transfer confirmation we never link to details or attach any documents.
• We do not send invoices issued by other companies.

---

How to act

• Do not click on links in emails or SMS nor download any unknown applications or attachments , especially if you are not sure about the sender.
• Install anti-virus software on all devices used to log in to your bank account and update it on regular basis.
• Avoid logging in to your bank account on someone else's computers or phones.
• If your device has been infected, we recommend that you reinstall the operating system.

---

How do scammers operate?

They impersonate DHL and send SMS messages informing about the necessity of additional payment for the shipment, e.g. due to customs duties.

There is a link in the SMS that directs you to the fake website of the courier company, from which you can download the "shipment tracking" application. In fact, it is malware allowing to steal money from your account.

---

How to defend yourself?

• do not click on links in emails or SMS as well as do not download unknown applications, available from a link nor any attachments to emails, especially if you are not sure about the sender or if the message raises any doubts
• do not share login details with anyone (we never ask for MilleCode or P@ssword 1 by emails or SMS)
• log in to Millenet only at Bank's website and before logging in check if yo see a closed padlock in the address bar
• install anti-virus software on all devices used to log in to your bank account, remember to update it on regular basis

If you have any doubts, please let us know.

---

Fake Rossmann and Sephora ads have appeared on social network (e.g. Facebook, Instagram).

The scammers inform about free cosmetics available in special offer. To get them you are only asked to pay the shipping cost by giving your payment card credentials. Card details obtained in this way are used for transactions for larger amounts.

Remember a few rules when paying by card online:

• before making a purchase, check if the offer is trustworthy and approach extremely bargain prices with more caution - look for opinions on the Internet on independent portals
• verify information about promotions on the seller's official websites
• do not provide your card details in unknown stores, do not send photos or a scan of your payment card to anyone - the data from the card can be used to make online transactions
• when paying for the transaction, check the details and amount before confirming it with an SMS P@ssword or Mobile Authorization
• install anti-virus software on all devices you log into the bank account and update them on a regular basis

Remember that you can restrict your card at any time in Millenet and in the mobile app or by calling +48 22 598 41 14 (fee according to the operator's price list).

If you notice any suspicious offers online, please let us know.

How do scammers operate?

Fraudsters send e-mails informing about disabled account or payment card.

Bank Millennium sends no such messages or any links via email or SMS!

Also, we never ask to enter payment card details (number, validation date, CVV2/CVC2 code) to unlock it nor we ask to make a money transfer to unlock the account.

If you receive such a message, please let us know.

---

How to defend yourself?

• do not click on links in emails or SMS, especially if you are not sure about the sender
• do not download unknown applications, available from a link nor any attachments to emails, if you don't know the sender or the message raises any doubts
• do not share login details with anyone (we never ask for MilleCode or P@ssword 1 by emails or SMS)
• log in to Millenet only at Bank's website and before logging in check if you see a closed padlock in the address bar
• when logging in to Millenet, do not enter full PESEL or an ID number, we ask only for the 2 randomly selected characters
• when logging in, never enter your payment card details
• install anti-virus software on all devices used to log in to your bank account, remember to update it on regular basis

---

How do scammers operate?

Bank has recently received new signals that scammers impersonate TeleMillennium helpline consultants, calling to inform you about suspicious activity on your account/payment card. They ask for personal data and can ask you to install the application, which enables remote control of the user's device.

---

How to defend yourself?

• do not download any fishy apps - Bank consultants never encourage you to download any applications for quick customer service etc.
• do not share confidential data with anyone, e.g. PESEL number, your payment card number or CVV code - our helpline consultants never ask for such data
• never share login details to your bank account - Bank consultant will never log in to the system for you
• log in to your bank account only on Bank's website and while logging in keep in mind that the system never requires entering a full PESEL number or a full ID number - only two randomly selected characters.

---

Komunikat z dnia 24.03.2021

Komenda Główna Policji i FinCERT.pl – Bankowe Centrum Cyberbezpieczeństwa ZBP ostrzegają przed próbami oszustw przy inwestowaniu w kryptowaluty oraz na rynku Forex.

Inwestycje w kryptowaluty, a także na rynku Forex co do zasady są legalne, ale oszuści wykorzystując fałszywe serwisy internetowe, podszywają się pod pośredników i oferują ułatwienia w inwestowaniu.

Przestępcy nakłaniają potencjalnych pokrzywdzonych do zainwestowania pieniędzy, obiecując wysokie i szybkie zyski bez ryzyka. Proponują pomoc przy inwestowaniu, dlatego zalecamy wysoką ostrożność przed podjęciem decyzji o przeznaczeniu pieniędzy na taki cel.

Wyłudzeń dokonują osoby, które podają się za tzw. „brokerów” inwestycyjnych – pracowników firm pośrednictwa i doradztwa inwestycyjnego. Firmy te reklamują swoje usługi w mediach społecznościowych, serwisach internetowych oraz aplikacjach mobilnych. Przyciągają uwagę i starają się uwiarygodnić swój przekaz za pomocą wizerunku:

• „przeciętnego Kowalskiego”, który szybko zyskał dzięki współpracy z „pośrednikiem”,
• powszechnie znanych i rozpoznawalnych osób (sportowców, polityków, aktorów, dziennikarzy, celebrytów) - bez ich wiedzy, zgody i na podstawie zmanipulowanego przekazu.

Oszuści kierują informacje do potencjalnych pokrzywdzonych i wskazują na możliwość osiągnięcia szybkich i wysokich zysków. Tego typu oferta jest nieprawdziwa i zazwyczaj kończy się utratą pieniędzy.

Nie ulegaj presji. Uważaj na pozornie atrakcyjne oferty. Nie działaj pochopnie, pod wpływem chwili i emocji. To może być oszustwo!!!

Jeśli przeczytasz artykuł czy post w mediach społecznościowych lub skontaktuje się z Tobą osoba, która proponuje:

• szybki i wysoki zysk dzięki inwestycji w kryptowaluty lub na rynku Forex;
• instalację aplikacji na telefonie lub komputerze, która ma posłużyć do zakupu kryptowaluty lub wykonania operacji na rynku Forex;
• wsparcie w inwestycjach i obsłudze aplikacji przez „analityka”, którzy zadzwoni do Ciebie i udzieli pomocy,

zastanów się, zachowaj zdrowy rozsądek i ostrożność.

Komenda Główna Policji i FinCERT.pl – Bankowe Centrum Cyberbezpieczeństwa ZBP zalecają:

• Zapoznaj się z informacjami KNF i NBP, które dotyczą inwestowania w kryptowaluty – link: https://uwazajnakryptowaluty.pl/;
• Sprawdź wiarygodność podmiotu. Zweryfikuj opinie w Internecie, np. w połączeniu ze słowem „oszustwo” lub „scam”. Nie poprzestawaj na jednej stronie z opiniami;
• Sprawdź, czy instytucja – „broker” znajduje się na liście ostrzeżeń KNF – link: https://www.knf.gov.pl/dla_konsumenta/ostrzezenia_publiczne;
• Nie udostępniaj nikomu danych do logowania w bankowości elektronicznej i mobilnej;
• Nie udostępniaj nikomu danych poufnych dotyczących Twoich kart płatniczych;
• Nie przesyłaj nikomu skanów swojego dowodu osobistego;
• Nie instaluj dodatkowego oprogramowania, na urządzeniach z których logujesz się do bankowości elektronicznej;
• Jeśli otrzymasz przelew od nieznanego nadawcy, pod żadnym pozorem nie przekazuj środków dalej, nawet jeśli „Twój doradca” o to prosi – nieświadomie możesz brać udział w przestępstwie.

Jeżeli podejrzewasz, że jesteś ofiarą oszustwa skontaktuj się ze swoim bankiem oraz złóż stosowne zawiadomienie na Policji.

Komenda Główna Policji
FinCERT.pl – Bankowe Centrum Cyberbezpieczeństwa ZBP

How do they operate?

Fraudsters impersonate 'investment brokers', promising easy and quick profit. In fact, they want to get access to your personal data and money.

---

When become suspicious?

Be careful, especially when:

• you are asked to send a photo of your ID card or payment card
• the broker urges you to install additional software or provide bank login details
• the adviser wants to carry out transactions on your behalf

---

Before you start investing

Check if the company is registered in the EU and that there are no warnings on the Internet about its business. You can do it on KNF website >

---

In the most frequently used fraud scenarios involving the phishing of payment card or login details, the main exposed persons were those making payments - buying goods on the Internet. Recently, however, we have observed a new type of abuse also directed against people who display goods on local buying and selling portals. Recently, scams of this type appeared on the OLX platform.

The fraudulent data is used by fraudsters to make online transactions from the card or add it to the fraudster's electronic wallet, which will allow him to perform further transactions from the account related to the card, also in stationary stores.

How to defend yourself?

Please be cautious and pay special attention to:

• any communication outside the sales website - the scammers contact mainly via external communicators
• links directing to the sales offer, delivery order or payment - double-check the address of the page to which the link transferred you
• linguistic errors, typos or other inaccuracies on the website - if something raises your doubts, do not provide your personal data and payment card details under any circumstances

 

If anything raises your doubts, please let us know. You can call us on the special telephone line: 22 598 44 44 (for landline and mobile phones; fees according to the operator's price list).

 

---

How do scammers operate?

If you are a buyer, the criminals impersonate the OLX platform and encourage you to use the option with delivery or the surcharge for the parcel. They also use an external communicator for this. The scam message contains a link that redirects you to a fake payment card phishing website.

If you are selling goods, it might look like this:

• You post an advertisement with the goods you want to sell.
• A potential buyer comes to you and starts a conversation with you, usually using a popular messenger, and not directly through the page with the advertisement.
• The buyer argues that he will make the payment for the goods and shipment by transfer to your payment card and for this purpose sends a link to the payment.
• The link directs you to the page where you must provide payment card details (full card number, expiry date, authorization code) and confirm your willingness to receive payment by entering a password from an SMS.

---

How do scammers operate?

Bank has recently received signals about false emails sent by scammers impersonating Bank Millennium. They inform about loyalty bonus, available after clicking on the link. The link leads to fake login page, where you are asked to enter MilleCode and P@ssword 1, and then your payment card details.

We inform that Bank sends no such messages or any links via email or SMS! Also, we never ask you to enter your payments card details while logging in your bank account.

---

How to defend yourself?

• Do not click on links in emails or SMS, especially if you are not sure about the sender or where the link will lead you
• Log in to Millenet only at Bank's website and before logging in check if the connection is encrypted (closed padlock in the bar with the address)
• When logging in to Millenet, enter only the 2 randomly selected characters of the PESEL number or a document - we never ask for more characters!
• when logging in, never enter your payment card details.

---

Learn about scam scheme

Police informs about emails regarding alleged banking fraud. The message, allegedly signed by the Police Headquarters, is accompanied by an attachment with malware that infects or completely blocks the device.

Read the police information >

---

How to defend yourself?

• do not click on links in emails or SMS, especially if you are not sure about the sender or where the link will lead you
• do not download unknown applications, available from a link
• do not download any attachments to emails, if you don't know the sender or the form of the message raises any doubts
• if your computer has been blocked - under no circumstances pay scammers to unlock it, but change access to your bank account and report a crime

---

When to be careful?

Please, pay particular attention to:

• messages on social network and communicators, e.g. message from the fraudster impersonating your friend and asking for a BLIK code to make an urgent payment
• ads on social networks pretending to be Bank Millennium's offer and informing about cash rewards

---

How to avoid the fraud?

Zawsze dokładnie sprawdź nadawcę i treść otrzymanej wiadomości oraz nie klikaj w nieznane linki i nie instaluj żadnych aplikacji z takich linków.

Dodatkowo przypominamy, że Bank nigdy nie wysyła do Ciebie wiadomości e-mail czy SMS z linkami oraz nigdy nie prosi o podanie poufnych danych w ten sposób.

---