A new phishing campaign targets Polish drivers with fake SMS messages demanding payment for speeding tickets on the A4 motorway between Katowice and Krakow. Stalexport Autostrada Małopolska, the road operator, warns that it never sends such notifications and urges recipients not to click any links.
The fraudulent messages, sent under the company’s logo, claim the recipient must pay a fine for exceeding the speed limit on the A4. They often include a link to a fake website that looks like an official government or toll service portal. The goal is to steal personal data, credit card numbers, and login credentials.
– We never send this type of SMS with information about the need to pay a speeding fine. Do not, under any circumstances, click on the link provided – said Daniel Gryt, spokesperson for Stalexport Autostrada Małopolska SA.
How the scam works
The attackers create fake websites that closely mimic official systems, including those related to traffic enforcement. After entering the fraudulent site, victims are asked to provide their vehicle registration number and, subsequently, their credit card details. The scammers often impose short payment deadlines and threaten legal consequences to pressure recipients into acting quickly.
According to cybersecurity experts, these methods are constantly evolving. The fraudsters adapt their tactics to appear more credible, using logos and layouts that closely resemble those of legitimate institutions. The A4 incident is just one example of a broader trend targeting drivers across Poland.
What to do if you receive a suspicious message
Stalexport Autostrada Małopolska advises drivers to verify any information about fines exclusively through official channels. The company emphasises that it never demands payment via SMS. If you receive a suspicious message, you can forward it free of charge to CERT Polska at the number 8080 – Poland’s national cybersecurity team that monitors and blocks such threats.
Experts recommend not clicking on any links in unexpected messages, and instead manually typing the official website address of the relevant institution into a browser. They also suggest reporting phishing attempts to the police or the Office of Electronic Communications if personal data has been compromised.
As digital fraud becomes more sophisticated, vigilance is the best protection. Always double-check the sender’s identity and never share sensitive information over unverified links.
Źródło: WNP.PL, Fot. Longfin Media / Shutterstock
