Rising Phishing Scams Impersonate Major Brands and Official Institutions
Fraudsters use fake vouchers and payment notices to steal money from unsuspecting victims.
1Deceptive Rossmann Voucher Campaign
Fraudsters are circulating fake Rossmann gift voucher promotions via WhatsApp and Messenger. Users are lured into completing surveys and selecting prize boxes to claim rewards. The process requires sharing the link with twenty friends or five groups, which helps scammers rapidly expand their reach before victims realize the scheme is fraudulent.
2Hidden Subscription Costs Revealed
The scam forces users to send premium SMS messages costing nearly 62 PLN. Furthermore, victims are directed to the H5 Games service, which initiates a weekly subscription fee of 12.30 PLN. CERT Orange analysts estimate that victims lose approximately 75 PLN initially, with costs accumulating every seven days if not cancelled.
3Spotify Premium Phishing Tactics
Cybercriminals are impersonating Spotify in emails claiming that bank payments for Premium subscriptions were rejected. These messages direct users to malicious websites designed to harvest login credentials and sensitive payment card data. Experts advise users to verify account statuses only through official applications or the company's verified website directly.
4Patent Office Impersonation Investigation
The Warsaw District Prosecutor's Office launched an investigation on November 3 into fraudulent payment demands sent under the guise of the Polish Patent Office. These communications target individuals and companies, requesting fees for trademark protection. The probe covers incidents occurring between 2025 and October 30, 2026, involving significant financial losses.
5Quantifying the Financial Impact
Official reports published on November 4 indicate that the losses attributed to the Patent Office impersonation scheme reached at least 25,254 euro and 7,781.58 PLN. Investigators are currently examining the methods used by perpetrators to receive, conceal, and transfer these illicit funds as part of the ongoing criminal legal proceedings.
6Verification and Safety Measures
The Patent Office explicitly advises recipients to compare bank account numbers provided in suspicious letters with those listed on their official website. If any correspondence regarding trademark fees appears questionable, individuals should contact the office directly or consult their legal representative to verify the authenticity of the payment request before transferring funds.
7Mechanics of Social Engineering
These scams rely heavily on social engineering, leveraging the trust users place in well-known brands or official government entities. By creating a sense of urgency or offering attractive rewards, attackers bypass critical thinking. The inclusion of fake user comments on landing pages further validates the scam, making it appear legitimate to victims.
8Broader Cybersecurity Implications
The diversity of these attacks, ranging from retail vouchers to government notices, highlights the evolving nature of digital fraud. Maintaining vigilance against unsolicited links and verifying payment requests through independent channels remains the most effective defense. Users should regularly monitor their bank statements for unauthorized subscriptions or unexpected charges linked to these services.