Scam SMS in Poland: how to report it to CERT Polska (8080)
Short answer: Forward the full scam SMS, link intact, to 8080 (free in Poland, max 3 messages per number in 4 hours). Report emails to [email protected] or incydent.cert.pl.
Poland has a free, official route for reporting scam text messages and emails. If you live here and get a "parcel fee" SMS, a fake bank alert or a message that looks like it comes from a government office, you can forward it to the national CERT team in a few seconds. This guide explains how, based on official pages checked on 18 October 2026.
Report a suspicious SMS: forward it to 8080
According to the government knowledge-base page on reporting suspicious messages (dated 21 March 2023 and still online when checked), the number for SMS reports is 8080. Forward the message in its original form, with the full link left intact. Do not shorten, edit or cut the link.
- Use the "forward" option on your phone if it has one. If not, copy the whole text and send it to 8080 as a new message.
- It works for scam texts with a link and for those without one.
- The page states a limit of 3 messages from one number in 4 hours.
- Sending to 8080 is free within Poland. Abroad, your operator's tariff applies.
- The number has worked since 22 November 2023 and exists because of the 2022 law on combating abuse in electronic communication.
Reporting does not replace talking to your bank. If you already typed card details, a BLIK code or a login on a page, call your bank first and block the card or access.
Report a suspicious email or website
For emails, fake shops and scam pages, the same government page points to two routes: write to [email protected], or use the form at incydent.cert.pl. CERT Polska's own knowledge base confirms that private individuals can report incidents voluntarily through that form, and that SMS messages go to 8080 unchanged.
Useful things to include: the full text, the sender address or number, the link, and screenshots. If you can, attach the original email file rather than a pasted copy, since it keeps the technical headers.
What the scam usually looks like
CERT Polska describes phishing as manipulation: the attacker pretends to be a bank, courier, office, shop or even a relative, and wants you to hand over a password, a card number, a code or money. Smishing is the SMS version, vishing is by phone call and quishing uses QR codes.
Some points from CERT Polska's guide worth remembering:
- The sender field of an SMS or email can be faked, so the sender name alone proves nothing.
- Simply opening a link is usually harmless. The danger starts when you enter data, retype a code, confirm an operation or install an app from the page.
- A BLIK code cannot be used to "receive" a transfer. If someone asks for one, they want to pay or withdraw money from your account.
- A fake link can reach you through ads, social media posts, marketplace chats and QR codes on parking meters, not only through SMS.
The practical test is not whether a link looks safe, but whether the page you are about to type into is really the one it claims to be. Open your bank app or type the official address yourself instead of using the link.
* Photos: Bilock (cover) and Chain Big 4 (body), public domain, via Wikimedia Commons.
If you already clicked or paid
1. Do not enter anything more. Close the page. 2. If you gave card or banking data, contact your bank at once using the number on your card or in the official app. 3. If you shared your PESEL or ID details, consider the free PESEL reservation described in the site guide on protection from loan fraud. 4. Change passwords on any account whose login you typed, and turn on two-factor authentication. 5. Report the message to 8080 or incydent.cert.pl, and consider a police report if you lost money.
What these sources do not cover
The official pages we checked are written for people in Poland generally. They do not say whether messages in English or other languages are handled differently, and they do not describe any special procedure for foreigners. The government page is from 2023, so check the current wording on gov.pl and wiedza.cert.pl before relying on details such as the message limit.
Frequently asked questions
Do I pay to send a scam SMS to 8080?
Within Poland, no. The official page says the number is free. Abroad, the tariff of your operator applies.
Will CERT Polska reply or get my money back?
The sources describe 8080 and incydent.cert.pl as reporting channels. They do not promise a reply or a refund. For lost money, contact your bank and the police.
Can I report an email, not only a text?
Yes. Send it to [email protected] or use the form at incydent.cert.pl.
Should I click the link to check if it is fake?
CERT Polska says the click alone is usually harmless, but the risk starts when you enter data or install something. The safest choice is not to open it and to use your bank's official app or address instead.
