Until now, the scam scheme on the OLX was based on sending messages to the victim via the WhatsApp messenger. CERT Orange Poland warns against a new pattern of fraud.

Scammers send an email that looks credible, it contains the correct OLX logo, as well as official sounding content. By sending an email from the olx-alerts.com domain, scammers inform the seller that their item has been purchased and that the sale must be confirmed within 24 hours. To do this, one must click the “confirm order” button included in the email, after which they will be redirected to the OLX partner’s page - InPost / Poczta Polska.

According to the CERT, all links but the last contained in the message lead to the actual subpages on the OLX website, the last one leads to a different domain and a prompt will convince the victims to select the bank in which they have the account and log in.

If the seller is deceived and does not pay attention to the address bar, his account balance will be severely depleted. Don’t let ourselves be fooled.