Scammers are attempting to trick people into installing malicious application by impersonating InPost. If you receive an SMS in which 0 appears instead of “o” in the InPost name, beware of fraud.

Fraudulent SMS are signed as “INP0ST” and suggest that we will not receive a package collection code without downloading a new application.

According to Niebezpiecznik, after activating the link we are transferred to the page where users are prompted to download the application in order to receive a package collection code. We receive information that after downloading the app, we will automatically receive a text message on the device. In fact, we’re being tricked into downloading malicious .apk file.

Another scam based around InPost is focused on conducting “OHS procedure” of the package we ordered. Users are informed that they need to pay the amount due to avoid the return of the package.