You share your PIN, you lose money. A warning has been issued against a fake banking app
The CSIRT team warns against a scam using the NFC Relay method.
Quick Look
- CSIRT KNF warns Android users against a fake application that steals payment card data using the NFC Relay method.
- The fraud spreads, among others: via SMS and fake bank websites.
AI-generated summary
Why It Matters
CSIRT KNF monitors and responds to computer security incidents in the Polish financial sector.
The warning applies to users of Android devices.
The fake application is not available in the Google Play Store, it may reach us through a fake e-mail, SMS, instant messaging or a website impersonating a bank - warns the CSIRT team.
CSIRT is a Computer Security Incident Response Team for the Polish financial sector created by the Polish Financial Supervision Authority.
What exactly does fraud look like?
It uses the NFC Relay method - after starting the application, it asks you to touch your payment card to the phone. If we do this and enter our PIN, thieves will be able to use our card remotely.
“Install applications only from trusted sources,” reminds CSIRT.
What does the bank say?
The Interia portal contacted the press office of Bank Pekao S.A. and asked about the fake application. Whenever we see such an application on the bank's website that impersonates our bank, the standard procedure is to immediately report it to the appropriate services to block it. That was also the case here. Thanks to the good cooperation of cybersecurity experts, we managed to block this application very quickly, said Paweł Jurek, the bank's spokesman.
He added that if we have any doubts about the authenticity of the application, we can call the bank and ask for clarification. If you have installed a fake one and provided your data, you should block or block the card.
Open Questions
- Who was behind the creation of the fake app?
- How many users may have been affected by this scam?







