On the occasion of Safer Internet Day, we’re talking more and more about phishing and fraudulent investment schemes.

Computer Security Incident Response Teams (CSIRTs) are warning of a growing number of attacks, so it’s important to know how to verify information.

For the OliEdu Foundation for Civic Education, this is a clear signal: cybersecurity education and training are no longer a luxury but a necessity.

What is phishing, and why is it so dangerous?

Phishing is a scam that involves impersonating banks, courier companies, service providers, public institutions, or well-known individuals. The goal is to steal login credentials, payment card numbers, money, or to install malware.

Cybercriminals use:

  • fake investment ads,
  • messages about alleged traffic tickets,
  • information about underpayment for shipping,
  • notices regarding energy overpayment refunds,
  • text messages from the “provider” with a link to a fake website.

The mechanism is simple: time pressure, fear, or the promise of profit. The result—real financial losses and immense stress.

What are the main phishing threats to children and teenagers?
  1. Theft of social media accounts—hijacking a profile and using it for further scams.
  2. Phishing for online game data—loss of purchased items and in-game currency.
  3. Blackmail and cyberbullying – using stolen data or photos to harass someone.
  4. Fake contests and “easy money” schemes – loss of money from a parent’s account.
  5. Infecting a device with malware – criminals gaining access to private information.

Young people often act impulsively and click on links more quickly—which is why prevention and hands-on workshops are so important. Parents also play an irreplaceable role here—through supervision, conversations with their children, and setting limits to protect them from cyber threats.

What are the main phishing threats to seniors?
  1. Fake investments “guaranteeing a profit”—the loss of a lifetime’s savings.
  2. Impersonating a bank – stealing login credentials.
  3. Text message about an underpayment for a package – credit card information theft.
  4. False information about debt or a traffic ticket – extortion.
  5. "Overpayment refund" scams – redirecting to a phishing site.

Seniors often have less digital experience but tend to trust messages that resemble official correspondence. Scammers still manage to deceive many people this way, which is why it’s so important for users to be cautious and for loved ones to look out for the seniors in their lives.

Below are 10 safety rules.

How can you avoid falling for phishing?

  1. Don’t click on links when you’re pressed for time.
  2. Carefully check the website address (URL).
  3. Do not provide your PIN or passwords via email or text message.
  4. Use two-factor authentication (2FA).
  5. Do not open suspicious attachments (.exe, .js, .iso, .html).
  6. Verify information directly with your bank or financial institution.
  7. Do not trust “guaranteed profits.”
  8. Keep your system and software up to date.
  9. Use strong, unique passwords.
  10. Report suspicious messages to the appropriate authorities (e.g., CSIRT).

In a suspicious situation, stay calm, analyze everything, avoid making decisions under pressure, thoroughly verify any unusual requests, and consult someone who can support you. 

If you suspect you have been the victim of phishing, the Ministry of Digital Affairs recommends the following steps:

  1. If you’ve opened a suspicious attachment or entered your information on a fake website, you should immediately change the passwords for your accounts.
  2. If you have provided credit card or bank account information, you should contact your bank as soon as possible.
  3. It’s also a good idea to enable two-factor authentication on all websites that offer this feature.
  4. You can report the incident to the NASK CSIRT team:
    • via the form on the website https://incydent.cert.pl/;
    • in the mObywatel app – the “Stay Safe Online” service;
    • Suspicious text messages can be sent to the toll-free number 8080.
  5. If you have been the victim of a crime, file a report with the police or the prosecutor’s office: https://www.gov.pl/web/gov/report-a-crime.

Education is the best protection, which is why at the OliEdu Civic Education Foundation we offer:

  • training sessions for students and teachers,
  • workshops for parents and seniors,
  • cybersecurity prevention programs,
  • classes combining digital safety with mental health,
  • phishing attack simulations in an educational setting.

We teach how to recognize manipulation, how to respond to attempts at fraud, and how to build healthy digital habits. We show that online safety is a life skill—just as important as reading or counting.

We need more training sessions and workshops!

The growing number of attacks shows one thing: technology alone isn’t enough. We need systematic digital education in schools, ongoing support programs for seniors, and regular training for teachers.

Phishing isn’t going away. But through education, we can significantly reduce its impact.

The OliEdu Civic Education Foundation remains committed to building a safe digital environment for children, youth, and seniors. Because online—just like in life—knowledge is the most effective shield, and we’re experts at sharing it!