How can you protect your identity online?

Sharing sensitive data with strangers

Some really simple habits can protect you from identity theft and fraud. Below are some tips, with real-life examples and steps to follow:

Do not give out your details over the phone or by text message: If someone calls pretending to be a bank employee, a ZUS representative or a police officer, and asks for your PESEL number, card number or password – hang up immediately. Call the bank’s official number yourself, using the details from your statement or website (e.g. 800 for PKO BP). Example: “Ms Halina, this is the bank – please give us your PIN.” It’s better to check!
Do not share photos of your documents: Never send a scan of your ID card, passport or bank statement via WhatsApp or email, not even to a ‘friend’. These photos end up in the hands of fraudsters and are used to set up fake accounts. Keep your documents in a drawer or encrypt them on your computer.
Use strong passwords and different ones for each service: A strong password is at least 12 characters long and includes upper and lower case letters, numbers and special characters (e.g. “Autumn2026!Cat”). Never use the same password for Facebook and your bank – if your social media account is hacked, you’ll lose access to your bank account. Use a free password manager such as LastPass.
Don’t click on suspicious links: An email saying “Your account has been blocked – click here” is a trap. Always type the web address in manually (e.g. ing.pl) and check the browser address bar – it must say “https://” and show a padlock. Example: Is the link to the website shortened via “bit.ly”? Don’t take the risk!
Adjust your privacy settings on social media: On Facebook, change your settings: hide your date of birth, address and friends list from the ‘public’. Type ‘privacy settings’ into the Facebook search bar and select ‘Friends only’. This blocks scammers collecting data.
Enable login notifications: In your banking app or online banking portal, enable SMS or email alerts for every login attempt. You’ll receive an alert saying: “Attempt to log in from a different city?” – if so, change your password straight away.
Enable two-factor authentication (2FA): In Gmail, your banking app or on Facebook, add an SMS code to your login/password. Even with your password, a scammer will need your phone. Enable this in your account settings.
Register your PESEL number and change your passwords regularly: Registering your PESEL number (free on gov.pl or at the police station) prevents credit fraud. Change your bank and email passwords every 3 months. Write down your new password in a notebook.
To protect yourself, always ask the sender directly whether they sent a link; do not click on anything suspicious; type website addresses in manually; delete and block such messages; and disable automatic media downloads in apps.

What should you do if something seems suspicious?

Check BIK.pl every month (you can do this for free once every six months), report it to the police and your bank. Cancel your ID card online at gov.pl. Remember: it’s better to be safe than sorry!