Skip to content
Submit incident
AII-1001-54503
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.Supporting sources are pending verification.

PKO BP warns of AI-generated fake bank IDs in fraud scheme

PKO BP, Poland's largest bank, warned customers of a fraud scheme in which scammers use AI-generated fake bank employee credentials to pose as staff and trick customers into transferring money or installing malware. The bank stated its employees do not send credentials via SMS or email.

9 December 2025 Β· PKO BP Β· Fraud, scams and manipulation
9 December 2025
AII-1001-54503
Quick facts
Organization
PKO BP (victim)
Category
Fraud, scams and manipulation
Country
Poland
Date
9 December 2025
Drafted by
Raidu Incident Detection

What happened

PKO BP warned customers of a new fraud scheme in which scammers use artificial intelligence to create realistic-looking fake bank credentials.

Perpetrators contact targets claiming to be bank employees, informing them of alleged loans or account threats, then send SMS or email containing AI-generated fake credentials to build false trust.

Reported impact

PKO BP stated that customers could lose all their money in these attacks and that the scheme targets Poles' financial data and accounts.

Governance controls

PKO BP publicly stated that its employees do not send business cards or credentials via SMS or email.

Classification

Organization
PKO BP (victim)
Category
Fraud, scams and manipulation
Industry
Financial and insurance services
Country
Poland
Harm status
Potential harm
Intent
Intentional
Timing
Unknown
Harm types
Economic or property
Harmed
Consumers
Failure modes
Deepfake image
AI systems
Unidentified generative AI system

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident