A new way for fraudsters: "the NFZ method".

• Fake sites that confusingly resemble the official website of the National Health Fund have appeared on the Internet.
• Scammers may impersonate the National Health Service, for example, by offering a purported service of issuing an insurance card, under the guise of the card's upcoming expiration date.
• In this way, they try to phish for personal information and debit or credit card numbers.
• The National Health Fund DOES NOT issue insurance cards, NEVER collects any fees and DOES NOT collect data through an online form to renew or extend insurance. 

The National Health Fund reports that scammers may be impersonating the Fund. Pages are appearing on the Internet that at first glance are difficult to distinguish from the official service of the National Health Fund. Cybercriminals use the Fund's logo and image.

The phony National Health Insurance Fund websites show a supposed mandatory insurance card with the Fund and an upcoming expiration date for that card.

There is also an online form through which scammers want to obtain personal information (e.g., name, address and phone number) and then a credit or debit card number.

- This is a scam and an attempt to extort data and money," warns Pawel Florek, director of the Office of Social Communication and Promotion at the National Health Service Headquarters.

NFZ warns: Beware of these websites:

• hxxps://renew-insurance[.]com
• hxxps://nfz.renewal-insurance[.]info
• hxxps://renew-insurance[.]info

It is through them, among others, that fraudsters try to obtain data, but there may be more such sites.

What should be kept in mind?

• The National Health Fund DOES NOT issue any insurance cards.
• The National Health Fund NEVER collects any fees through its website.
• The National Health Fund does NOT collect data on credit and debit card numbers through its website.
• The official website of the National Health Service is https://www.nfz.gov.pl/. It is a secure site with a valid certificate issued by a trusted certification authority.

How do you protect yourself so you don't lose data and money?

Don't click on links (on the Internet, in an SMS message, or in an instant messenger) when you are not sure that the linked site is secure. You could lose data and money!

Trusted website addresses are always preceded by "https," a communication protocol that provides a secure Internet connection.

- If in doubt, always contact us via our toll-free, 24-hour hotline 800 190 590 or notify the nearest police unit," explains Pawel Florek.

Source: NFZ