Be vigilant!

  • Watch out for new phishing attempts by cybercriminals! Scammers send email or SMS messages telling you that you need to update or authenticate your data to avoid having your account locked. We do not send such messages and never offer any system or data updates via email or SMS. If you receive such an SMS or e-mail, report it to us - write via inbox or call the dedicated helpline at 22 598 44 44 (fee according to your operator's price list).

    Scammers send out false information that:

    • Your account is not compliant with the "new security system"
    • Access to your account has been or will be blocked

    At the same time, the message contains a link to: update, authenticate or unlock. Do not click on such links!

    And if you by mistake go to such a page, do not enter any personal information, online banking login details, payment card details and account numbers. Inform us immediately about such a situation.

    • The content may include language and spelling errors or colloquial and ungrammatical phrases.
    • Whenever you receive a message that your account is blocked or needs to be authenticated, call us and confirm it!
    • Pay attention to what address or number the message was sent from and compare it to the communication you receive from your bank.

  • Cybercriminals are not idle, this time they impersonate tax offices. You may receive an e-mail or text message about your tax refund - beware of such messages. If you receive such an SMS or e-mail, report it to us.

    Scammers send out false information that you can get a tax refund. They will send you a link to a site that impersonates a tax authority or government site such as the Ministry of Finance, the National Tax Administration and the Tax Office.

    Do not click on the link sent in such correspondence! Tax offices or Ministry of Finance do not offer taxpayers to collect overpaid tax via e-mail or SMS.

    If you inadvertently go to such a page, do not give out your personal details, internet banking login details, payment card details and account numbers!

    • The sender of the message - verify the website address and sender details.
    • The content of the message - there may be spelling mistakes in the message.

  • The scammers impersonate PGE (Polska Grupa Energetyczna) or other providers and inform that you are in arrears with the payment and you are at risk of power cut. Be careful and don't click on the link in the SMS.

    If you have any doubts, if the message is true, please contact your electricity provider. Always search for the current contact number on the provider's website.

    Tell us about anything suspicious by calling the dedicated helpline: +48 22 598 44 44 (fees in accordance with the operator's price list) or via e-mail: kontakt@bankmillennium.pl.

  • HideSee more

Secure banking step by step

A lot depends on you

Keep in mind the secure banking rules

  • Do not click on unknown links in e-mails, text messages, messages on social networks.

  • Check the sender of the message carefully and do not enter confidential data in the e-mail.

  • Don't open attachments unless you know what might be in them.

  • Do not share your login details with anyone, keep passwords strong and change them from time to time.

  • Check transaction notifications carefully - if something is wrong, do not approve the operation!

  • Before logging in, check if the website address is right, there are no typos or misspellings and if the connection is encrypted.

  • Install anti-virus software on all devices on which you log into electronic banking and update them on a regular basis.

  • Use trusted devices and programs, if you share the device with other users, always remember to log out.

  • In case of losing a card or a phone with an active application - block them immediately, e.g. in Millenet

While shopping online

  • Before making a purchase, check that the store is trustworthy - look for opinions on the Internet carefully

  • Check the details of the transaction before confirming it with an SMS P@ssword or in the application

  • Do not enter data that you think are not needed to complete the transaction

See what else you can do

There are many ways to keep it secure. See other videos.

MORE VIDEOS about: security

Scammers' schemes

  1. Phishing
  2. Fake consultant
  3. Malware
  4. Card frauds
  5. Message from "a friend"
  6. Fake stores and ads
  7. Cryptocurrency frauds
  8. SIM card swap

  1. What is phishing?

    It's an attempt to catch you in scammers' nets, who e.g. impersonate your bank.

    What for? To make you pass your personal data, login or payment card details. As a result, your account or card will be accessed by unauthorized persons who can order transactions or impersonate you.

    But how? The scammers send e-mails or SMS-s persuading to act immediately, such as:

    • 'Your bank account has been blocked'
    • 'Pay fee for your card'
    • 'Your parcel has been withheld due to underpayment, settle the arrears'
    • 'On ... the execution was initiated. Possibility of amicable repayment for PLN 8.44'

    Be careful

    • Do not click on links and do not download any applications unless you know the sender of the message.
    • You will never receive such a message from Bank Millennium, because we do not send any links in e-mails or SMS.
    • When you log in on the bank’s website, look at the address bar. Check if the website address is right, there are no typos or misspellings and if the connection is encrypted (icon with a closed padlock).
    • If something looks different than usual, please do not log in - we always inform about it when we change something on the login page.
    • On the login page, we always ask for only two randomly selected characters of the identifier - never enter the entire PESEL number or the entire document number.

  2. Fake consultant, or vishing

    How do you know that the person you are talking to on the phone is really who they say they are? This is obviously very difficult, and it is easy for fraudsters to gain our trust and obtain sensitive data.

    How to defend yourself?

    • Don't share login details with anyone - only you should know them.
    • The bank consultant can ask you to provide MilleCode, but will never ask for your login password.

  3. Malicious software, or malware

    How does it work? You get an e-mail or an SMS with a link to download an app or 'very important' attachment. You click on it and this way you infect your computer, phone or tablet.

    What for? This one click allows to install a malicious application or program on your device that can, for example, track your activity and download data, or take control of your device completely.

    Keep in mind:

    • never click on unknown links
    • don't download attachments if you don't know what's in them or you don't know the sender of the message
    • do not install unchecked applications - preferably before installing an application, look for comments about it in the application store

  4. Card frauds

    How? You enter your card details in an unchecked store, or in response to fake e-mail, you give someone your plastic card or write your PIN on the card or a sticky note attached to the card.

    What for? The fraudster needs your card details to make online transactions or tokenize the card, for example in Google Pay service. To pay in a stationary store the fraudster needs your card, and for larger payments also PIN.

    How to defend yourself?

    • Never scan the card, do not pass on the data from the card to anyone
    • Pay with your card in trusted online stores
    • Carefully read the terms and conditions of internet subscriptions you accept (sometimes the first month is free, and the next one is charged a high fee)
    • Do not give your card or PIN to an unauthorized person (e.g. waiter in a restaurant or bar

  5. Message from "a friend"

    Your friend informs you via messenger app that he need money at once, he will return tomorrow and you only need to give him a BLIK code. Or he sends you link to the transfer (PayByLink).

    What do you do? At first, everyone is probably willing to help their friend. Yet, be careful! This may be a fraud scheme. Before you help your friend, make sure It really is your friend - scammers could have get access to his account. The best you can do is to call him and ask if he really is in need.

  6. Fake stores and ads

    How does it work? Scammers publish fake ads and fake stores' websites. Very often they give "special offers" or even rewards to get your attention and persuade you to use their offer.

    Don't get yourself "caught":

    • Before taking advantage of such a "great deal", try to verify that it is trustworthy.
    • You can search for comments on the Internet about a given company or a specific website.
    • If you have any doubts, do not order a payment or share your details.

  7. Fraud on cryptocurrency exchanges

    How? You come across an ad promoting easy ways to invest in cryptocurrencies:

    • "You don't need to know anything about investing"
    • "We guarantee quick profit"
    • "We will do everything on your behalf, only scan your payment card/ID and give us your login details/SMS P@ssword"

    What for? To extort your personal details, login details to your bank account or payment card details, and above all, to persuade you to transfer your money. Unfortunately, when you want to withdraw your funds, contact with the "broker" is broken and the money transferred cannot be recovered.

    How to defend yourself?

    • Check the credibility of the broker. Check online reviews, for example in conjunction with the words "fraud" or "scam". Don't stop at just one review page.
    • Check, if the institution - "broker" is on the KNF's list of warningslink opens in a new window
    • Do not share your bank account login details with anyone.
    • Do not share confidential information about your payment cards with anyone.
    • Do not send photos/scans of your ID to anyone.
    • Do not install suspicious software on devices from which you log into your bank account.
    • If you receive a transfer from an unknown sender, do not forward the funds under any circumstances, even if "your Advisor" asks for it - you may unknowingly be involved in a crime.

    More information on both investing in cryptocurrencies and the resulting threats can be found at: KNFlink opens in a new window, NBPlink opens in a new window (in Polish) and ZBPlink opens in a new window (in Polish).

  8. SIM card swap

    How? The scammer goes to the mobile phone salon claiming to be you and asks for SIM card replacement. The operator blocks the old SIM card and gives the fraudster a duplicate.

    What for? To take control of the authorization of your transactions.

    When you should realize that you are a fraud victim?

    When you want to use your phone, for example call someone, and it is impossible.
    If such a thing has happened to you, be sure to report it to your mobile operator and check your account.

We take care of your online security

  • Secure solutions

    We use various security features in Millenet and Bank Millennium mobile application - we use the latest technologies and we design services so that they are very safe.

    Learn more Secure solutions
  • Additional card payment protection

    When paying with Bank Millennium cards online, we support the 3-D Secure solution offered by stores, which is an additional payment security.

    Check it Additional card payment protection
  • Transaction authorization

    Operations ordered in the electronic banking system need additional confirmation. Thanks to it, you can be sure that no online transfer or card payment will be ordered without your knowledge.

    Check methods Transaction authorization
  • Payment limits

    Transaction limits, i.e. the maximum amount you can order in a given operation or in total on a given day, will provide you with additional protection. You can easily adjust the limits to your needs in the settings in Millenet or in the mobile application.

    How to set Payment limits
  • Locking or restricting a card

    In Millenet and in the mobile app, you can temporarily lock or restain a card that has been lost or stolen at any time. You do not have to wait for a call to the helpline or for the opening of a Bank branch.

    How to do it Locking or restricting a card
  • Encrypted connection

    The security of Millenet internet banking is ensured by the use of encrypted data transmission between your computer and the Bank's server.

    How to check Encrypted connection

Check who calls you

You receive a call from a person saying their work in a bank, and claiming that someone tried to log in to your account, sent a money transfer for you or tried to take a loan using your name.



It's a stressful situation and for sure you want to act immediately to secure your money. But be careful! It can be a fraud scheme. How can you check, if you are talking to the real bank employee?



Now you can check it easily in our mobile app. During the phone call, say you want to verify the consultant's identity in the app.

  • If you are talking to our employee, you will get push in the app, where we will confirm the name of the consultant calling you.
  • If the caller refuses or will give you inaccurate data - hang up and let us know by calling +48 22 598 44 44 (fee according to your operator's price list).
  • Keep in mind that our employee will send you push notification only via banking app. Our employee will never send their personal details via e-mail, SMS, or any messenger app.

Are you a victim of fraud or want to report suspicious situation?

  1. Write to us

    Fill in the form

  2. or call security helpline

    22 598 44 44