The BLIK code scam and the OLX/Vinted 'buyer' scam: how they work
Quick answer
A BLIK code is used for instant payments and cash withdrawals, so you must never give it to anyone who asks for it by message — even if they look like someone you know. On OLX or Vinted, beware of 'buyers' who pull you off the official chat and send links or QR codes to 'receive' the payment: these are scams that steal your card details.
The ‘friend’ BLIK code scam
How it works. The scammer breaks into (or impersonates) a messaging account and, pretending to be a relative or friend in trouble, asks you to send a BLIK code. With that code they withdraw your money in seconds.
How to protect yourself.
- Never share a BLIK code with anyone over chat. Whoever has it withdraws your money, and the transaction is instant and irreversible.
- If “someone you know” asks for it, call that person to confirm (their account may be hacked).
- The police and officials never ask for a BLIK code. Remember: BLIK is for your payments, not for “helping” others.
- Turn on two-factor authentication (2FA) on your social accounts so no one can impersonate you.
The ‘buyer’ scam on OLX and Vinted
How it works. You’re selling something and a “buyer” messages you off the platform’s chat. They claim they’ve already paid and send a link or a QR code to “receive” the money. That link leads to a fake site mimicking the platform or your bank and steals your card details.
Warning signs.
- They pull you off the official chat (asking for WhatsApp, SMS, email).
- They send you a link to “get paid”.
- Pressure and excuses to avoid the normal payment flow.
Simple rule
Use only the platform’s own payment system. To get paid for a sale, your card details are never required. Don’t click links that arrive in private messages.
If it has already happened
Contact your bank immediately to block the card, change your passwords, and report it to CERT Polska (forward suspicious SMS to 8080). If a crime is in progress, call 112. More contacts in Resources.
Frequently asked questions
What exactly is a BLIK code?
Will the platform ask for my card details to 'receive' the payment?
Sources
- 1.Police: the BLIK scam (never share the code; no official ever asks for it) — Polish Police (policja.pl)
- 2.Police: the 'friend' BLIK scam (hacked account → urgent request) — Polish Police (policja.gov.pl)
- 3.Police: the 'payment link' scam on Vinted/OLX — Polish Police (policja.gov.pl)
- 4.Forward suspicious SMS to 8080 and report incidents to CERT Polska — gov.pl / CERT Polska