In a significant recent operation, Poland’s Central Bureau for Combating Cybercrime (CBZC) dismantled an organized criminal group that stole over 100,000 Facebook login credentials through a sophisticated phishing campaign.

Key Details of the Raid

• Perpetrators: Law enforcement identified 11 members of a gang operating across Poland and Germany between May 2022 and May 2024.
• The Phishing Method: The group created fake websites mimicking popular news portals with sensational headlines to lure victims.
• Data Capture: Clicking these links triggered a fraudulent Facebook login window; once users entered their credentials, the data was harvested by the criminals.
• Criminal Intent: Stolen accounts were primarily used to extract BLIK payment codes (a popular mobile payment system in Poland) from the victims’ contacts to commit financial fraud.

Enforcement Actions

• Arrests: Six suspects have been placed in pretrial detention as of February 23, 2026.
• Charges: Prosecutors filed more than 400 charges, including leading an organized criminal group, unauthorized access to computer accounts, money laundering, and online fraud.

Recommended Security Steps

If you suspect your credentials may have been compromised in a similar scam, take immediate action through official channels:

• Change Passwords: Update your login details immediately on the Facebook Security Settings page.
• Enable 2FA: Activate two-factor authentication via authenticator apps like Google Authenticator rather than SMS to prevent account hijacking.
• Report Fraud: In the UK, report cybercrime to Action Fraud; in the US, use the FBI Internet Crime Complaint Center (IC3).