WARNING! PHISHING EMAILS, SMS MESSAGES, AND FAKE SOCIAL MEDIA ANNOUNCEMENTS CONTINUE TO BE SENT USING THE NAME OF MAGYAR POSTA — AND THE NUMBER OF UNSOLICITED CASH-ON-DELIVERY PARCELS IS ALSO INCREASING

Be careful: your bank card details and the money in your bank account are at risk if you click on a malicious email or SMS link, provide data carelessly, or if you fail to verify whether you actually ordered a parcel from the supposed sender.

29 September 2025

Protect your valuables from online scammers!
Learn about the latest fraud attempts and recognize financial scam techniques with the help of Kiberpajzs.

Recently, the number of fraudulent activities carried out in the name of Magyar Posta and its services (e.g. EMS service) has unfortunately increased. Fraudsters unlawfully use our company's trademarks (logo) and brand identity elements to deceive the public. We receive such reports from our customers daily.

In fake emails, SMS messages, or phone calls, the fraudsters typically request confirmation of personal details or payment of a fee or donation, allegedly related to parcel delivery, non-existent prize games, promotions, or fictitious charity actions. They may also threaten with claims of overdue payments. It also happens that scammers respond to ads posted by the public, pretend to be serious buyers, and misuse the name of Magyar Posta’s EMS service to demand data and money for supposed insurance/shipping/commission fees through fake emails or SMS messages.

By clicking on links such as “Click here”, “Pay online”, “Send me the parcel”, “Confirm your address”, “Your parcel is waiting for delivery, please confirm customs payment”, or similar, recipients are redirected to a phishing website, where any data entered immediately falls into the hands of scammers, putting the bank account at risk. Opening the link may also install malicious software onto the device.

Please do not click on any links or provide any data if you receive a suspicious email or SMS. Magyar Posta never requests delivery addresses or contact details by phone or email for online orders. These details must be provided to the webshop when placing the order, and the webshop shares them with the delivery service.

Always check the sender’s email address or—when receiving an SMS—the sender's phone number. This often reveals immediately that the message did not come from Magyar Posta's official contact information (phone: 06-30-344-4987). By hovering your mouse over the email address, you can inspect whether the link truly points to a posta.hu domain. It is also useful to compare the sender's address with previously received, verified messages from Magyar Posta.

Remain vigilant—our company never sends notifications from foreign phone numbers or from email addresses ending in “.com”!

Magyar Posta sends online or SMS payment notifications only for customs clearance fees for international items, and these always contain the link: www.posta.hu/szolgaltatasok/vam. Emails, SMS messages, or social media advertisements promising "customs exemption" or urging "pay now to avoid customs fees" are deemed as suspicious. Also be cautious if you receive unsolicited calls, emails, or SMS messages claiming that your parcel is being held due to unpaid fees.

If your shipment includes a tracking code, you can enter it on the Posta website at any time to access authentic shipping information. Do not attempt to open official websites by typing into the browser search box—fraudulent "fake pages" may appear among the results.

Always permanently delete suspicious emails and SMS messages to prevent accidentally clicking harmful links in the future.

Signs That Should Raise Suspicion:

  • Unknown sender
  • Unsolicited email, SMS, or call
  • Email appearing in the Junk or Spam folder
  • Poor or unnatural wording, overly urgent or threatening tone
  • Spelling errors, missing accents, Cyrillic or Chinese characters
  • Unjustified requests for personal or bank card details
  • References to unexpected emergency situations
  • Notification about a parcel you never ordered
  • Offers that are “too good to be true”, expensive prizes or exaggerated discounts
  • Missing contest rules or privacy notices for prize games
  • Missing contact details (name, phone number)
  • Missing Terms & Conditions or customer service info on the webshop
  • Requests to install new apps, enable remote access, or enter login details into unknown payment apps
  • A request to “keep the offer secret”
  • Messages sent from foreign numbers or non-.posta.hu email addresses in the name of Magyar Posta

Always verify whether the advertisement or notification is genuine. Check that your internet connection is secure and that the message truly came from the company’s official email or phone number. Do not look only at the sender’s display name—always check the full email address! Example: "Központi Értesítés <kozponti.ertesites@postahu.com>" is fake, since Magyar Posta email addresses never end in “.com”.

Before clicking any link, hover your mouse over it to examine the URL. Be suspicious if:

  • the link does not point to the official site,
  • the URL starts with http:// instead of https:// (“s” stands for secure),
  • the padlock icon is missing or crossed out.

If you accidentally opened such a link, close it immediately and do not enter any login information. Never take, send, or post photos of your bank card on social media!

When buying from unfamiliar webshops, choose cash-on-delivery instead of advance payment. Always check whether the webshop is trustworthy—seller reviews can help. Read the T&Cs, FAQs, especially the sections on complaints and returns. Hungarian webshops must display: company name, registration number, tax number, headquarters, shop address, contact info (phone, email), Terms & Conditions, and privacy notice. If these are missing, the webshop is likely illegal.

You can check the age of any website for free on whois.domaintools.com. If the site was created only days or weeks ago, or if cash-on-delivery is not available, be cautious. Be mindful of the website domain ending (.shop, .xyz, .top, etc.)—these may be warning signs. National Authority for Trade and Consumer Protection (NKFH) maintains a public list of webshops with serious legal violations: https://nkfh.gov.hu/jogserto-weboldalak. Suspicious sites can also be reported there.

For online purchases, it is recommended to use a virtual bank card, which has different details from your physical card and can be topped up with only the amount needed for a specific purchase. This minimizes financial loss in case of fraud. Never transfer money if you are the seller on an online marketplace—you do not need to log in to internet banking to receive money.

Extra caution is required when using mobile devices. On smartphones and tablets, phishing attempts are harder to detect because:

  • you cannot hover over links,
  • smaller screens make mistakes less noticeable.

Ensure regular security updates, backups, encryption of sensitive data, automatic screen lock, a PIN of at least 5 digits, and antivirus protection. For mobile banking, use biometric authentication, enable transaction notifications, and set daily limits for transfers, purchases, and ATM withdrawals.

If a prize or charity campaign is advertised in the name of our company or referring to Magyar Posta, always check our official website to verify active promotions and charitable initiatives. If in doubt, contact our customer service for confirmation. More info on preventing phishing: https://kiberpajzs.hu

Magyar Posta takes customer reports of fraudulent notifications seriously and informs the relevant authorities.

If you fall victim to fraud:

  • immediately contact your bank via official channels,
  • file a police report as soon as possible (preferably on the same day),
  • or report to the consumer protection authority,
  • victims can receive help 24/7 on the hotline: 06 80 225 225.

If the fraud is not yet confirmed but suspected, check your account movements and verify the phone number and email linked to your bank account notifications.

Magyar Posta cooperates with the authorities as required by law. The goods in parcels are part of the contract between the seller and the buyer; Magyar Posta, as the delivery channel, has no authority to judge or check whether the content complies with the contract. We may only interfere with transferring cash-on-delivery payments upon written orders from authorities.

Magyar Posta only delivers the ordered parcel; we do not see and cannot access order details or related documentation. Inspecting the contents is the recipient’s right and responsibility. The recipient may refuse acceptance. For unsolicited (“fake”) parcels, only the recipient can decide whether the order is genuine and whether to accept it.

If multiple parcels are expected, keep track of order numbers. We recommend informing all authorized recipients (family, neighbors) in advance when expecting a parcel, and sharing the order numbers with them. This helps avoid accidental acceptance of unsolicited parcels.

Magyar Posta bears no responsibility for damages arising from responding to fake notifications or accepting unsolicited parcels.

Magyar Posta Zrt.