14.10.2026

Poles Are Aware of Cyber Threats, but Still Take Risks: One in Four Respondents Clicks on Unverified Links

While 84% of respondents use online banking, 80% shop online, and 77% use social media, risky online behavior remains widespread. One in four respondents admit that they sometimes click on links without verifying them first, while one in five log in to online banking without checking the website address. According to Bank Pekao S.A.’s report, “Cybersecurity: Attitudes and Behaviors of Poles,” there is a clear gap between awareness of cyber threats and everyday online behavior.

The internet has become a natural part of daily life. Banking, shopping, and social media are among the most common digital activities, with smartphones serving as the primary device across all three areas. Between 69% and 89% of users rely on smartphones for these activities.

This level of digital engagement is particularly visible among younger generations. Members of Generation Z spend an average of 5 hours and 13 minutes online each day, compared with 3 hours and 24 minutes among Baby Boomers. At the same time, online and mobile banking rank among the most common digital activities for 78% to 87% of respondents across all generations.

In its report, Bank Pekao examines Poles’ online activity, perceptions of cybersecurity, awareness of threats, protective measures, risky habits, and experiences with cyber fraud and attacks.

“The key challenge today is not the lack of technology. The market offers a wide range of solutions that effectively enhance security, from multi-factor authentication and behavioral analytics to risk-based authentication mechanisms. The problem lies in their inconsistent use. Technology alone is not enough without safe habits. Only by combining technology with user awareness and education can we effectively reduce the scale of cyber fraud,” said Robert Mazur, Director of the Cybersecurity Department at Bank Pekao S.A.

We Feel Safe Online, Yet Know We Could Become Victims

Nearly half of respondents (47%) say they feel safe online, while only 15% disagree. At the same time, 40% believe they could become victims of a cyberattack, and only 16% rule out such a possibility. The highest sense of security is reported by Generation Z, where 55% of respondents feel safe online.

Financial concerns dominate cybersecurity fears. Nearly half (48%) worry about losing money, while 34% fear identity theft leading to unauthorized loans or financial obligations. Concerns about malware affect 28% of respondents, and 25% fear losing their personal data.

We Recognize Phishing and Suspicious Calls, But Less Obvious Threats Remain Challenging

Poles demonstrate strong awareness of the most common cyber threats. Suspicious phone calls are recognized by 93% of respondents, while 91% can identify fraudulent emails and text messages. Attempts to obtain BLIK codes or online banking credentials are recognized by 87%.

However, awareness declines when threats are more technical or less visible. Only 65% recognize malicious QR codes leading to fake websites, and 55% are familiar with denial-of-service attacks. The findings suggest that although awareness is broad, understanding decreases as threats become more complex.

We Know How to Protect Ourselves, But Do Not Always Put That Knowledge into Practice

One of the report’s key conclusions is the disconnect between cybersecurity awareness and daily habits.

50% use only trusted websites.
50% use antivirus software.
38% use different passwords for different services.
36% regularly update operating systems, antivirus programs, and applications.
22% create backups of important files.

The most commonly used security measures are those integrated into everyday digital services. Login notifications are used by 69% of respondents, while 56% use two-factor authentication. Password managers are used by 43%, and 38% take advantage of password generators.

At the same time, risky behaviors persist:

25% click links without verifying them.
20% log in to online banking without checking the website address.
19% enter payment card details on someone else’s device.

Interestingly, some risky behaviors are more common among younger users. Unverified links are clicked by 28% of Generation Z respondents, compared with 19% of Baby Boomers. Likewise, 28% of Gen Z respondents enter card details on devices they do not own, compared with just 7% of Baby Boomers.

Cyberattacks Are Not an Abstract Threat

Cyber threats have become part of everyday digital life. 44% of respondents say that they or someone they know has experienced fraud or a cyberattack. The figure reaches 54% among Generation Z, 50% among Generation Y, 41% among Generation X, and 32% among Baby Boomers.

Among those who had direct or indirect experience with cyber fraud:

35% reported attempts to steal BLIK codes or online banking credentials.
30% experienced social media account takeovers.
26% encountered suspicious phone calls.
17% received fraudulent text messages.
15% received fraudulent emails.

Even more strikingly, one in five respondents has personally experienced fraud or a cyberattack. Among those affected, 32% reported the incident to a bank, CERT, or police, while another 32% contacted the institution concerned. 28% simply ignored the message or closed the website.

Building Habits Is the Next Challenge

The report highlights a clear paradox: internet users are generally aware of cyber threats, yet this knowledge does not always translate into safe behavior. As a result, one of the most important challenges remains not only increasing awareness but also building lasting habits, such as verifying website addresses, checking suspicious messages, using strong and unique passwords, and relying on additional security measures.

About the Study

The survey was conducted in cooperation with IQS using the CAWI methodology through the Opinie.pl panel. The study was based on a representative sample of 1,000 banking customers aged 18–70 and covered four generations:

Generation Z (18–29): N=248
Generation Y (30–44): N=248
Generation X (45–60): N=252
Baby Boomers (60+): N=252