Paper receipts from «Ukrposhta» should not be left at post offices or discarded in their entirety in public places, as they may contain personal and payment details. If such a receipt falls into the wrong hands, the information on it could be used to set up convincing telephone or online scams.
Briefly about the main points
- Receipts may show the payer’s full name and tax identification number.
- When a card is paid for or topped up, its full number is printed.
- A card number alone does not usually grant access to funds.
- You should tear up or destroy any unwanted receipts at home.
- You must not disclose your CVV, PIN, codes or online banking password.
What information might cybercriminals use?
Ukrposhta’s paper receipts show the payer’s full surname, first name and patronymic, as well as their tax registration number. If the service was paid for by card or the card was topped up, the receipt will also include the full card number.
The card number alone does not usually grant access to funds. However, combining identification and payment details can help fraudsters create a plausible story about a payment, utility bills or a supposed bank verification.
According to NBU, in 2024, social engineering accounted for 84% of the total losses from payment card fraud. These statistics do not specifically relate to «Ukrposhta» cheques, but they illustrate the risk of targeted manipulation involving the use of personal data.
How to deal with receipts and suspicious enquiries
It is recommended that you tear up or destroy any receipts you no longer need at home. You should not leave them at the branch or throw them away intact in a public place.
The card number shown on the receipt is not a confidential detail required for debiting funds. However, the CVV/CVC, PIN, one-off bank or mobile operator codes, as well as your online banking login and password, should not be disclosed to third parties.
If someone calling purportedly on behalf of a bank asks you to provide details or carry out an action relating to your card, The Cyber Police advise End the call and ring the bank yourself using the official number.
