Bank and SMS scams (smishing)

How a bank scam message works

The message looks like it comes from your own bank (S-Bank, OP, Nordea, Danske and others). It tries to create urgency and fear so that you click the link without thinking.

• The message mentions, for example, a suspicious payment, a frozen account or a refund that must be confirmed.
• The message contains a link that leads to a genuine-looking but forged login page.
• The online banking credentials you enter on the page go straight to the criminals.
• The scammers may call afterwards in the bank’s name and ask for more details.

How to recognise a scam message

• The message contains urgency or a threat ("act now", "your account will be closed").
• The message contains a link asking you to log in or confirm details.
• The web address is not your bank’s official address but resembles it in a slightly altered form.
• The message appears in the same thread as genuine bank messages, which still does not prove it is real.

What a bank never does

Remember these basics and you will spot a scam more easily.

• A bank never asks for your online banking credentials or your whole code list via text message, email or a link.
• A bank never asks you to move money to a "safe account".
• A bank does not rush you to act within seconds.
• Always log in to your bank yourself by typing the address into the browser or using the bank’s official app.

What to do if you suspect or fall victim to a scam

• Contact your bank immediately if you gave out your payment or bank details or lost money. Acting quickly may stop the payment.
• File a police report at poliisi.fi if you have lost money.
• Report suspicious messages, calls or websites to the National Cyber Security Centre Finland.
• Victim Support Finland helps and advises victims at 116 006.