Phishing email informs of a critical update which should be performed by clicking the link in the email. If you have given your personal data on a phishing website, the fraudster may also make a phone call impersonating, say, OP’s security officer and this way snoop more information. Such phone calls may come from an unknown number. You can recognise a call coming from OP Telephone Service from number 010 252 0500. Do not give any information to fraudsters!
You can spot the legitimate website of the bank from the following, for example:
- The address in your browser's address bar begins with https://
- The website's certificate has been issued to OP Financial Group (e.g. OP Cooperative).
- The issuer/publisher of the certificate is Symantec
- The certificate is valid
Also read carefully text messages you receive
If you receive in your phone a text message of further confirmation asking you to remove the phone number from the further confirmation message or confirm a payment and your are not doing this yourself, stop the transaction and contact the bank immediately. OP’s further confirmation messages come from +358 40 711 8180. The bank will never call customers from this number.
Please note that OP never asks its customers to log into its online services via a link in an email or text message, or to email or text your personal user identifiers, card details or personal identity code. If you receive a phishing email message, do not reply to it or click on the link in it. If you have already entered your personal online user identifiers or card details on the phishing page, deactivate them immediately by calling 010 253 133 (weekdays from 9.00 am to 4.00 pm, local network charge/mobile charge). Outside the telephone service hours, deactivate your user identifiers or card by calling the deactivation service, tel. +358 20 333 (24/7). Also report the incident to OP Telephone Service when it is open again.
Example of phishing email:
PHISHING PAGE - Note the incorrect address (should be op.fi), no https:// prefix, no certificate issued to OP Cooperative
For the sake of comparison, an image of the GENUINE op.fi website, the website address begins with https:// and the certificate has been issued to OP Cooperative
PHISHING PAGE - Note the incorrect address (should be op.fi), no https:// prefix, no certificate issued to OP Cooperative