Fraudsters are phishing for online bank user identifiers and card details

Phishing emails are being circulated in OP’s name and in that respect fraudsters may also phish for key codes over the phone.


Phishing email informs of a critical update which should be performed by clicking the link in the email. If you have given your personal data on a phishing website, the fraudster may also make a phone call impersonating, say, OP’s security officer and this way snoop more information. Such phone calls may come from an unknown number. You can recognise a call coming from OP Telephone Service from number 010 252 0500. Do not give any information to fraudsters!

You can spot the legitimate website of the bank from the following, for example:

  • The website’s certificate has been issued to OP Financial Group (e.g. OP Cooperative).
  • The issuer/publisher of the certificate is Symantec
  • The certificate is valid

Also read carefully text messages you receive

If you receive in your phone a text message of further confirmation asking you to remove the phone number from the further confirmation message or confirm a payment and your are not doing this yourself, stop the transaction and contact the bank immediately. OP’s further confirmation messages come from +358 40 711 8180. The bank will never call customers from this number.


Please note that OP never asks its customers to log into its online services via a link in an email or text message, or to email or text your personal user identifiers, card details or personal identity code. If you receive a phishing email message, do not reply to it or click on the link in it. If you have already entered your personal online bank user identifiers or card details on the phishing page, deactivate them immediately by calling 010 253 1333 (weekdays from 9.00 am to 4.00 pm, local network charge/mobile charge). Outside the telephone service hours, deactivate your user identifiers or card by calling the deactivation service, tel. +358 20 333 (24/7). Also report the incident to OP Telephone Service when it is open again.

 


Example of phishing email:

 

Esimerkki huijaussähköpostista

 

Example of phishing page:

 

Esimerkki 1 kalastelusivusta

Esimerkki 2 kalastelusivusta

Esimerkki 3 kalastelusivusta