What's new

8.4.2022 13:21

Warning: Fraudulent SMSes being sent in OP’s name

Criminals are going after customers’ online bank user identifiers through fraudulent SMSes that ask you to cancel an unidentified payment or claim that your account has been locked due to suspicious activity. Do not click on the link sent in the message.

Cybercriminals are sending SMSes in OP’s name claiming that the customer is making a payment to an unidentified person or that the customer’s account has been locked due to suspicious activity. The customer is asked to delete the payment or to activate the account by clicking on the link in the message. The link will direct you to a website that looks like the op.fi service for the purpose of phishing for the customer’s online bank user identifiers and password.

The fake messages can look like this: 

Please remember these seven things when you do banking online 

  1. Do not go to an online bank through a link sent to you or through a search engine. The message directing you to the login page is a scam. You may end up in a scam website through the search results of Google, Bing or another search engine too, so type the address on the browser’s address bar yourself. 
  2. Check the address. Always make sure that you are at www.op.fi. Do not enter your identifiers into a site if you are not sure about its legitimacy. 
  3. Keep the identifiers to yourself. A bank or the authorities will never ask you to provide your user ID over the phone or by SMS or email. 
  4. Do not open attachments sent in the bank’s name. Check with your bank’s customer service that the attachments are genuine. 
  5. If anyone whose contact you have not expected asks you to install software in your device, do not do that. Install the software you need yourself from your device’s app store. 
  6. Do not confirm any transactions that you do not recognise or are not aware of doing at that very moment. Always read the confirmation requests with due care – if there is anything that does not match, do not confirm anything. 
  7. Please ask if you are unsure about anything. If the contact or message is suspicious, please contact your own bank before doing anything else. 

If you suspect that your user ID has fallen into the wrong hands, deactivate your user ID by calling 0100 0500 (personal customers) or 0100 05151 (corporate customers). When our Customer Service is not available, please call the OP Deactivation Service at +358 100 0555. It is available 24/7. Be sure to also call our Customer Service during service hours to report the incident.