Malware getting installed on a computer may grab your user identifiers that activates when you log into the service. Phishers may also try to grab user identifiers for criminal purpose by email, phone and through fake websites.
Deactivate your user identifiers for OP eServices immediately by calling OP 0100 0500 (weekdays from 8 am-10 pm, local network charge/mobile charge) telephone service. Outside the telephone service hours, deactivate your user identifiers by calling the deactivation service, tel. +358 20 333 (24/7). Also report to the telephone service when it is open again.
Malicious software, or malware, is software used by criminals for criminal activities that may be installed onto your computer, for instance, when you download files from the internet.
Malware can become activated when you log into an online service, for example. One of the possible functions of malware is that a separate pop-up window or a page imitating the bank's website opens on the screen. Seemingly acting in the name of the bank, they prompt you to give a key code or enter several key codes at a time. Malware can also be used to forge the payment confirmation screen so that the payment will be directed to the criminal's account.
Phishing is the act of attempting to acquire information for criminal purposes, for example, by email, phone or through fake websites. Phishing emails are emails sent by criminals, for example, in the name of the bank in an effort to acquire customers' online user identifiers and/or other personal details. Phishers seek to masquerade phishing messages as official correspondence and email messages may look like they have been sent from an OP Financial Group. Phishing messages usually prompt their recipients to move to op.fi via the link in email and to give information to criminals via phishing sites.
Be very careful with all messages that have any of the following characters:
The sender and the subject have nothing to do with each other.
The message subject is weird or in a foreign language.
The attachment has nothing to do with the subject (either the name has no reference to it or the file is not a standard office document).
The message may also have been sent at an unusual time of the day or on an unusual day of the week (eg in the small hours).
The message has been sent to several addressees.
The email sender address is not an official email address of the company