Lukko kannettavan näytöllä.

Security on OP eServices

OP eServices’ security features have been designed to prevent cybercrime. Please read about the security features and learn how to use them.

Ensure that your connection is secure and check the certificate 

Always enter the address for the online bank ( in your browser’s address bar personally whenever logging into the online bank. Do not click links in emails or SMSes. Do not log into the online bank from the results page of a search engine (such as Bing or Google).   

Check the browser’s address bar to make sure that you are at the right address, and that the address is protected. Click on the padlock in the address bar to view the website’s digital certificate. Check the following information:   

  • The website's certificate has been issued to OP Financial Group (such as OP Osuuskunta).   
  • On the genuine OP website, the address in the address bar and certificate is or In the OP Identity Provider Service, the address   See the bottom of this page for a full list of addresses for services provided by OP. 
  • The certificate is valid   
  • The issuer/publisher of the certificate is Symantec, Entrust or DigiCert  

The example image is from a Google Chrome browser on desktop (to view the certificate’s details, click Certificate):

Please note that the padlock icon and its content may differ, depending on your browser. 

See the list of supported browsers

OP eServices is protected with the HTTPS connection, which encrypts data sent across the network in such a way that no unauthorised party can see your confidential information. Supported browsers automatically use the TLS encryption that protects HTTPS traffic.

If you are using a smartphone or tablet, we recommend using the handy OP-mobile or OP Business mobile apps for your banking and insurance services.  

Make sure that your user ID and password are secure

Your user IDs are personal. Never give or borrow them to anyone else. The bank will never call you to ask for your bank user ID. 

OP eServices user IDs consist of the following elements: 

  • username 
  • password 
  • Mobile key 
  • key code list 
  • the phone number linked to your user ID to use for further confirmation

Transactions you perform with your user ID are confirmed as follows:

  • Mobile key confirmation request in OP-mobile or OP Business mobile  
  • SMS for further confirmation

Please note that an SMS for further confirmation is not always sent. SMSes for further confirmation and Mobile key confirmation requests are always sent in real time when you are using your user ID. Check that the information in the SMS or confirmation request matches the transaction you are performing at the time. If the transaction requires further confirmation, you may also receive an SMS about this when using Mobile key. 

If any of the information does not match, is wrong, or you are not using your user ID at the time, do not confirm the transaction.  

OP’s SMSes requesting further confirmation will always be sent from number +358407118180 and they are signed by OP. 

Learn more about confirming transactions with Mobile key 

Set usage limits on your accounts and cards 

Setting limits will help you to protect your funds if your card or user IDs fall into the wrong hands. You can set different limits on your accounts and cards on OP-mobile or, including how much money can be withdrawn from your account at a time or during 24 hours.  

OP website addresses (domains) and online services you can access with your user ID

  • Banking and insurance services for corporate customers (Corporate eServices)
  • Banking and insurance services for private customers (in Finnish and Swedish)

  • OP Accessible

  • OP's Electronic Signature Service

  • Vendor Service

  • Cash Management Service

  • Ordering a Corporate eServices user ID


  • OP Loan

User identifiers enable you to authenticate yourself and make secure online payments. At the moment of authentication and payment, you will be transferred to an OP service. You can recognise it from the OP logo as well as the address and certificate on your browser’s address bar.,

  • OP online payment: This service enables you to pay your purchases at a webshop from your bank account.
  • Visa Secure and Mastercard SecureCode: These services are used for confirming your card purchases.,

  • OP Identity Service Broker and OP Identity Provider Service: These services enable you to authenticate yourself to a service provider’s service.

  • OP Confirmation Service: This service enables you to authenticate yourself to services and confirm your card payments.


  • When you’re in an external provider’s service, this address opens and enables you to confirm payments directly from your account and confirm account information queries 

When you authenticate yourself with your personal user identifiers to our telephone service, you can manage your banking affairs by phone.

  • Private customer banking services 0100 0500
  • OP Corporate and Payment Services at 0100 05151

To use our apps for smartphones and tablets, you need to download them from your device’s app store. Before downloading, make sure that the app is published by OP (OP Osuuskunta or OP Ryhmä)


  • for Android 
  • for iPhone, iPad

OP Business mobile

  • for Android
  • for iPhone, iPad  

Pivo mobile wallet

  • for Android
  • for iPhone, iPad


Aside from the abovementioned OP services, you can use your credentials on such payment order and account information services that comply with the Payment Services Act.