How to recognise genuine websites and authorities – avoid online scams

This guide explains how you can make sure that the website you are using is genuine and that the sender of a message really is who they claim to be.

How can I tell whether a message from a bank or public authority is genuine?

• Public authorities and banks will never ask you to provide sensitive information, user credentials or online banking credentials by email or text message.
• Check the sender’s address carefully. A fraudulent message may display a sender name that looks genuine, but the email address often reveals the scam. For example, “kyberturvall1suuskeskus@mail.com” is not genuine. The correct address would be kyberturvallisuuskeskus@traficom.fi.
• You can often find the email addresses used by public authorities and service providers on their websites.
• Pay attention to the language and tone of the message. Scammers often use translation software, so their messages may contain unusual wording or use a pressuring tone, for example by urging you to take action immediately.
• If you are unsure whether a message is genuine, check with the customer service of the organisation concerned. Instead of using a link in a suspicious message, you can, for example, call the public authority’s customer service number to check the matter.

Organisations also often use their own websites or social media channels to warn people about active scam campaigns carried out in their name. Based on reports from organisations and individuals, the NCSC-FI compiles a gallery of phishing and scam messages for its Weekly Review, which is published on Fridays (in Finnish and in Swedish). You can use the gallery to see which organisations scammers have been impersonating in messages reported to the NCSC-FI. The gallery does not include every scam message currently in circulation. We include examples of the messages that have been reported to us most frequently during the past week. From the end of January 2026 only available in Finnish and in Swedish

How can I check whether a website is genuine?

The website address shown in your browser’s address bar is the most reliable way to identify a genuine website. Scammers often use addresses that look similar to genuine ones but contain small spelling errors or extra words. For example, “suomi-traficom.fi” could be a scam website, while the genuine address is “traficom.fi”.

The challenge is remembering the correct address and comparing it with possible scam addresses. It is also important to remember that the padlock symbol in your browser only shows that the connection is encrypted. It does not mean that the website itself is genuine. You also cannot necessarily identify a scam from the appearance of a website, as some scam websites may be exact copies of genuine sites.

1. Do not click links sent to you in messages.
2. Go to the website you want by typing its address into your browser’s address bar instead of using a search engine.
3. Save services you use regularly as browser bookmarks and access them through your bookmarks, or use the services’ official mobile apps.
4. If you are unsure about a website address or other contact details, you can check whether the details are available in the Suomi.fi service, which provides Ulkoinen verkkopalvelu.contact details for almost 1,500 organisations.
5. If you are unsure whether a website is genuine, do not enter your credentials. Use your bookmarks or browsing history to find the correct website instead.

Fake emails and text messages – look out for these signs

The sender’s email address, phone number or Sender ID looks suspicious or differs from the organisation’s official contact details.
Check the correct contact details, for example:
•    on the organisation’s own website
•    in the Suomi.fi service
•    in the list of registered Sender IDs. If an organisation is not on the list, you should not receive text messages sent using a Sender ID in its name. It is also a good idea to check when the Sender ID was registered, as protection for the ID takes effect three months after its registration.

• The message contains urgent demands or threats, such as “Your account will be closed unless you act immediately!”
• Links lead to suspicious websites that do not use the official domains.
  The message contains grammatical or spelling errors.

How can I recognise a scammer on the phone?

1. Be suspicious if a caller asks you to act quickly. Scammers often use pressure tactics to push you into making poor decisions.
2. You can end the call at any time if it feels suspicious.
3. Never share passwords, PIN codes or card details over the phone. Banks and authorities will never ask for such information by phone.
4. Do not rely solely on what the caller tells you. You can always ask what the call is about, end the call and then call the organisation yourself using its official phone number.

What should I do if I suspect a scam?

If you receive a suspicious email or text message:

1. Do not reply to the message.
2. Do not click any links.

If you receive a suspicious call from someone claiming to represent a public authority:

1. Do not give the caller any of your personal information.
2. Write down the caller’s name and the name of the authority they claim to represent.
3. End the call.
4. You can check whether the call was genuine by calling the authority’s customer service or switchboard directly. Do not use any contact details provided by the caller. Find them, for example, on the authority’s own website. Give the switchboard the caller’s name and ask to be put through to them. The switchboard number for Traficom is +358 29 534 5000.

If you have been scammed:

1. Immediately contact your bank if you have made a payment based on a scam or a criminal has gained access to your online banking service or payment card details.
2. Report the incident to the authorities.
3. File a police report. You can file a police report online. Ulkoinen verkkopalvelu.
4. You can also submit a voluntary report to the NCSC-FI. Ulkoinen verkkopalvelu. By reporting the incident to the NCSC-FI, you can help remove harmful content from the internet and may therefore help protect other potential victims.