Phishing scams targeting Finnish citizens

Finland has experienced a series of phishing scams targeting citizens through various impersonation tactics.

In mid-September, fraudulent communications began impersonating the Suomi.fi service. These scams used urgency by claiming that debt collection documents from the Ministry of Justice or the Digital and Population Data Services Agency were available, prompting users to click links to fraudulent websites to steal credentials. Other reported scams included DHL-themed package delivery fraud and unexpected Google Meet invitations.

By early October, the scope of impersonation expanded to include Finnish banks and insurance companies, such as Aktia, LähiTapiola, and S-Pankki. These attacks utilized high-pressure tactics, such as threatening digital service restrictions if security updates were not completed. A notable technique identified in these later scams involved the use of subtle character substitutions, such as replacing Latin letters with visually identical Cyrillic characters to deceive users.