Security

Different types of scams

Increasingly often, scammers pose as representatives of different organizations to obtain confidential information and financial gain. For this reason, it is important to recognize different types of scams and never share personal information without careful consideration. It is also useful to know what to do if you are targeted by a scam. 

Scam websites

Scammers are skilled at creating scam websites that closely resemble genuine ones. You might end up on these sites through search engine results, advertisements, or links shared in messages. On scam websites, scammers try to steal visitors’ online banking credentials, credit card information, passwords, or other personal information.

These sites often look very similar to a company’s real website, but there may be small details that reveal the scam. For example, scam sites may contain numerous spelling errors, and menus or buttons may not work properly.

Scam websites use addresses that closely resemble those of Evli’s or other legitimate companies. A fake address can often be recognized by: 

• small spelling errors (e.g. evlii.com)
• extra words (e.g. evli-login.com)
• an unusual domain ending (e.g. evli.org)

A secure site can be identified by the fact that the address starts with “https://” and a padlock icon or other security indicator is visible next to the address bar. On Evli’s official website, all browser traffic is always protected, which is indicated by the padlock icon in the address bar.

Scam websites ask you to enter sensitive information – such as banking credentials, card details, or passwords – right away. These sites often pressure visitors to make decisions quickly and stress a sense of urgency. 

Fraudulent messages (phishing)

Scammers use text messages, emails, and social media for phishing. They impersonate authorities, banks, or other companies to obtain recipients’ online banking credentials, passwords, or other personal information.

Fraudulent messages often try to create a sense of urgency so that the recipient does not have time to carefully check the content. These messages may imitate the official appearance of a company, but small details, such as the logo or formatting, can reveal the scam. The sender’s email address and the included links often closely resemble genuine addresses but may contain spelling errors or other minor differences.

A scam message always includes a suspicious request. They often ask you to perform actions such as logging in to your online bank or making payments, for example, via a link that leads to a scam website. 

Telephone fraud (vishing)

In telephone fraud, the caller pretends to be a representative of an authority, a bank, or another company, and claims that your money or personal information is at risk. They often create a sense of urgency and ask you to provide your banking credentials, authorize transfers, or move your money to a “secure” account. Scammers can sound very convincing and may use professional terminology as well as real names, addresses, or other personal details to gain your trust. 

Instructions in case of scams

These guidelines will help you to protect yourself from the most common online, message, and telephone scams.

• Always access websites by entering the official address directly into your browser’s address bar, never through links.
• Save frequently used websites, especially those that require online banking credentials, to your browser’s bookmarks.
• Be cautious if you are contacted from a suspicious number or email address. You can verify the official contact details of authorities and companies on their websites. Evli’s emails are always sent from addresses ending in @evli.com or @aurator.com.
• Never share your online banking credentials or passwords by message or on the phone.
• Banks and authorities do not use secure accounts. If you are asked to transfer funds to a secure account, it is a scam.
• Updating your counter account and phone number in the My Evli online service should always be done on your own initiative, not at the request of an external party.
• Stay calm. If you are unsure, ask someone you trust for a second opinion or verify the authenticity of the contact directly from the company it claims to represent.
• If you fall victim to a scam and have given out your online banking credentials or approved payments, contact your bank’s customer service immediately.