Phishing often happens through email, and is a type of fraud where criminals try to trick you into giving away personal information, card details, security codes or other sensitive data. Knowing how to recognise phishing can help you avoid giving fraudsters access to your information or money.
Smishing – Fraud by SMS
Similar scams sent by SMS are commonly called smishing, wherein fraudsters pose as your child/grandchild. They will write from an unknown number and ask for money via bank transfer/Swish.
Common Signs of Phishing
Fraudsters will try and take advantage of you not paying attention and causing you to act without thinking. E.g. a fraudster may send you the following link to click: skatteverkets.se
At first glance it seems legitimate, but look closely. This is how people get scammed.
These are warning signs, take extra precautions if someone:
- asks you to click a link and enter personal or financial information;
- creates a sense of urgency or pressure;
- claims to come from a bank, authority or company but looks unusual;
- uses a web address that is slightly different from the real one;
- asks you to transfer money or provide security codes.
Remember: a sender address or website may look legitimate even when it is fake.
Check Before You Act
If you are unsure whether a message is genuine for any reason, do not use the link or contact details in the message.
Before doing anything, try:
- visiting the organisation’s official website yourself;
- using contact information you already know or find independently;
- contacting the person or organisation directly to verify the request.
This is especially important if someone contacts you claiming to be a family member with a new phone number and asks for money.
How to Protect Yourself
You can mitigate the risk of phishing by following a few simple rules:
- Never share card details, security codes or sensitive personal information in response to an unexpected message.
- Be careful with links in emails and SMS messages.
- Use unique passwords for important services such as your email, bank and e-ID.
- Never allow an unknown person to remotely control your phone or computer.
- Stop and verify unusual requests before taking action.
The most important rule is simple: if something feels unusual, urgent or unexpected, verify it independently before you act.
