Phishing and malware

Phishing is now the most common method used by fraudsters to obtain passwords or bank and card details. 

A phishing scammer may send you emails or text messages trying to trick you into revealing passwords, card or account information. By tricking you into clicking on links in the message, the scammer can plant viruses or malware on your computer or mobile phone. This in turn gives the scammer access to your passwords or accounts.

The messages may come in the form of regular emails or text messages with attractive offers to entice you to click on attached links or files. Often they ask you to act quickly.

How to protect yourself from phishing

• Check the message carefully - does it look right?
• Check the sender - look up the email address and phone number.
• Do not give out passwords, card or account numbers.

If you suspect that you have been targeted:

• Change your login details.

• Cancel your bank or credit card.

• File a police report.

Protect your passwords

Strong passwords are important to protect your information. It is especially important to have strong passwords for services such as your email.

The longer your password, the safer it is, but you should still have different passwords for different services. Using both upper and lower case letters, numbers and symbols will further reduce the risk of an unauthorised person cracking your password.

You should avoid simple passwords, such as names of people or animals, or information that can be linked to you in various ways. These passwords are easier for someone else to guess.

How to keep your passwords safe

• Never share your passwords with others.
• Do not write your passwords down.
• Use different passwords for different services.
• Use long passwords.
• Use a password manager.
• Enable multi-factor login where possible.

Securing your e-ID

E-IDs are used by many to pay bills or identify themselves online. Your e-ID is similar to a passport or ID card and should be treated and protected in the same way.

Scammers may try to access your e-ID by calling you claiming to work for your bank, government agency or company and asking you to log in using your e-ID. You may also receive emails asking you to click on a link and authenticate yourself with your e-ID.

How to use e-ID safely

• Never give your e-ID to anyone who contacts you unexpectedly.
• Never let someone else log in for you using your e-ID.
• Hang up if you suspect someone is trying to scam you over the phone - even if they claim to be a relative, a bank, a company or a government agency.
• Always check what you are signing in the application - cancel if you are unsure.
• Don't trust a caller just because they have information about you.

If you are affected:

• Contact your bank.
• File a police report.
• Get support from friends or relatives.

Secure your information

If your computer, mobile phone or tablet breaks down, gets a virus or something else happens that prevents you from accessing your information, it is important that you have a backup. This means saving a copy of all your important information on another device, such as a USB stick, an external hard drive or a cloud service.

How to secure your information

• Back up to a hard drive, USB stick or cloud service.

• Back up often - this reduces the risk of your backup becoming infected with viruses.

• Test your backup - so you know what to do if you need to restore your data.

• Always unplug your backup when you are not using it.

• If you are a victim of fraud or cybercrime.

If you are a victim of fraud or cybercrime

Contact the police if you are a victim of fraud or other cybercrime.

The Swedish Police: Protect yourself against scam calls

Sources of this page: the Swedish Defence Research Agency (FOI), the Swedish Post and Telecom Authority (PTS), the Swedish Civil Contingencies Agency (MSB) and Cert-SE.