Large-Scale Phishing Scheme Targeting Finns Uncovered in Turku Region
Police in Southwest Finland have completed a preliminary investigation into a widespread phishing operation that targeted tens of thousands of Finnish mobile users in the summer of 2025. The scheme, which impersonated the mobile payment service MobilePay, resulted in financial losses exceeding €177,000 for 17 victims.
Main Suspect and Accomplices Identified
The investigation, led by the Southwest Finland Police Department, centers on a man under the age of 30 from the Turku region, who is accused of organizing the phishing campaign. Yle reports that the suspect is facing 26 aggravated charges, including 21 counts of aggravated payment instrument fraud, three aggravated frauds, and two attempted aggravated frauds. Additionally, he is suspected of recruiting six other men from Southwest Finland to participate in the criminal activities, with each accomplice now facing charges of aggravated money laundering (Yle).
According to Detective Chief Inspector Valtteri Kemppi, the main suspect orchestrated the sending of phishing messages to 91,000 Finnish phone numbers. The messages contained links to fraudulent websites designed to steal victims' payment credentials. Helsingin Sanomat notes that the perpetrators gained control of victims' payment instruments using the obtained information, enabling unauthorized transactions.
Financial Impact and Recovery Efforts
The total criminal proceeds from the scheme amounted to over €177,000, all of which were taken from private individuals. Iltalehti reports that authorities, in collaboration with financial institutions, have successfully recovered approximately €55,000 of the stolen funds through seizures from domestic and foreign accounts and online retailers (Iltalehti).
The preliminary investigation is now nearing completion, and the case will soon be transferred to the prosecutor for consideration (Helsingin Sanomat).
Police Warn Against Phishing Tactics
Authorities have issued a reminder to the public about the risks of phishing scams. MTV Uutiset highlights that fraudsters often create a sense of urgency, posing as banks, authorities, or trusted service providers to trick victims into disclosing sensitive information (MTV Uutiset). The police emphasize that no legitimate operator will request banking credentials or ask individuals to transfer money via unsolicited messages.
Key precautions include:
- Avoiding authentication via links in messages or emails.
- Never disclosing payment details or confirmation codes over the phone.
- Verifying the legitimacy of contacts through official customer service channels.
- Monitoring account transactions and reporting discrepancies immediately.
Victims of fraud are advised to contact their bank, block affected cards via the 24/7 service at 020 333 (or +358 20 333 from abroad), and file a police report. Support is also available through the Crime Victim Helpline at 116 006.