Managing affairs safely in Keva’s online services and how to deal with scams

Every now and then, scam messages are sent in Keva’s name through which criminals are trying to access bank details.

The scams can be sent by e-mail or sms. In the messages, the sender’s address or name may be formulated to appear legitimate.

Usually, the scam messages ask you to open a link containing some variation of the word “keva”, for instance kkeva.fi, kevaa.net. In addition, fake websites may be created in Keva’s name. The address of these websites may resemble the address of keva.fi or the My Pension service.

You should not open any links in these kinds of messages or visit any fake websites, and you should by no means log in with your banking codes on these sites.

How to manage your affairs safely in Keva’s online services

Log in to Keva’s services only from Keva’s website (https://www.keva.fi/en/) or write the address of the service directly in the browser address bar. For example, the address to the My Pension service is https://www.keva.fi/elaketietosi/. Another safe way is to bookmark the address of the service.

Do not log in to Keva’s services directly from search engine results, such as Google or Bing.

Logging in to online services and sending messages

You must log in to Keva’s online services through the Suomi.fi authentication. The address to the My Pension service is: https://www.keva.fi/elaketietosi/.

When logging in to Keva’s online service, you will first be directed to the Suomi.fi authentication, where you can select the method for strong electronic authentication (online banking codes or mobile certificate).

Remember to log out once you have finished using the service.

You can send us messages securely through the My Pension service or the online service for employers. Traditional e-mail is not a secure channel for this.

Do not send any personal information via e-mail or sms or write them in the Chatbot.

How to proceed if you suspect a scam or have fallen victim to a scam

1.    Do not open any suspicious links or attachments
   • Do not click on any links or attachments in the message. 
   • Delete the message. You can also take a screenshot of the message before deleting it and notify the National Cyber Security Centre (Finnish Transport and Communications Agency) on the page Report an information security incident, Cyber Security Centre 
     
     
2. Contact your bank or card issuer immediately if you have:
   • submitted your payment card information
   • submitted your online banking codes
   • made a payment as a result of a scam
   • a criminal has accessed your online bank account.
     
     
3. File a police report
   • You can file a report to the police online at File a police report, Police of Finland or by visiting a police station.
     
     
4. If your data may have been leaked
   • Follow the instructions for victims of a data leak, see the instructions on Suomi.fi below.

Useful links

Learn to recognise the most common types of fraud – Police.fi

My personal data has been stolen or leaked - Suomi.fi