Managing affairs safely in Keva’s online services and how to deal with scams

Scam messages are currently circulating by SMS and email in the name of pensions and Keva. Criminals who send such messages try to use them to gain access to people’s bank account information or payment card details.

Scam messages related to pensions often claim that there are problems with pension payments, for example.

In the messages, the sender’s address or name may be formulated to appear legitimate. Scams often ask you to click on a link that contains some variation of the word ‘keva’, ‘pension’. or even ‘services’.

You should not click on links from such messages. If you have clicked on the link, do not log in with your own bank details.

This is how you can safely manage your affairs with Keva

Keva never asks its customers to log in to its services via a link shared in a message.

Log in to Keva’s My Pension online service only via Keva’s website (https://www.keva.fi/) or enter the service address yourself in the browser’s address field. The address to the My Pension service is https://www.keva.fi/elaketietosi/. Another safe way is to bookmark the address of the service.

The Keva Pension and Rehabilitation application is always safe when you have installed it yourself from the app store on your phone or tablet. Instructions for installing the application can be found on the page Pension and Rehabilitation app.

Do not log in to Keva’s services directly from search engine results, such as Google or Bing.

Electronic My Pension service and secure sending of messages

The address to the My Pension service is https://www.keva.fi/elaketietosi/.

When logging in to Keva’s online service, you will first be directed to the Suomi.fi authentication page, where you can select the method for strong electronic authentication (online banking codes or a mobile certificate).

Remember to log out once you have finished using the service.

You can send us messages securely through the My Pension service or the online service for employers. Traditional email is not a secure channel for this.

Do not send any personal information via email or text message or write it in Keva’s chatbot.

Announcements and feedback requests from Keva

Keva periodically sends its customers email notifications about decisions, for example. Messages are sent from an address that cannot be replied to. These messages do not contain links.

Keva also sends text messages urging customers to check the message they received from the My Pension service.

To identify the authenticity of messages, consider the following:

• The message is one-way and cannot be replied to.
• The message does not ask for your personal identification number, bank account details, or other login information.
• The content of the message is often related to a current decision or service you have received from Keva.
• Keva never uses a link in a message to directly identify you or log in.

If you are unsure about the authenticity of a message, you can check it at Keva’s customer service.

Keva occasionally requests feedback on its services via text message. These messages contain a link, but providing feedback does not require any kind of login or identification. In addition, Keva will send links to Pension Information webinars by email when you have registered for the webinar on Keva’s website. Participating in them does not require any kind of login.

How to proceed if you suspect a scam or have fallen victim to a scam

1.    Do not open any suspicious links or attachments
   • Do not click on any links or attachments in the message. 
   • Delete the message. You can also take a screenshot of the message before deleting it and notify the National Cyber Security Centre (Finnish Transport and Communications Agency) on the page Report an information security incident, Cyber Security Centre 
     
     
2. Contact your bank or card issuer immediately if you have:
   • submitted your payment card information
   • submitted your online banking codes
   • made a payment as a result of a scam
   • a criminal has accessed your online bank account.
     
     
3. File a police report
   • You can file a report to the police online at File a police report, Police of Finland or by visiting a police station.
     
     
4. If your data may have been leaked
   • Follow the instructions for victims of a data leak, see the instructions on Suomi.fi below.

Useful links

Learn to recognise the most common types of fraud – Police.fi

My personal data has been stolen or leaked - Suomi.fi