About scams
There are lots of scam messages misusing Kela’s name that link to criminal websites. If you are contacted unexpectedly and in a way that raises your suspicions, take a moment before you do anything. Be alert and tell your family and friends about any online scams you see.
Scam messages typically try to trick you into giving away e.g. your personal information, banking credentials or payment card details. You can come across scams in email messages, text messages or search engines. Criminals may also try to contact you by phone or WhatsApp messages or on social media.
Keep in mind when using OmaKela:
- Type kela.fi in the address field of your browser. Do not access kela.fi via links in search results. From kela.fi, you can navigate securely to OmaKela.
- Please note that our e-service is only available in Finnish and Swedish.
- Remember to log out when you are finished using OmaKela.
- Once logged out, clear the browser’s cache and page history. Finish by closing all open browser windows.
Read more about how to log in securely to OmaKela
How to identify scams
Scam messages vary in content, but one common feature is that they try to rush you into logging in to OmaKela.
The scammer might for example claim that
- your personal data is at risk and your benefit payments may be stopped if you do not quickly update your data
- they have sensitive material about you
- you have an unexpected opportunity to earn money
- a bill is due and that if you do not pay it will go into collections.
Also pay attention to the following:
- Look and feel: Scam messages can look credible and trustworthy. The message or website may carry Kela’s logo or other visual elements associated with Kela.
- Content: Scam messages often try to rush you into doing things. They may warn you that something bad will happen if you do not act right away. Be wary also if you get a surprising offer or if you are promised money or benefits.
- Delivery channel: You may encounter various kinds of scams for example in email, in search engines or on social media. You may also get scam calls or text messages.
- Details: Scam messages and websites may look convincingly real. For example, the real web address or name of sender and the scam one may only differ by one letter or number. Scams increasingly use AI, which means that scam messages are more likely to appear credible.
We will not send you messages that contain links – do not hand over your personal information to outsiders
Text or email messages from Kela or the OmaKela e-service never contain links that require customers to log in.
Kela will never ask for your personal identity code, banking credentials or other sensitive information by email or text message. Never send such information by email or text message or post it on social media.
The OmaKela e-service can only be used in a browser window. There is no mobile application.
What should I do if I land on a suspicious site?
If you have landed on a site that looks suspicious or if you have received a message asking you to provide personal information or to sign in, do as follows:
- Take your time; do not rush into anything If you are contacted unexpectedly and in a way that raises your suspicions, take a moment before you do anything.
- Do not click on any links in the message or on the site.
- Do not reply or enter the information required from you.
- If you receive a suspicious message that says it is from Kela, tell tekninentuki@kela.fi about it.
What should I do if I suspect I might have given personal information to a scammer?
If you believe that your online banking credentials may have been stolen, contact your bank’s customer service department. Then file a police report.
If you suspect that an outsider may have access to your personal information, see the instructions on Suomi.fi:My personal data has been stolen or leaked (suomi.fi)..
Look after yourself and your friends and family
You can help your friends and family by sharing information about online scams and advising them on how to use OmaKela securely, Keep in mind that everyone must use their personal user ID and access codes. Do not hand them over to anyone else.
Everyone can be the victim of a phishing attack. Stay sharp when using any online service.