Does the SMS look real? That still proves nothing
The message may appear under the name NAV, a bank, BankID, the police, Posten or another familiar institution.
It may be written in correct Norwegian.
It may even appear in the same SMS thread in which you previously received genuine messages.
The police warn that fraudsters use spoofing, a technique that allows them to impersonate a phone number, email address or sender name. Therefore, the mere appearance of “NAV”, “BankID” or a bank name on your phone screen is not proof that the message is genuine.
STEP 1. Do not click the link
If the message raises even the slightest doubt:
do not click the link, do not open an attachment and do not call the number given in the message.
NAV recommends in such a situation to open your browser yourself and type:
nav.no
Only after entering the official site should you log in and check whether there is indeed a message or a matter requiring action.
Check NAV warnings about scams
STEP 2. A message from BankID with a link? It's a scam
Here the rule is even simpler.
BankID does not send SMS messages containing links.
BankID may send an informational message, for example when activating the app or renewing an agreement, but it will not ask you in an SMS to click a link and provide information.
If an SMS signed “BankID” contains a link to:
updating your details,
identity verification,
unblocking your account,
accepting new terms,
do not click.
In 2026, fraudsters are using, among other things, actual changes related to digital identity verification and BankID terms to create convincingly realistic fake messages. BankID emphasizes that ID verification takes place in the app, and acceptance of terms occurs during a genuine BankID login.
STEP 3. Check the matter yourself, regardless of the SMS
If the SMS says:
“you have an unclaimed benefit from NAV”,
“you must confirm your bank account”,
“BankID will be blocked”,
“we have detected a suspicious transaction”,
“the police are securing your money”,
do not respond through the channel indicated in the message.
Go directly to the institution's website yourself or call the number found on its official site.
This is also important during a phone call.
In July 2026 the police again warned against fraudsters posing as police or banks. The criminals were able to give the name of an officer, place of work and even a fake case number.
Never transfer money to a “safe account”
If someone from a bank or the police says:
“Your account has been attacked, we must quickly transfer the money to a safe account”
end the call.
BankID and the police warn that this is a characteristic scam mechanism. Neither the bank nor the police need your BankID password and they will not ask you to save your money by transferring it to an account specified by the caller.
STEP 4. Do not approve BankID if you did not initiate the login yourself
Did a BankID request appear on your phone screen even though you weren't logging in anywhere?
Reject it.
BankID recommends choosing “No, it's not me” if you don't recognize the operation. Do not approve the login just because someone is talking to you on the phone and says they “need to verify your identity”.
I clicked a link but didn't enter anything. What should I do?
Simply clicking does not automatically mean you have lost money.
However, do not enter any data and close the page.
If you downloaded a file or an app, especially a program that allows remote access to your phone or computer, the situation is more serious.
Do not log in to your bank from that device until you are sure it is secure.
If you have doubts, contact your bank.
I gave my password or BankID code. Act immediately
Don't wait until you see money disappearing.
STEP 1: call your bank immediately.
STEP 2: ask to block BankID if it may have been compromised.
STEP 3: change your BankID password if you still have control over it.
STEP 4: check your account and transaction history.
BankID explicitly recommends immediate contact with the bank when a user loses control of their BankID or suspects their data has been compromised.
The money has already been sent. Contact the bank first
If you made a transfer or see an unauthorized transaction:
call the bank immediately.
Don't start by writing a Facebook post or waiting until the next day.
Politiet recommends contacting the bank as soon as possible because in some situations it may be possible to stop or reverse the transfer.
Then report the case to Politiet.
Report fraud or identity theft to Politiet
Fraud and cybercrimes can now be reported digitally through politiet.no. Politiet emphasizes that a quick report also helps preserve evidence.
Preserve evidence
Do not delete messages immediately.
Do the following:
a screenshot of the SMS,
a photo or a copy of the web address,
a record of the phone number,
screenshots of the transaction history,
information about the time of the call,
transfer confirmations.
Such materials may be needed by the bank or Politiet.
Language errors are no longer a reliable test
It used to be easy to say:
“it's a scam, because the text is written in broken Norwegian”.
Today you cannot rely on that.
A fake message can be written correctly, contain the correct logo, and look almost identical to a bank or agency communication.
Much more important questions are:
Was I expecting this message?
Is someone trying to scare me or force me to act quickly?
Do they want my BankID, password, card, or money?
Can I check the same matter myself on the official website?
Politiet summarizes this rule in three words:
stopp, tenk, sjekk – stop, think, check.
The simplest rule that can save your account
Did you receive an unexpected SMS?
Do not use the link in the message.
If it concerns NAV, type nav.no yourself.
If it concerns the bank, open your bank's app or find the phone number yourself.
If it concerns BankID, do not approve an operation you did not initiate yourself.
If someone is impersonating the police, hang up and contact the police via an official channel.
A few extra minutes can save you from losing your savings and many months of problems related to identity theft.
Information verified: 25 September 2026.
Sources
NAV – Fraud attempts via SMS and email – official security guidelines of NAV.
Politiet – Protect yourself against fraud and ID theft – phishing, spoofing and procedures to follow.
Politiet – Report fraud and ID theft – reporting scams.
BankID – Safe use of BankID – current security guidelines and warnings.
