Estonia Scams: Online, Investment & Digital Fraud Guide
Common scams in Estonia, one of Europe's most digitally advanced countries, from phishing and e-ID fraud to investment schemes, with official reporting channels.
Emergency number: 112 — verify on official sources.
Last reviewed: 1 August 2026
Estonia's highly digitised society makes it a prime target for sophisticated cybercrime. Because nearly everything — banking, taxes, voting, prescriptions — runs through the national e-ID, Smart-ID and Mobiil-ID, the most dangerous scams all attack that layer: phone calls from fake bank or police staff, often in Russian or Estonian, that pressure victims into approving a Smart-ID PIN2 request which authorises a real payment or login, and phishing pages that imitate the state portal or banks such as Swedbank, SEB and LHV. A confirmation prompt you did not initiate is the single clearest red flag in Estonian fraud.
Alongside the e-ID attacks, residents see the standard Baltic mix at high volume: investment fraud advertised on social media with cloned news articles and celebrity deepfakes, fake online shops and marketplace fraud, parcel-fee smishing impersonating Omniva or courier firms, and romance and pig-butchering grooming. Job scams have shifted toward task-based 'commission work' recruited over Telegram and WhatsApp, paying small sums before demanding deposits. Expats and e-residents are targeted with fake company-formation and banking 'agents'.
Despite Estonia's strong cyber-defence reputation, the human-engineering scams work here as well as anywhere. The Cyber Crime Bureau of the Police and Border Guard Board runs the dedicated reporting portal at cyber.politsei.ee, and banks maintain round-the-clock fraud lines that should be your first call when money moves.
Common scams
- Phishing targeting e-government and online banking accounts
- Investment and crypto fraud promoted via social media
- Online shopping non-delivery or counterfeit goods
- E-ID and identity theft
Tourist-specific scams
- Overcharging taxis in Tallinn old town
- Fake accommodation listings on third-party platforms
- Counterfeit souvenir sellers
Online shopping scams
- Phishing emails and SMS impersonating Estonian banks (LHV, Swedbank, SEB)
- Fake online shopping sites or marketplace listings
- Malicious links claiming to be e-government services
Job scams
- Fake remote job offers requesting personal documents upfront
- Fraudulent recruitment for non-existent positions requiring advance fees
- Task-based 'commission work' recruited via Telegram that ends in deposit demands
Romance scams
- Dating-app grooming leading to investment or money requests
- Social media romance scams from overseas contacts
- Long-running online relationships steering victims onto rigged crypto platforms
Investment scams
- Fake crypto and forex trading platforms promoted online
- Ponzi schemes presented as fintech or passive-income opportunities
- Cloned news articles and celebrity deepfakes advertising fraudulent brokers
How to report a scam here
- If money was transferred, contact your bank immediately to attempt a freeze
- Report cybercrime via the dedicated portal at cyber.politsei.ee — it guides you through specific scenarios
- File a formal police report at politsei.ee/en/report-to-police
- Preserve all digital evidence including screenshots, email headers, and transaction details
Local reporting & protection links
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Estonian banks have dedicated fraud lines, so ring yours straight away using the number on your card or inside the official app, never a number a caller supplies. Explain that you were tricked into authorising the payment, ask for it to be frozen or recalled and the receiving account reported, and take a reference number. Instant SEPA transfers clear in seconds, so call the moment you suspect anything rather than checking first. If you approved a Smart-ID, Mobiil-ID or PIN2 request at someone else's prompting, say so explicitly — that approval is a signature, and the bank needs to terminate active sessions and suspend those credentials, not just block a card. Ask about new credentials and a replacement card if details were entered on a fake page. Then report online at cyber.politsei.ee.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
What is cyber.politsei.ee?
This is the official cybercrime reporting website run by the Estonian Police and Border Guard Board (Politsei- ja Piirivalveamet). It covers phishing, account hijacking, online fraud, and malware, guiding victims through reporting steps.
How do Smart-ID scams work in Estonia?
A caller posing as your bank, the police or a government office claims a suspicious payment must be cancelled and asks you to enter PIN1 or PIN2 when a confirmation appears. In reality that prompt authorises their login or payment. Legitimate organisations never ask you to confirm a Smart-ID or Mobiil-ID request they triggered — decline any prompt you did not initiate and call your bank on its official number.
Are e-residency related scams a risk?
Estonia's e-residency programme attracts fake 'agents' who charge inflated fees for free or cheap official steps, or harvest documents for identity fraud. Use the official e-residency channels and licensed service providers listed by the programme, and be wary of unsolicited offers of company formation or 'guaranteed' business banking.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance