Is this email a scam?
Run through these five checks. They take under a minute, and any single one of them can settle the question. If a message fails even one check, do not click anything in it.
1. Look at the sender's real address, not the name
The display name can say anything. Tap or hover the name to see the actual address. A real Posti message comes from posti.fi, a real bank from its own domain.
2. Does it know your name?
Real banks and authorities address you by name. 'Dear customer' or an empty greeting is a warning sign.
3. Is it rushing or threatening you?
Deadlines of 24 or 48 hours, threats of a frozen account or a returned parcel: pressure is the tool. Real organisations give you time.
4. Where do the links actually go?
Hover the link on a computer, or press and hold on a phone, to see the real address. The visible text can promise posti.fi while the link leads elsewhere. Mismatch means scam.
5. Is it asking you to log in or pay?
Finnish banks, Suomi.fi, Vero and Kela never ask you to log in through a message link. Real Suomi.fi notification emails contain no links at all.
Still unsure?
Open the service's own app or type its address yourself. Ask someone you trust. If you already clicked, read what to do next. Then practise with the free scam quiz.