Corporate Accounts Hit by Multi-Million Krone Fraud Wave
Norwegian businesses are facing a sophisticated surge in financial crime, with losses at some companies climbing into the millions of kroner. SpareBank 1 Sør-Norge has identified approximately 20 cases since late summer where firms were defrauded of sums ranging from 100,000 to several million kroner.
The attacks mark a tactical pivot from retail consumers toward employees with the authority to approve payments via BankID. DNB fraud expert Sebastian Takle reports that scammers are specifically targeting staff who have recently interacted with auditors or public authorities to lend their fraudulent requests a veneer of legitimacy.
The Mechanics of the BankID Deception
The scam typically begins with a phishing message, often disguised as an alert from official entities like Helse Norge. The message directs the target to a fraudulent website. When the user attempts to log in with BankID, the system appears to crash.
Gunnar Wold, an anti-fraud specialist at SpareBank 1 Sør-Norge, explains that the operation then moves to a phone call. An individual claiming to represent the bank’s security department contacts the victim, asserting that their account is under attack. The caller pressures the employee to perform a series of BankID signings under the guise of “stopping” the fraud. In reality, the victim is handing over the credentials required to drain corporate accounts. Callers often insist the matter is confidential and under police investigation, explicitly forbidding the victim from contacting their bank or colleagues.
Other major institutions are seeing similar patterns. DNB fraud expert Sebastian Takle reports a rise in attempts against business clients, though the bank has successfully intercepted many transactions. At Nordea, fraud expert Ida Marie Edholm notes that the phishing often targets general staff rather than just executives, followed by the same high-pressure “bank” phone calls.
Uneven Defenses in the Business Sector
Despite the intensifying threat, corporate preparedness remains inconsistent. SpareBank 1 Sør-Norge’s economic barometer reveals that one in three business leaders has been targeted by fraud within the last year. Yet, one in ten businesses has implemented no specific measures to mitigate these risks.
Roger Lund Antonesen, group director for the corporate market at SpareBank 1 Sør-Norge, warns that the trend is unlikely to subside, as successful attacks often embolden perpetrators to intensify their efforts.
Security Protocols for Businesses
Financial institutions remain clear on the risks: banks and the police will never ask for BankID credentials or passwords over the phone. If a caller requests such information, experts advise hanging up immediately and contacting the bank or police.
To bolster security, experts urge companies to implement a strict prohibition on sharing BankID credentials during phone calls. Businesses are also advised to verify the account numbers on invoices they have paid many times before to ensure they have not been altered to redirect payments to fraudulent accounts.
Related reading