7 phone scams hitting Estonia in 2026 — and how to spot every one
Seven real phone-scam cases from Estonia in 2026, with the 30-second rule that lets you recognize each one in the first half-minute.
Phone scams are Estonia's most common and most expensive cyber-crime in 2026. According to police and the Estonian Banking Association, residents lost more than €6.5 million in social-engineering scams in the back half of 2025 alone — and Q1 of 2026 has already topped the whole first half of last year.
In this article we walk through seven real cases from 2026 that we have direct information on from police and CERT-EE sources. For each case we add the 30-second rule — the exact thing that tells you, in the first half-minute, that you're being scammed.
Quick answer
The most common phone scam in Estonia in 2026 is "a call from the bank about a security risk", where the scammer asks you to authenticate with Smart-ID. Defense: banks never ask you to confirm a Smart-ID action by phone. The moment you hear "please authenticate", hang up. Call the bank back only on the official number (Swedbank: 6 310 310; LHV: 680 2222; SEB: 6 655 100).
Case 1: "Calling from Swedbank" — €47,000 lost
In March 2026 a Tallinn pensioner got a call claiming to be from Swedbank. "Technical issue — please confirm via Smart-ID." Twelve minutes later, €47,000 was gone from her account.
30-second rule: if you didn't call the bank, the bank never asks you to confirm a security action. The real relationship is always: you → bank verifies you. Not the other way round.
Case 2: "Captain Tamm from the police" and an AI voice
In February 2026 a Tartu mother got a call from "Captain Tamm from the police". "Your son has been in a car accident, we need an immediate fine of €8,000." The voice sounded exactly like her son — it was an AI clone built from a 30-second TikTok video.
30-second rule: the police never demand money over the phone. If anyone asks you to wire money right now, it is always a scam. Hang up; call your child directly.
Case 3: The tax office and the "unpaid tax"
"This is the Tax Department. You have an unpaid tax of €1,247. If you don't pay within 24 hours, we'll file court action."
30-second rule: the real Estonian Tax and Customs Board sends every official notice through the e-MTA portal. Always log into emta.ee directly — not via a link.
Case 4: "Microsoft tech support"
An old chestnut, still working. The scammer claims your computer has a virus and asks you to install "remote management software". Fifteen minutes later, your bank account is empty.
30-second rule: Microsoft never calls you first. If anyone says they're tech support, just hang up.
Case 5: "Your son is in trouble" — the WhatsApp version
In the Estonian version this often starts with a WhatsApp message: "Mum, my phone fell in water, this is my new number. I'll send you an invoice — can you pay it?"
30-second rule: any "my phone changed" message from a new number is suspect. Always call your child back on the old number, directly.
Case 6: A crypto "investment" from a "famous local entrepreneur"
A "famous Estonian entrepreneur" on LinkedIn or Facebook offers 30 % annual returns. Real top-tier business people never raise money through social-media ads. If you see famous Estonian names attached to investment ads, it's always fake.
Case 7: "Your parcel is waiting, pay €1.99"
Omniva, DPD, DHL — a fake SMS asks you to pay a "customs fee" of €1.99. You click, enter your card details, and within the hour €800–€4,000 vanishes from your account.
30-second rule: real parcels never ask for payment by email or SMS. Log into the courier directly — not via a link.
What you get from the 2-hour course
CyberSafe for Adults — two hours of real recorded scam calls, drills, and hands-on practice. After the course you'll recognize these scenarios instantly and be able to teach the same rules to your family.
Read next
- FAQ
- Upcoming groups — pick your next course date
- CyberSafe for Children — our program adapted for 9–14-year-olds