How to tell a real Smart-ID from a fake in 5 seconds
Fake Smart-ID prompts are one of Estonia's most expensive scams in 2026. Five instant rules to recognise a real Smart-ID — at a glance.
Smart-ID is the heart of Estonia's digital life. That's exactly why, by 2026, scammers have forged login prompts so well that an ordinary user can't easily tell them apart. This article gives you five concrete rules to know in 5 seconds whether a Smart-ID prompt is real or fake.
Quick answer
A real Smart-ID only ever triggers a confirmation number when you yourself started the login. If a Smart-ID prompt appears without you initiating anything, it is always a scam — tap "Cancel" and change your bank passwords immediately.
Rule 1: You start it, no one else
A real Smart-ID flow always begins with you — you open the bank app and tap "Log in with Smart-ID". If Smart-ID suddenly opens without your action, you are being scammed right now.
Rule 2: The verification number must match
Real Smart-ID shows a 3-digit verification number. The same number must appear on the bank screen (or the site where you're logging in). If the numbers don't match, this is not your account — it's someone else's login.
Rule 3: Always check the text
Smart-ID shows exactly what you're confirming: "Log in to Swedbank", "Sign contract X", "Transfer €247". If it doesn't match what you actually meant to do — never confirm.
Rule 4: The URL is always smart-id.com or your bank's official address
The Smart-ID website is always smart-id.com. Official bank addresses:
- Swedbank:
swedbank.ee - LHV:
lhv.ee - SEB:
seb.ee - Coop Pank:
cooppank.ee
Any other version (smart-id.com.security-update.xyz, smart-id-confirmation.eu, etc.) is a fake.
Rule 5: When in doubt, close and start over
In any doubt, close the app, close the browser, open the app directly on your phone and start the login again. Real banks break nothing when you treat them this way. Scammers lose you instantly.
What to do if you've already confirmed
- Immediately open your bank app and block all cards (Swedbank: profile → cards → block)
- Call your bank's 24/7 line (Swedbank: 6 310 310)
- Check your balance and report every suspicious transaction
- Change your Smart-ID PINs right away
- File a report with the police online: politsei.ee/cybercrime
Want the full picture?
In the 2-hour CyberSafe course we show real fake Smart-ID sites side by side with the real ones, and you drill spotting them on at least 20 different examples. Join the next group or book your seat — €150 to never fall for one again.