Cyber Scams 2025!

“Too good to be true” offers that steal your money!

Cyber scams 2025 — what is really happening and how to protect yourself.

Imagine your phone rings, and on the other end you hear your child’s, partner’s or parent’s distressed, breathless or panicked voice saying:

“I’m in trouble, please send money RIGHT NOW, I’ll explain later!”

You don’t have time to think — only to react. But… what if it’s not even their real voice, but an AI-generated clone? Cyber threats are no longer just “viruses on a computer”.

In 2025, attacks are smart, well-staged, and targeted directly at your emotions and trust. The Estonian Information System Authority (RIA) warns that scam calls and emails are extremely professional — fluent Estonian, your correct name, and sometimes even personal details.

Let’s look at what traps surround you today and what you can do to protect yourself.

—————————————————————————

Martin Orav
Partner / Board Member

Scams no longer sound like the “Nigerian prince”

The old classics have been given a new disguise. “Unpaid invoice,” “urgent investment opportunity,” “unused compensation” — all of these can look like completely normal messages from your service provider. For example:

• an email appears to come from Enefit, Telia, Zone, or similar;
• it claims that your previous invoice is unpaid;
• it urges you to “click here to pay immediately”.

The link takes you to a page that looks exactly like a real customer portal. Logo, colors, design — everything familiar.
But once you enter your login details, bank information, or PIN codes, they actually go straight to the scammer.

The same pattern appears with phone calls. Someone pretends to be:

• from the Tax and Customs Board;
• from the Social Insurance Board;
• or from your bank.

They call at times when people are genuinely expecting refunds or benefits (for example, during tax declaration season). The voice is:

• calm and professional;
• speaks perfect Estonian;
• knows your name and a few personal details.

This is how they win your trust.

Important! No real friend or service provider will ever ask for your PIN codes, passwords or confirmation messages via SMS!

WhatsApp and Messaging App Scams in 2025

WhatsApp and other messaging apps have become the new playground for scammers. A wide range of schemes circulate there. The most common examples are:

“Friend in trouble”

“I have a new number, my phone was stolen, please help quickly, I need money!”

A believable detail is added: “I’m abroad,” “my card isn’t working,” etc.
The pressure is strong: “right now” and “immediately”.

Fake giveaways and prize scams

“You have won a large sum/a phone/a trip — fill out the form, agree to the terms, and send us your details!”

To “process the prize,” they ask for: your ID-code, bank details, documents, or a “small processing fee”.

Verification code scams

Someone claiming to be your friend messages you:

“A WhatsApp/SMS verification code was accidentally sent to your number, please forward it to me.”

If you do this, the scammer can fully take over your WhatsApp or another account.

Malware and phishing pages — where a single wrong click can cost you everything.

Malware is software that harms your device and data. For example, it can:

• encrypt your files and demand ransom;
• use your computer for cryptocurrency mining;
• steal passwords and other information.

A phishing page is a website that looks real (a bank, online store, customer portal) but is actually a fake copy. You enter your data yourself — the scammer simply waits.

How to protect yourself:

• update the software on your computer and phone regularly;
• download programs only from official sources (Google Play, App Store, the manufacturer’s website);
• do not open attachments or links from unknown senders;
• if an email is threatening and demands you to act “IMMEDIATELY,” be especially careful;
• do not plug unknown USB drives into your computer.

Spam is also “free money” that turns into an expensive trap

Modern spam is no longer just an email titled “You won!!!”.
Often, messages come in the name of “benefactors,” “bankers,” or “compensation funds.”

They promise unexpected money, inheritance, or support — but only after you pay something or provide your personal information. What to do?

• Do not reply to suspicious emails (even an “unsubscribe” link may be a scam).
• Do not send ID codes, documents, or banking information via email unless you are 100% sure who you are writing to.
• If an offer sounds too good to be true, it usually is.
• Use spam filters and security software for your email.

If you have already clicked a suspicious link, shared information, or made a payment, do the following:

• contact your bank and inform the police;
• change your passwords (start with your email and bank);
• enable two-factor authentication (2FA) on your accounts.

Booking platforms, hotels and the “too good to be true” offer

Travel and accommodation scams are also becoming more sophisticated. You see an offer that is unbelievably cheap. Added to it is: “Only today! Last rooms! Book NOW!”
They play on your FOMO (fear of missing out) and your desire to get a “deal”.

One extremely important rule about booking platforms:

A booking portal or hotel will NEVER ask for your account or payment information by phone, email, or messaging apps (such as WhatsApp).

If someone claims to be from a hotel or booking portal and asks you for:

• credit card details over the phone or via WhatsApp;
• your online banking passwords or PIN codes;
• a “quick extra fee” or your booking will be cancelled,

then end the communication immediately!

Go to the official website of the booking platform or hotel and:

• log into your account and communicate through the platform’s internal messaging system; or
• use only the contact information listed on the hotel’s or portal’s official website, not the details provided in a suspicious message.

Tomorrow, someone might call your loved one using your voice

Now we reach the most unsettling part — AI voice scams.
Scammers need only a few seconds of your voice, taken from for example:

• a public video;
• a short interview;
• a voice clip shared on social media.

With artificial intelligence, they can create a voice that sounds almost exactly like you. How does the scheme work?

Your “voice” calls your family member:

“I’m in trouble, please help quickly, I need money!”

• The call is short, extremely emotional and panicked. The goal is to prevent your loved one from thinking — only reacting.
• Then “you” hand the phone over to a “police officer,” “official,” or “bank employee,” who calmly explains where and how the money should be sent.
• The money is often requested in cryptocurrency, gift cards, or other hard-to-trace forms.

This is no longer science fiction — it is the next generation of fraud, exploiting your voice and your loved ones’ trust and affection for you.

Cyber Scams 2025 and How to Protect Yourself

• Don’t make decisions in panic. A real bank or authority will not force you to act within 30 seconds.
• Don’t share PIN codes, passwords or verification messages. Never, with anyone. Not with a bank, the police, “IT support,” a friend, or a “child” on the phone.
• Don’t make transfers based solely on a call or message. End the call and call the person back on a number you know.
• Create a family code word. Agree with family members on a secret question or code word that a scammer would not know. If a call feels suspicious, ask for the code word. If they don’t know it — hang up.
• Always check the email address and sender.
  • Check if the web address is spelled correctly (not “teliia.ee” or “paypall.com”).
  • In emails, check the sender’s real address, not just the display name.
• Keep your devices updated and use two-factor authentication (2FA). Software updates fix security vulnerabilities. 2FA means that even if a password leaks, it’s much harder for a scammer to access your account.
• Trust your instincts. If something feels off — don’t click, don’t send, don’t pay. Ask yourself: “Does this make sense?”, “Is this safe?”, “Can I verify this another way?”

Cyber scams in 2025 are smarter than ever!

A safe digital life doesn’t mean you have to fear everything. It means giving yourself a few extra seconds to think before clicking or making a transfer.

Because…

be prepared: tomorrow someone may call your phone using your loved one’s voice and ask for financial help — are you sure it will really be them?

Sources used in preparing this article:

• Estonian Information System Authority (RIA) – blog post on the evolution of cyber scams and examples
• Estonian Information System Authority (RIA) – “Malware, phishing pages and fake giveaways”
• Norton LifeLock / LifeLock – overview of common WhatsApp and identity scams
• Microsoft Support – guide “Protect yourself from phishing”
• Kaspersky – “How to protect against spam”
• British Transport Police Federation – “Too good to be true? How to protect yourself from online scams”
• CNET – coverage of AI voice clones and McAfee’s research on AI voice scams