Smishing has rapidly become one of the most damaging forms of cybercrime across the Nordics. This report combines threat intelligence, telecom data, case studies, and simulations to reveal the scale and sophistication of attacks. Spoofed SMS impersonating tax authorities, delivery services, or banks—sometimes paired with deepfake calls—make smishing a critical security concern.
With high mobile penetration, widespread digital ID use, and strong trust in SMS, the Nordics provide fertile ground for attackers. This report highlights the financial, reputational, and operational impact of smishing—and how organizations can turn users into security assets through training, monitoring, and cultural change.