Swish Scams in Sweden: How to Protect Yourself from Payment Fraud
Learn how scammers exploit Swish, Sweden's universal payment app. From fake Swish requests to QR code scams and the 'friend in need' SMS trick, here is how to stay safe.
Swish Scams in Sweden: How to Protect Yourself from Payment Fraud
Swish is not just another payment app in Sweden — it is the payment app. With over 8.5 million active users in a country of roughly 10.5 million, Swish has become as essential as a house key. Swedes use it to split restaurant bills, pay for fika, buy things on Blocket, and send money to friends. Its speed and simplicity are what made it a national institution, but those same qualities are exactly what scammers exploit.
Swedish police and the Brottsförebyggande rådet (BRÅ) have reported a steady increase in Swish-related fraud. Because Swish transfers are instant and irreversible, once you send money to a scammer, getting it back is nearly impossible.
Here is how these scams work and what you can do about them.
Why Swish Is a Scammer's Dream
Swish transfers are immediate. There is no pending period, no chargeback option, and no buyer protection. When you hit "send," the money arrives in the recipient's account within seconds. Unlike card payments, you cannot dispute a Swish transaction with your bank after the fact. This makes Swish fundamentally different from paying with Visa or Mastercard, where fraud protections exist.
For scammers, this means a successful trick results in instant, untraceable profit.
The Most Common Swish Scams in Sweden
1. Fake Swish Payment Confirmations
You are selling something on Blocket or Facebook Marketplace. The buyer claims they have already sent the Swish payment and shows you a screenshot of a completed transfer. You hand over the item, but the screenshot was fabricated. No payment was ever made.
How to verify: Always check your own Swish app or bank account before releasing any goods. Never rely on screenshots sent by the buyer.
2. The Fake Swish Request (Betalningsförfrågan)
Swish allows users to send payment requests to other users. Scammers send legitimate-looking payment requests from numbers that appear to belong to a business or authority. The request might say "Unpaid parking fine" or "Delivery fee — PostNord." Distracted or stressed recipients approve the request without thinking.
How to verify: Never approve a Swish request you did not expect. Verify the sender's phone number independently before paying.
3. QR Code Swish Scams
Scammers create fake Swish QR codes and paste them over legitimate ones at parking meters, charity donation boxes, market stalls, or even restaurant tables. When you scan the QR code and approve the payment, the money goes to the scammer instead of the legitimate recipient.
This scam has been spotted at markets in Stockholm, Gothenburg, and Malmö. It is particularly effective because QR code payments feel automated and trustworthy.
How to verify: Always check the recipient name and number that appears in Swish before confirming payment.
4. The "Friend in Need" SMS Scam (Kompis i Nöd)
You receive an SMS from an unknown number: "Hi, it's [friend's name], I got a new number. Can you Swish me 500 kr? I'll pay you back tomorrow." The number is not your friend's, and the person is not who they claim to be.
Variations of this scam target parents, with messages like "Hi mom, my phone broke. Can you send money to this number so I can get a new one?"
How to verify: Call your friend or family member on their original number before sending anything.
5. Fake Refund Scams
A scammer posing as a company contacts you, claiming you are owed a refund. They ask for your Swish details to "process the refund" and then send you a Swish request instead of a payment. If you approve it quickly, you send them money rather than receiving it.
Swish Scam Red Flags
| Warning Sign | What It Means |
|---|---|
| Payment screenshot instead of checking your app | Likely fabricated — always verify in Swish directly |
| Unexpected Swish payment request | Scammer hoping you approve without checking |
| QR code that looks pasted over another one | Fraudulent QR replacing a legitimate one |
| SMS from "new number" asking for money | Classic impersonation scam |
| Request claims to be a fine or government fee | Swedish authorities never collect payments via Swish |
| Pressure to pay immediately | Social engineering tactic |
Swish Security Checklist
- Always verify payments in your own Swish app — Never trust screenshots
- Never approve unexpected Swish requests — If you did not initiate or expect it, decline
- Check the recipient name before every payment — Even after scanning a QR code
- Call the person on their known number if someone asks for money from a new number
- Set Swish transaction limits in your bank's app to cap potential losses
- Report suspicious Swish activity to your bank and to polisen.se
- Enable notifications so you see every transaction in real time
What to Do If You Fell for a Swish Scam
- Contact your bank immediately — In rare cases, they may be able to intervene
- File a police report at polisen.se or your local polisstation
- Report the scam to Konsumentverket (Swedish Consumer Agency)
- Block the scammer's number in Swish and on your phone
- Warn others — Share your experience to prevent friends and family from falling for the same trick
Share Financial Details Securely
When you need to share bank account numbers, Swish details, or other sensitive financial information with someone you trust, do not send them through SMS or Messenger. Use LOCK.PUB to create a password-protected, auto-expiring link. The recipient enters the password to view the information, and it disappears after expiration — leaving no trace in your chat history.
The Bottom Line
Swish is a brilliant payment system that has made everyday life in Sweden remarkably convenient. But its speed and irreversibility are exactly what fraudsters exploit. The single most important rule: never approve a Swish payment or request you did not initiate or expect.
Always verify independently, take an extra moment before confirming, and if you need to share sensitive financial information, use a secure tool like LOCK.PUB instead of plain text messages. Stay safe, stay skeptical, and trust your instincts.
Keywords
You might also like
BankID Phishing in Sweden: How Scammers Hijack Your Digital Identity
Learn how BankID phishing works in Sweden, from fake bank calls to remote desktop scams. Protect your digital identity with this complete security guide.
Blocket Scams in Sweden: How to Buy and Sell Safely on Sweden's Marketplace
Learn how scammers operate on Blocket, Sweden's largest marketplace. From fake buyers and Swish tricks to shipping fraud, here is your complete safety guide.
Diia App Phishing in Ukraine: How Scammers Exploit Digital Government Services
Learn how phishing attacks target Diia (Дія) app users in Ukraine, from fake government notifications to digital document theft. Complete protection guide for Ukrainian digital ID users.
Create your password-protected link now
Create password-protected links, secret memos, and encrypted chats for free.
Get Started Free