The fake Smart-ID confirmation
A message or a call asks you to "renew" Smart-ID or to confirm a request. If you enter your PIN, you let fraudsters into your bank.
Reviewed by Vitali Hisko, September 24, 2026
What the message looks like
Smart-ID: your account is about to expire. Renew it within 24 hours: hxxps://smartid-renew[.]com
What actually happens
The link opens a fake page. It asks for your personal code and phone number. At that moment the fraudsters log in to your real bank in your name. A real Smart-ID request pops up on your phone — but it is theirs, not yours. With PIN1 you let them into your bank. With PIN2 you confirm their payment or loan.
Sometimes a "bank employee" calls instead. He says you must confirm a request "to stop a payment". That is a trick too.
How to recognise it in three seconds
- Smart-ID is renewed only in the app — never through a link.
- A request arrived, but you did not start anything yourself.
- Someone on the phone asks you to confirm a request or tell a code.
What to do
- Do not enter a PIN unless you started the login or payment yourself.
- Cancel the request in the app.
- Hang up, or delete the message.
If you already entered your PIN
- Call your bank right away — ask them to block your online banking.
- Delete your Smart-ID account in the app or at a bank branch, and make a new one — the PINs cannot be changed.
- Report it to the police on 112 or at epolicija.lt.
Who to tell
Your bank (number on your card), police (112 or epolicija.lt), NKSC (nksc.lt/pranesti — type the address yourself).