According to the State Data Protection Inspectorate, in the first half of 2026 alone, 140 reports of personal data security breaches were recorded in Lithuania, and the number of affected people reached 1.65 million – almost ten times more than in the same period last year.
Read more During excavation works in Garliava, a main gas pipeline was damaged, residents were evacuated
“To extort money, it is not necessary to have very sensitive data – a few seemingly insignificant details may be enough. Knowing the name and phone number, scammers can contact personally; knowing the workplace – pretend to be a colleague or boss; and use the address or housing information to justify an alleged problem with a parcel, service, taxes, or property. Such stories can sound very convincing because they use real details about the person,” says Irmantas Jasevičius, Director of the Money Laundering and Fraud Prevention Department at Urbo Bank.
According to him, the use of personal data is only the first stage of fraud – it aims to gain the person’s trust and encourage them to take an action the scammer lacks: disclose login or card details, confirm a transaction, or transfer money. Therefore, the most important thing is to assess not how much the person knows about you, but what they are asking for – several signals should prompt you to stop.
How much information about you circulates on the internet?
According to the Urbo Bank representative, personal data can get into the wrong hands in various ways. We leave some of it ourselves – by creating accounts in online stores, filling out forms, registering on portals, apps, or loyalty systems.
However, data can also leak not due to human carelessness. According to I. Jasevičius, many companies and institutions store them, so hacking into their systems can access data of thousands of people. Information can also be disclosed due to human error – sending a document to the wrong recipient, improperly restricting access, or publishing insufficiently anonymized data.
“We cannot fully control where and how the data we have already provided is stored. However, we can decide how much data about ourselves we provide. When registering, it is worth considering whether the website really needs your date of birth, address, phone number, or other information. If the field is not mandatory and the data is not necessary for the service, it is better not to provide it,” shares I. Jasevičius.
In online stores, if possible, the Urbo Bank representative advises buying without creating an account and having a separate email address for one-time registrations. Also, periodically delete long-unused accounts, use different passwords for each, and enable two-factor authentication where possible – an additional login confirmation, for example, receiving a code on your phone.
“Using the same password on several websites increases the risk of losing other accounts as well. Before entering data, it is also worth checking the website address – a scam page may differ by just one letter. The main rule is to leave only the information strictly necessary for the service online and not to click on login links received unexpectedly – open the website yourself,” advises the specialist.
Read more The oldest man in Europe has died: an Italian worked in his vineyard every day until very old age
Five main scam schemes
According to I. Jasevičius, scammers do not need to collect data about residents themselves – leaked information is sold on criminal forums or found on the internet. A name, phone number, or bank used helps create a more convincing deception. One of the most common schemes is fake emails or SMS messages allegedly from a bank, courier, or institution.
“Clicking the link leads to a page resembling a real website, where you are asked to log in or enter card details. Urgency, threats to block the account, or requests to log in via the sent link should raise suspicion. In such cases, the official website should be opened by yourself.
Another method is a call pretending to be an employee of some institution. Scammers may know personal information, fake the number, and ask for login details, card data, Smart-ID PIN code, or money transfer to a ‘safe account’,” lists the Urbo Bank representative.
The third scheme starts with an online advertisement. According to the specialist, a scammer pretending to be a buyer may send a fake courier or payment link and ask for bank details. Therefore, it is important to remember that a transfer does not require a CVV code, bank logins, or Smart-ID confirmation.
“The fourth is investment fraud. Scammers show an alleged return and pressure to invest more. Often it all starts with a small amount and supposed profit, which encourages investing more, and when wanting to withdraw money, additional ‘fees’ are requested. Guaranteed profit, urgency, or requests to install remote access software allowing the scammer to control your computer should raise suspicion. Before transferring money, it is worth checking the company’s license in the list of financial market participants supervised by the Bank of Lithuania,” indicates I. Jasevičius.
In the fifth scheme, the scammer pretends to be a colleague, boss, or acquaintance, using a real name, position, or workplace. You should be cautious if asked to urgently transfer money, change the account, or provide confidential data. It is best to verify such a request by contacting through another channel.
What to do if you have already become a victim?
“If the link was clicked but data was not entered, close the page. If bank details have already been disclosed or money transferred, it is important to act immediately: contact the bank, block the card or account, and inform the police. The sooner the bank receives the notification, the higher the chance to stop the funds,” reminds Irmantas Jasevičius, Director of the Money Laundering and Fraud Prevention Department at Urbo Bank.
Read more Pharmacist debunks popular myths: never use these facial products
