Ellen Bagley, a 20-year-old from Linköping, Sweden, experienced an unexpected shock after making her first sale on a second-hand clothing app. Following a seemingly legitimate direct message asking her to verify personal details, she clicked a link that initiated BankID, Sweden's widely-used digital authorization system. Despite some error messages, over 10,000 Swedish kronor ($1,000) was quickly siphoned from her account. Bagley admitted, “The fraudsters are so skilled at making things look legitimate. It’s not easy to identify scams.”
While gang-related gun violence has dominated headlines, financial crimes like online fraud have surged in Sweden, which has largely transitioned to a cashless society. In 2023 alone, criminals extracted 1.2 billion kronor through various scams, doubling from 2021. The size of Sweden's criminal economy is estimated to be as high as 2.5% of the nation’s GDP.
The rise in digital fraud has prompted Swedish authorities to push banks to enhance security measures, balancing the need for robust protection with maintaining economic efficiency. Daniel Larson, a senior economic crime prosecutor, described Sweden as a “Silicon Valley for criminal entrepreneurship," where sophisticated fraud schemes even leverage the welfare system. Larson emphasized that focusing on economic crime is crucial since it fuels organized crime and associated violence.
Sweden's move to electronic cash accelerated after armed robbery incidents in the 1990s, reaching a point where only 8% of Swedes used cash for their latest purchase by 2022. BankID, an online signature system requiring a six-digit code, fingerprint, or face scan for authentication, has integrated deeply into Swedish life, facilitating everything from tax returns to bus ticket purchases. Originally launched by banks in 2001 and widely adopted after the tax agency embraced it in 2005, BankID's mobile phone variant, introduced in 2010, further increased its usage.
Despite the system's efficiency, its ubiquity has contributed to its vulnerability. BAGLEY, along with critics, argues that BankID often becomes a mere procedural step rather than a robust security measure. This perception is exacerbated by the fact that government agencies utilize BankID for business setups, inadvertently enabling fraudulent activities. Fake companies with forged payrolls have allowed criminals to launder money and exploit the welfare system, with reported benefit fraud cases doubling over the past decade.
In response to rising fraud, banks are rolling out additional security layers requiring user opt-in. Measures include two-stage authorization and delaying transfers, aimed at balancing convenience and protection. However, calls for banks to shoulder more fraud-related costs have grown. Currently, payment service providers cover only about 10% of fraud losses, and unlike the UK, Sweden has yet to mandate customer reimbursements for fraud-induced transfers.
Bagley, who reported her incident to the National Board for Consumer Disputes, has taken steps to raise awareness through social media, despite the stigma of being scammed. She aims to support others who may feel isolated and ashamed after falling victim to similar frauds. "I’ve heard from so many others who have told me ‘I’ve also been scammed and felt so alone and ashamed’,” she shared. As the digital crime wave persists, Sweden continues its search for effective solutions to safeguard its cashless society.