The message says your Swedbank account has been restricted. You have 24 hours to update the way you confirm your identity, or online banking may stay out of reach.
If you have a bill to pay or a transfer to check, a deadline like that is hard to put aside. Here’s what to look at before you act.
Overview
What “Sąskaitos prieiga apribota” means
It means “account access restricted.” The email is written in Lithuanian and uses Swedbank’s name. Its subject line is an unaccented version of “Your access has been restricted.”
The body describes a security restriction, then tells you to update your identity verification method. It gives you a day from receipt, rather than an appointment or scheduled maintenance window.
This is phishing, not a Swedbank instruction. The link is presented as if it belongs to the bank, but it does not take you to the genuine banking site.
The distinction matters even when you bank with Swedbank and happen to have an unrelated sign-in problem. One event does not authenticate the other.
Why the footer is so persuasive
The footer borrows details from the real bank, including its name, a Vilnius address and a company identifier. It reads like the part of a notice nobody would bother inventing.
Public contact and registration details are as easy to copy as a logo. They make the imitation look official without tying it to Swedbank.
The email also puts a familiar-looking web address in view. The important question is where the link actually goes, not which words are printed on it.
- A 24-hour deadline is part of the message, not proof of a bank deadline.
- A real address can appear in a fake bank email.
- A visible bank name does not establish who controls the destination.
- An unexpected request to confirm identity should be checked inside the bank app.
What Swedbank itself says about these alerts
Swedbank Lithuania has warned about emails that use the bank’s name to get customers to sign in through a false link. Its advice is to open the app independently.
The bank also tells customers to read what an authentication request would approve. If you did not start a login or payment, do not authorize it.
That guidance applies whether the message talks about an account restriction, a new security system or some other administrative reason. The real bank is not the operator of this scam.
The destination in this example is no longer available for inspection. Treat the link as unsafe without assuming that every copy asks for the same details.
How the Swedbank Account Access Restricted Scam Works
Step 1: An account restriction lands in your inbox
The message opens with a problem that would matter immediately to a customer. It doesn’t ask whether you want an upgrade. It says your existing access has already been limited.
There’s no need for the sender to know whether a restriction really occurred. A generic security explanation can sound plausible to almost anyone who uses mobile or online banking.
The title is also easy to mistake for an automated notice. You can understand the apparent problem before you’ve even expanded the full sender information.
Stop there if the alert is unexpected. Open the bank through a route you already use, not the button waiting in the message.
Step 2: The clock makes independent verification feel inconvenient
Twenty-four hours feels urgent without sounding like an emergency. It invites you to do the task now and get it over with.
The text warns that access could stay restricted once time runs out. That is a statement made by the email, not an account status you can verify there.
If the legitimate app also reports trouble, call the bank using contact details you obtained independently. You do not need to resolve two problems through one link.
A real support conversation can start from the official number without a countdown. The impersonator loses its advantage as soon as you change channels.
Step 3: The link moves you away from the real bank
What you see in the message is a label. A link can display a bank’s name or apparent address while opening a different site entirely.
That difference is enough to abandon this route. There is no benefit to visiting the destination again to see whether it works, and you don’t need to test a password.
If the browser shows a loading error, treat it as an error. A broken or removed page doesn’t turn a deceptive email into a genuine one.
Similarly, a browser padlock on a reachable copy would only describe encryption to that site. It would not establish that Swedbank owns it.
Step 4: Bank access and approval become the real risks
The apparent purpose is to collect banking access information. A fraudulent page may ask for identifiers or credentials that have no business being entered through an unsolicited link.
Some banking scams continue with an authentication request. It can be particularly confusing when the request appears inside a real authentication app on your own device.
Read the request as a separate event. An authentic approval prompt can still refer to a login or payment you did not initiate.
If you already confirmed one, tell the bank what the screen said. A login approval and a payment approval are different facts, and both are important to the fraud team.
How to Check Whether Your Swedbank Access Is Actually Restricted
Use the app you already have
Dismiss the email and launch your existing banking app. If you usually bank on the web, use a saved bookmark you trust or navigate independently to Swedbank Lithuania.
Look for messages or account status there. Do not treat a familiar home screen, by itself, as proof nothing has happened if you already disclosed information elsewhere.
An app update belongs in the official app store or your established bank workflow. It does not need to begin with a link in an unexpected message.
Keep the email footer out of the verification loop
The footer is not the place to pick a number to call, even if the street address and bank name look accurate.
Use a number published in the official app or on the bank’s independently opened website. An existing bank card may also carry contact information.
You can describe the email by subject and approximate time without reading out your codes. A real fraud team does not need you to approve the request you’re reporting.
Separate an account lockout from a payment alert
Your password might fail for an ordinary reason. Your authentication app might also be switching devices, waiting on an update or having a temporary problem.
A genuine difficulty merits an independent call. It does not make a third-party recovery form safe, and it does not justify approving an unfamiliar transaction to regain access.
If the app shows a payment you do not recognize, tell the bank about the payment first. Mention the email and any approvals as part of the timeline.
What to Do if You Have Fallen Victim to This Scam
-
Close the page without trying another login.
If you stopped before entering anything, don’t reopen the link to see what you missed. An independently opened Swedbank app is the appropriate place to check your account.
If you typed details but never pressed the final button, tell the bank that too. Do not assume the lack of a confirmation screen kept the information private.
-
Contact Swedbank immediately if you shared anything sensitive.
Use Swedbank’s official security and fraud guidance to get current contact information. Tell them it was a Lithuanian account-restriction email.
Explain whether you supplied a user ID, password, payment details or personal information. The bank can decide which access or payment instruments need to be restricted.
If there’s a joint or business account involved, mention that up front. The bank may need to protect more than the profile that received the email.
-
Tell the bank exactly what you approved.
If you confirmed something in Smart-ID or another method, provide the time and whether the request mentioned a login or transaction. Don’t share PINs or approval codes.
Stop approving new requests, even if a follow-up caller claims to be reversing the first one. Call back independently rather than continuing that conversation.
-
Flag unexpected payments while the details are fresh.
Note the amount, currency, timestamp and recipient as shown in genuine banking records. Ask whether a transfer recall, payment dispute or other fraud procedure is available.
A request is not a promise that money will come back. Don’t send a second payment to unlock a refund or pay a stranger to recover the first one.
If you have no access to statements, say so when you call. Waiting to recover the app before reporting a possible transfer can cost time.
-
Save enough evidence to explain what happened.
Keep the original email and a screenshot of any genuine transaction or approval record. Avoid posting account numbers, authentication details or full screenshots publicly.
Write down the order of events while it’s still easy to remember. The timing helps distinguish the original email from a subsequent call, sign-in or attempted transfer.
-
Follow the bank’s instructions for getting back in.
If access needs resetting, use the route the verified fraud team gives you. Check your registered devices and transaction history after access is restored.
If you reused a disclosed password on another service, replace it there from a trusted device. Start with the email account that receives banking notices or recovery messages.
How to Record an Unauthorized Transfer
In the real app, distinguish a transaction that is pending from one that has posted. Relay exactly what you see, rather than assuming pending means canceled or approved means irreversible.
If the transaction came from a debit card, say which card is affected without sending its full number over ordinary email. A bank transfer may need a different form.
Ask the bank to confirm the next action in writing. Make a note of the case number and check whether the bank needs documents before a reporting deadline.
Keep those messages in a secure place. If you need to share an image with the bank, use the upload or message channel the bank identifies independently.
Write down whether you supplied your details, approved an action or transferred funds yourself. The distinction can affect which process the bank uses to investigate.
What a Follow-Up Call Can Sound Like
A fraudster may know your name, the bank you use or details you just shared. Knowing those facts does not prove the caller works for the bank.
They might say they are calling about a fraud report you never opened, or ask you to confirm a prompt to stop a transfer.
The official warning from Swedbank describes security-themed email impersonation. It is useful background, but it does not identify the person who sent the message you received.
If you receive both a text and an email, preserve them separately. Timing may help the bank connect events; similar wording alone doesn’t identify their sender.
Hang up and call the bank yourself. Don’t rely on the caller ID, a number they dictate or a text they send.
Never move money to a supposed safe account because the caller says it is temporary. Ask the actual bank what protection is available for the account you already hold.
If a real fraud investigator is trying to reach you, your independent call gives the bank a way to connect you with the right department.
Frequently Asked Questions
Is “Sąskaitos prieiga apribota” proof Swedbank blocked me?
No. The words describe a restriction, but anyone can put them in an email. Check account status in your usual Swedbank app or contact the bank independently.
Why does the message look like it came from Lithuania?
It uses Lithuanian text and borrows details associated with Swedbank’s Lithuanian operations. Those are signs of a localized impersonation, not evidence about where its operators are based.
What if I clicked but didn’t enter anything?
Close the page and open Swedbank separately if you need to check your account. Clicking is not the same as disclosing login details or approving a payment.
Does a real Smart-ID prompt make the message safe?
No. Read what the request authorizes and decline anything you didn’t start. A genuine app can ask you to approve an action initiated by somebody else.
Can I reply to ask if the message is genuine?
Don’t reply. Start a new conversation through Swedbank’s official channels. Replying uses contact information supplied by the same message you are trying to verify.
Do I need to close my bank account if I only received it?
Receiving the email is not evidence your account was accessed. Report it as phishing and check your account independently if you have a specific concern.
The Bottom Line
Don’t use the link in the Swedbank account access restricted email. A real-looking footer and a 24-hour deadline cannot establish that the bank is asking you to act.
Open the Swedbank app yourself. If you entered information, approved a request or see a payment you didn’t make, contact the bank through its official fraud channels now.
Join the discussion
0 commentsShare your experience or ask a question about this article.
Discussion
Start the conversation
Have a question or something useful to share? Add the first comment.