The 'What's Your Real Body Age?' Scam Targeting Finland and the Nordics
A fake health assessment has generated nearly 1,000 complaints across Finland, Sweden, Norway and Denmark. It starts with a Facebook ad. It ends with an invoice you legally don't have to pay. Here's exactly how it works — and who is behind it.
The Ad
It appears on Facebook, often targeted at middle-aged users. The copy is simple:
"Do you want to know your real body age?"
It links to a health assessment website — localised to your country, in your language, with a credible design and no obvious red flags. The questionnaire takes about two minutes. You answer questions about your stress levels, diet, sleep, exercise, and alcohol consumption.
At the end, you're asked for your name and email address to receive your personalised health report.
Shortly after, an invoice arrives.
What's Actually Happening
This is a subscription trap — a well-documented fraud technique where users are tricked into agreeing to a paid service through terms buried in small print, then invoiced as if they entered a legal contract.
The pricing is embedded in the terms and conditions on the assessment page, visible only if you scroll and read carefully:
- Finland: €79.99
- Sweden: 899 SEK
- Norway: 899 NOK
- Denmark: 669 DKK
Most users never see it. The "I agree to the terms" checkbox that appears before proceeding is positioned as a standard consent box — the kind that appears on every website. Few people read what they're agreeing to.
The report you receive is generic. The same assessment — repackaged — is delivered to every user regardless of their answers. You are not receiving a medical opinion, a professional evaluation, or anything that required your specific data to produce. The questionnaire exists to create the appearance of a personalised service and to collect your contact information.
The Scale of the Problem
Consumer agencies across the Nordic region have received nearly 1,000 complaints about this network of sites:
| Country | Complaints |
|---|---|
| Norway | 400+ |
| Sweden | 369 |
| Finland | 136 |
| Denmark | 73 |
These are reported complaints only. The actual number of people invoiced is likely significantly higher — many victims pay without reporting, and many others simply ignore the invoice without knowing they are legally entitled to do so.
Who Is Behind It
An investigation by EDMO (the European Digital Media Observatory) traced the operation to a Hungarian operator running 14 websites across 6 languages — Danish, Swedish, Norwegian, Finnish, German, and French. Every site shares the same structure: a Facebook ad, a localised health questionnaire, buried pricing terms, a generic report, and an invoice.
When contacted by investigators, the operator rapidly shut down all associated websites — confirming awareness of the investigation, and the deliberate nature of the operation.
The network was not an accident or a misunderstanding. It was a coordinated, multilingual, multi-country fraud operation designed specifically to target populations in high-trust, high-income countries where people are less likely to suspect that something presented on a credible website is a scam.
After the Invoice: What Happens Next
If you don't pay, you will likely receive:
- A reminder invoice, often with added fees or interest
- A letter threatening debt collection
- In some cases, contact from a third-party debt collector claiming the debt has been sold
This is where many victims pay — not because they believe they owe the money, but because the debt collection letter looks official and threatening.
You do not have to pay.
Here is why: under EU and Nordic consumer protection law, a contract formed through hidden terms that the consumer could not reasonably be expected to read and understand is not enforceable. The consent obtained through a pre-checked or inconspicuous checkbox tied to deeply buried pricing does not constitute valid contract formation in most Nordic jurisdictions.
Consumer authorities in Sweden, Norway, Finland and Denmark have all confirmed this position in the context of these specific complaints.
What to Do If You've Received an Invoice
Step 1: Do not pay. Payment implies acceptance of the contract. Once you pay, your ability to dispute becomes significantly harder.
Step 2: Dispute the invoice in writing. Send an email or letter to the company stating clearly that you dispute the claim and do not recognise the debt. Keep a copy. This creates a paper trail and, crucially, stops the company from legally pursuing additional fees — once a formal written dispute is on record, escalation to debt collection becomes legally precarious for them.
Step 3: If debt collectors contact you, dispute in writing again. Send the same dispute to the collection agency. In most Nordic countries, a disputed debt cannot be pursued through standard collection channels — it would require the company to take you to court, which they almost never do for amounts under €100.
Step 4: Report it.
- Finland: Finnish Competition and Consumer Authority (KKV)
- Sweden: Konsumentverket
- Norway: Forbrukerrådet
- Denmark: Forbrugerrådet Tænk
- Germany/France: Report to your national consumer protection authority
Reporting matters even if you've already paid. Aggregate reports are what trigger formal investigations and — as the EDMO case shows — can lead to the operator shutting down their network.
How to Spot This Type of Scam Before It Reaches Your Inbox
The health assessment scam follows a pattern shared by most subscription trap operations. Recognising the pattern protects you from future variants — because the operator who shut down 14 websites this week will likely open new ones next month.
Signs you're on a subscription trap site:
- You found it through a Facebook or Instagram ad promising a free personalised result (health score, personality type, IQ, body age, financial assessment)
- The site asks for your email address before delivering the "free" result
- There is a checkbox labelled something like "I have read and agree to the terms and conditions" before you proceed
- The pricing is not displayed prominently on the page — you have to find it
- The result you receive is generic and could apply to anyone
Before you enter your email address on any assessment site, check the domain. Run it through RiskScope — subscription trap sites often show signals including recently registered domains, no verifiable company identity, and in some cases threat database flags from previous operations under the same network.
The Broader Pattern: This Is Not Isolated
The Nordic health assessment network is one variant of a global subscription trap industry. Similar operations — using the same Facebook ad targeting, the same hidden-terms mechanics, and the same debt-threat follow-up — run across Europe, the Middle East, and Africa in categories including:
- Personality and IQ assessments
- Financial health checks ("Are you on track for retirement?")
- Property valuation tools (particularly active in the UAE and Gulf states)
- CV and job-readiness scores (active in MENA region, targeting job seekers)
- Ancestry and genetic assessment teasers (leading to full subscription services)
In each case, the product is designed to feel relevant to the user's current concerns — health, money, employment, identity. The mechanics underneath are identical.
The Bottom Line
If you received an invoice from a health assessment website you found through a Facebook ad, you are not alone, and you are not legally obligated to pay.
Dispute it in writing. Report it to your national consumer authority. And before you engage with any website offering a free personalised assessment of any kind — check the domain first.
Check any website on RiskScope
Sources: EDMO — Scammers Behind Fake Health Assessments in the Nordics, Finnish Competition and Consumer Authority (KKV), Forbrukerrådet Norway, Konsumentverket Sweden, NordisHub, Nordic Police Threat Assessment on Online Fraud 2024
Check Any Website Yourself
RiskScope is free. No signup required. Enter any domain and get an instant risk assessment.