The Police have observed an emerging variant of malware scam where victims would respond to alleged fraudulent advertisements of food items, many of which were posted on Facebook, and be redirected to fake Sheng Siong and FairPrice Group applications (Apps). Since September 2023, at least 11 victims have fallen prey, with total losses amounting to at least $403,000. The Police have received reports of scams involving fraudulent advertisements of food items, many of which were posted on Facebook. Members of the public are advised to be wary of such fraudulent advertisements on Facebook.
In these cases, victims would come across advertisements on Facebook promoting food items such as rice, cookies, duck, etc. Upon clicking on the link on the said advertisement, the victims were redirected to WhatsApp whereby the “sellers” would engage victims and be directed to download an Android Package Kit (APK) over WhatsApp or be directed to malicious links to download the APK to place orders for the food items. The APK is an app created for Android’s operating system. The malicious app of concern resembles the FairPrice Group and Sheng Siong apps. Please refer to Annex A for images of these fake apps. After downloading and installing the APK file (which includes granting the app accessibility services), the scammers will be able to access the victim’s device remotely to steal banking credentials and passwords. Victims were also instructed to make a PayNow/bank transfer to make payment/deposit for the food items or become a member or to pay for delivery. Subsequently, victims discovered unauthorised transactions from their banking accounts.
The Police would like to remind members of the public of the danger of downloading apps from third-party or dubious sites. Members of the public are advised to adopt the following precautionary measures:
ADD – ScamShield to protect yourselves from scam calls and SMSes. Add anti-virus applications and ensure that these apps are updated to scan for the latest malware. Also ensure your devices’ operating systems and applications are updated regularly to be protected by the latest security patches. Please refer to Annex B for the list of recommended anti-virus apps. Disable “Install Unknown App” or “Unknown Sources” in your phone settings and do not grant permission to persistent pop-ups that request for access to your device’s hardware or data.
CHECK - For scam signs with official sources (e.g. ScamShield WhatsApp bot @ https://go.gov.sg/scamshield-bot, call the Anti-Scam Helpline on 1800-722-6688, or visit www.scamalert.sg). Only download and install applications from official app stores (i.e., Google Play Store for Android). Be wary if asked to download unknown apps in order to purchase items on Facebook. Check the developer information on the app listing as well as the number of downloads and user reviews to ensure it is reputable and legitimate.
TELL - Authorities, family, and friends about scams. Report the suspicious content or advertisement to Facebook. Initiate in-app blocking by reporting the number linked to the advertisement to WhatsApp. Lastly, report any fraudulent transactions to your bank immediately.
If you have already downloaded and installed the app (which includes granting the app accessibility services) or suspect that your phone is infected with malware, please take the following steps:
- Turn your phone to “flight mode”. Check that Wi-Fi is switched off and do not switch it on.
- Run an anti-virus scan on your phone.
- Check your bank account/Singpass/CPF etc for any unauthorised transaction(s) using other device(s).
- If there are unauthorised transaction(s), report to the bank, relevant authorities, and lodge a Police report.
- After completing steps a-c, if you believe that your phone has not been infected with malware, you may resume usage of your phone. As a further precaution, you may consider doing a “factory reset” of your phone and changing important passwords.
The retailers and the Police are working together in the fight against scams. If you have any information relating to such crimes or if you are in doubt, please call the Police Hotline at 1800-255-0000, or submit it online at www.police.gov.sg/iwitness. All information will be kept strictly confidential. If you require urgent Police assistance, please dial ‘999’.
For more information on scams, members of the public can visit www.scamalert.sg or call the Anti-Scam Helpline at 1800-722-6688. Fighting scams is a community effort. Together, we can ACT Against Scams to safeguard our community!
Annex A
Images of the fake “FairPrice Group” app ▼
Conversation between the victim and scammer ▼
Annex B
List of recommended anti-virus apps ▼
SINGAPORE POLICE FORCE
06 October 2023 @ 11:00 AM