The Police would like to alert members of the public to a persistent phishing scam variant involving fake buyers on online marketplace platforms. Since April 2024, at least 594 victims have fallen prey, with total losses amounting to at least $1.3million.
In this variant, scammers would pose as interested “buyers” on Carousell, Facebook Marketplace or other platforms. After agreeing on the selling price of the listed items via the platforms’ in-app chat functions, the scammers would impersonate the relevant online marketplace platforms or delivery companies and inform victims that the money was transferred. Thereafter, scammers would send a phishing link or QR code to the victims, purportedly for the victim to receive payment for the sale of the item, to schedule a delivery, or to complete the transaction.
Victims would click on the link or scan the QR code and be redirected either to a spoofed bank website, or to a spoofed delivery company website, before getting redirected to a spoofed bank website. Victims would then be deceived into keying their banking credentials, credit card details and One-Time Passwords (OTPs), thinking that it was part of collecting payment from the scammers. Victims would subsequently realise that they have been scammed when they discovered unauthorised transactions made to their bank accounts or bank cards.
The Police would like to advise members of the public to adopt the following precautionary measures:
- ADD – Add the ScamShield App to protect yourself from scam calls and SMSes. Set security features (e.g. set up transaction limits for internet banking transactions, enable Two-Factor Authentication (2FA), Multifactor Authentication for banks). Do not disclose your bank/card details and One-Time Passwords (OTPs) to anyone.
- CHECK – Check for scam signs with official sources (e.g. ScamShield WhatsApp bot @ https://go.gov.sg/scamshield-bot, call the Anti-Scam Helpline on 1800-722-6688, or visit www.scamalert.sg). Look out for tell-tale signs of a phishing website. Do not click on dubious URL links provided and always verify the authenticity of URL link. If in doubt, always verify the authenticity of information provided with the online marketplace platform directly.
- TELL – Tell the authorities, family, and friends about scams. Report any fraudulent transactions to your bank immediately and report any suspicious users to the online marketplace platform.
If you have any information relating to such crimes or if you are in doubt, please call the Police Hotline at 1800-255-0000, or submit it online at www.police.gov.sg/i-witness. All information will be kept strictly confidential. If you require urgent Police assistance, please dial ‘999’.
For more information on scams, members of the public can visit www.scamalert.sg or call the Anti-Scam Helpline at 1800-722-6688. Fighting scams is a community effort. Together, we can ACT Against Scams to safeguard our community!
Annex A
Conversations between Scammers and Victims
In-App Chat (Carousell) ▼
Off-Platform (Whatsapp) ▼
Phishing Emails and Links sent to Victims ▼
Spoofed Bank Website and Payment Interface ▼
Spoofed Delivery Website (Grab) ▼
SINGAPORE POLICE FORCE
12 June 2024 @ 8:00 PM