The Police would like to alert members of the public to a surge in parcel delivery phishing scams. Members of the public are advised to be more alert of such scams while waiting for legitimate deliveries after major online shopping events (i.e. Singles Day, Black Friday, Cyber Monday, 12.12 sales or Christmas sales). Since 1 January 2024, at least 631 cases were reported, with total losses amounting to at least $1.1m. Of these 631 cases, at least 505 cases, with total losses amounting to at least $955,000, involved impersonation of SingPost.
In this scam variant, victims would receive a message about a failed parcel delivery to the victim’s address. The message would instruct the victim to click on a uniform resource locator (URL) to confirm their address. Victims who click on the URL would be directed to a phishing site which would prompt the victim to key in their credit card details. The scammers will then make unauthorised purchases using the victim’s credit card details. Victims would only realise that they had been scammed when they noticed unauthorised transactions on their cards or in their bank account statements.
The Police would like to advise the public that the SMS Sender ID of Singapore Post is SingPost. Payments to SingPost are never through an online link. Also, SingPost will never request for personal or banking information via SMS. If SingPost is unable to deliver an item, members of the public will receive a physical Non-Delivery Advice to collect the item from a post office or POPStation.
Members of the public are advised to adopt the following precautionary measures:
ADD - Add the ScamShield app and set security features (e.g. set up transaction limits for credit/debit card transactions, enable Two-Factor Authentication (2FA), Multifactor Authentication for banks and e-wallets).
CHECK - for scam signs with official sources such as the ScamShield helpline (1799). You can also check the legitimacy of suspicious messages, phone numbers and website links via the ScamShield app or visit the ScamShield website at www.scamshield.gov.sg. Always verify the authenticity of the information with the official website or sources, even if you are expecting the delivery of a parcel. Please refer to https://www.singpost.com/online-security-you to stay alert against SingPost-related scams. Never disclose your personal or banking credentials, including One Time Passwords (OTPs) to anyone.
TELL - Authorities, family, and friends about scams. Report any fraudulent transactions to your bank immediately.
If you have any information relating to such crimes or are in doubt, please call the Police Hotline at 1800-255-0000, or submit it online at www.police.gov.sg/i-witness. All information will be kept strictly confidential. If you require urgent Police assistance, please dial ‘999’.
For more information on scams, members of the public can visit www.scamshield.gov.sg or call the ScamShield Helpline at 1799. Fighting scams is a community effort. Together, we can ACT Against Scams to safeguard our community!
Annex A
Messages sent by scammers ▼
Screenshots of the phishing website▼
SINGAPORE POLICE FORCE
22 November 2024 @ 10:45 PM