Singapore Police and DBS report 219 phishing victims and SGD446,000 in losses in January 2024

DBS Bank building
Singapore phishing victims have been getting SMSes with clickable links from fraudsters pretending to represent DBS Bank. Photo courtesy: DBS

Singapore has been seeing regular headlines on various types of digital scams, including banking scams. Now, the Singapore Police Force (SPF) and DBS Bank have issued a joint statement to alert the public to rampant phishing. These scams have claimed 219 victims and caused losses amounting to almost half a million Singapore dollars only in the first two weeks of the year.

Also read: Digital fraud in Singapore: From deepfakes to fake Domino’s Pizza website, island state is seeing a crime wave

Also read: Singapore PM Lee Hsien Loong targeted by deepfake interview promoting crypto-scam, after deepfake of DPM Wong

A joint media statement issued on Sunday, January 14, 2024, said: “Amid the persistence of SMS bank phishing scams, the Police and DBS Bank would like to alert and remind members of the public that banks will never send clickable links via SMS.”

Since December 2023, there has been a surge in cases where scammers would impersonate banks or bank staff to phish victims’ banking credentials via SMSes. In just the first two weeks of January 2024, at least 219 victims have fallen prey, with total losses amounting to at least S$446,000.

Joint statement by Singapore Police Force and DBS Bank

Victims misled into clicking on links

The statement said: “In these cases, victims would be misled into clicking on links in unsolicited SMSes, before losing monies. In the SMSes from the purported scammers (bearing overseas numbers, local numbers, or short codes), they claimed to represent DBS/POSB bank and warn victims of ‘possible unauthorised attempts to access their DBS/POSB bank accounts’ before urging them to click on the embedded URL links to ‘verify their identities and stop the transactions’.

Scam screenshot
Screenshot courtesy: Joint media release by SPF and DBS

“After clicking on the links, the victims were directed to spoofed DBS Bank websites and misled into providing their Internet banking credentials and OTP, which the scammers would use to make unauthorised withdrawals.”

Screenshot courtesy: Joint media release by SPF and DBS

The statement informed the public that no such clickable links had been sent via SMS to bank customers in Singapore in almost two years. Therefore, any such SMS received now should be treated as fraud.

“Since early 2022, all banks have removed clickable links in emails or SMSes to retail customers. This measure is among several other safeguards that banks implemented to combat the spate of phishing scams in 2022, such as lowering the default threshold for funds transfer transaction notifications to customers and increasing the frequency of its scam education alerts,” it said.

“Scammers are constantly evolving their technology and operations. As banks continue explore measures to protect customers, customers must remain vigilant against scammers,” urged the joint statement.

Security measures for the public

The Singapore Police Force and DBS Bank advise members of the public to be on heightened alert and to follow these crime prevention measures:

ADD – ‘ScamShield’ app to protect yourself from scam calls and SMSes.  Set security features (e.g. set up transaction limits for Internet banking transactions; enable Two-Factor Authentication (2FA); Multifactor Authentication for banks and e-wallets).

CHECK – DBS Bank will never send you clickable links via SMS, nor will its employees call you to ask for your Internet banking credentials or OTPs. Be extremely wary of any unsolicited links in SMSes that lead you to a bank’s website. Never disclose your personal or banking credentials, including OTPs, to anyone. Always verify the authenticity of claims of problems with your bank account or cards issued by the bank with the official bank website or sources.

TELL – Authorities, family, and friends about scams. Remember to spread the word to your loved ones that banks do not send clickable links via SMS. Report any fraudulent transactions to DBS Bank immediately.

Hotlines and scam reporting portals

Customers who suspect they are a victim of a scam can call DBS’ dedicated fraud hotline at 1800-339-6963 (from Singapore) or (+65) 63396963 (from overseas) and speak to a DBS Customer Service Officer, or activate the Safety Switch to temporarily block access to their funds.

DBS would assist those customers with necessary follow-up actions, including replacing their cards and lodging the fraud report.

If you have any information relating to such crimes or if you are in doubt, please call the Singapore Police hotline at 1800-255-0000, or submit your report online at www.police.gov.sg/iwitness. All information will be kept strictly confidential. If you require urgent police assistance, please dial ‘999’.

For more information on scams, members of the public can visit www.scamalert.sg or call the Anti-Scam Helpline at 1800-722-6688.

“Fighting scams is a community effort. Together, we can ACT against scams to safeguard our community!” said the joint statement.