Beware of phishing and malware scams when buying CNY goodies online: Police

Getting your Chinese New Year shopping done? Stay vigilant against phishing and malware scams during this festive period, advised the police.

The police noted that with the approach of the Lunar New Year, scammers could pose as sellers and advertise festive goods through online platforms such as Facebook or group buys on messaging applications including WhatsApp and Telegram.

"Scammers could phish for sensitive information such as credit card details and banking credentials through phishing links or deceive you into downloading malicious applications under the pretext of facilitating payment," the police warned.

"Scammers use these applications to remotely access your device and perform fraudulent monetary transactions."

Members of the public should not click on any links or download any unknown applications into their devices. Be wary of sellers who ask you to do so and disengage immediately.

You should also adopt the following precautionary measures:

1. ADD – Add the ScamShield app and set security features (e.g. set up transaction limits for internet banking transactions, enable Two-Factor Authentication (2FA), Multifactor Authentication for banks and e-wallets). Do not send money to anyone you do not know or have not met in person before. Do not disclose your bank/card details and One-Time Passwords (OTPs) to anyone.
2. CHECK – Check for scam signs with official sources (e.g. call the Anti-Scam Helpline on 1800-722-6688 or visit www.scamalert.sg), or with someone you trust. . Look out for tell-tale signs of a phishing website. Do not click on dubious URL links provided in social media advertisements or posts. Be cautious of attractive deals that seem too good to be true. If in doubt, always verify the authenticity of information provided with the company or ecommerce platform directly.
3. TELL – Tell the authorities, family, and friends about scams. Report any fraudulent transactions to your bank immediately and report any suspicious advertisements to the company or e-commerce platform.

ADD – Add the ScamShield app and set security features (e.g. set up transaction limits for internet banking transactions, enable Two-Factor Authentication (2FA), Multifactor Authentication for banks and e-wallets). Do not send money to anyone you do not know or have not met in person before. Do not disclose your bank/card details and One-Time Passwords (OTPs) to anyone.

CHECK – Check for scam signs with official sources (e.g. call the Anti-Scam Helpline on 1800-722-6688 or visit www.scamalert.sg), or with someone you trust. . Look out for tell-tale signs of a phishing website. Do not click on dubious URL links provided in social media advertisements or posts. Be cautious of attractive deals that seem too good to be true. If in doubt, always verify the authenticity of information provided with the company or ecommerce platform directly.

TELL – Tell the authorities, family, and friends about scams. Report any fraudulent transactions to your bank immediately and report any suspicious advertisements to the company or e-commerce platform.

If you believe you have fallen prey or suspect that your phone is infected with malware:

1. Turn your phone to flight mode. Check that Wi-Fi is switched off and do not switch it on.
2. Run an anti-virus scan on your phone.
3. Check your bank account/Singpass/CPF etc for any unauthorised transaction(s) using other device(s).
4. If there are unauthorised transaction(s), report to the bank, relevant authorities, and lodge a police report. Continue to keep your phone in flight mode and do not do a factory reset before reporting the incident to the police as this could hinder investigations.
5. After completing the above steps, if you believe that your phone has not been infected with malware, you may resume usage of your phone. As a further precaution, you may consider doing a factory reset of your phone and changing important passwords.

Turn your phone to flight mode. Check that Wi-Fi is switched off and do not switch it on.

Run an anti-virus scan on your phone.

Check your bank account/Singpass/CPF etc for any unauthorised transaction(s) using other device(s).

If there are unauthorised transaction(s), report to the bank, relevant authorities, and lodge a police report. Continue to keep your phone in flight mode and do not do a factory reset before reporting the incident to the police as this could hinder investigations.

After completing the above steps, if you believe that your phone has not been infected with malware, you may resume usage of your phone. As a further precaution, you may consider doing a factory reset of your phone and changing important passwords.

Those with any information relating to such crimes or who are in doubt should call the police hotline at 1800-255-0000, or submit it online at www.police.gov.sg/i-witness. Dial '999' for urgent police assistance. All information will be kept strictly confidential.

For more information on scams, members of the public can visit www.scamalert.sg or call the Anti-Scam Helpline at 1800-722-6688.

Have something to say? Join in!

Show all comments