Singapore MAS, Police & Cybersecurity Agency Issue Reminder When Providing Credit Card Credentials for Online Transactions with Scammers Obtaining Credit Card Details via e-Commerce Phishing Websites & Social Media Advertisements, S$1.2 Million Losses from at Least 656 Cases in 2024 Q4 with 502 Cases Linked to Apple Pay
18th February 2025 | Hong Kong
The Monetary Authority of Singapore (MAS), Singapore Police Force & Cyber Security Agency of Singapore have jointly issued a public reminder when providing credit card credentials for online transactions with scammers obtaining credit card details via e-commerce phishing websites & social media advertisements. In 2024 Q4, S$1.2 million losses was reported from at least 656 cases, with 502 cases linked to Apple Pay. Singapore MAS (17/2/25): “The Singapore Police Force (SPF), Cyber Security Agency of Singapore (CSA), and Monetary Authority of Singapore (MAS) would like to remind the public to be vigilant when providing credit card credentials to complete online transactions. On 22 November 2024, SPF published a news release [1] on scammers abusing phished card credentials. This modus operandi starts with the scammer (suspected to be based overseas) obtaining the victim’s card credentials through e-commerce related phishing websites, including social media advertisements. The scammer then adds the card details onto the Apple wallet of his own device. An SMS One-Time Password (OTP) would be sent to the victim, who is then tricked to enter the OTP into the phishing website operated by the scammer, thereby giving the scammer access to their card. After successfully taking over the victim’s card, the scam syndicate will conspire with a money mule to make unauthorised transactions by connecting the mule’s mobile device to the scammer’s Apple wallet. The money mule would then be able to make in-person purchases using the contactless payment method (also known as Near Field Communication (NFC) mobile payments) to buy goods in-store, for example, high value electronic items or luxury goods. From 1 Oct to 31 Dec 2024, at least 656 reports where phished card credentials were provisioned to mobile wallets were lodged, with losses amounting to at least $1.2 million. Of these cases, at least 502 reports involved cards linked to Apple Pay. The SPF, CSA, and MAS have been working with the banks, mobile wallet providers such as Apple, and card service providers to impose measures to arrest this trend. We urge the stakeholders to cooperate with us, and impose measures to protect their customers. Members of the public are reminded not to share banking and card credentials with anyone, i.e. passwords or OTPs, and to check the veracity of e-commerce websites and links on which they are transacting. They should also take the following precautionary measures: 1) ADD – Add the ScamShield app to their mobile device and activate security features such as digital tokens for banking apps. Lower card transaction notification thresholds to a level adequate for daily spending for closer monitoring of spending on your bank cards, and disable the card for overseas use if you are not travelling overseas. 2) CHECK – Check your SMS OTP and notifications to ensure that your credit cards are not being provisioned to a mobile wallet without your permission. Call your card issuing bank immediately if this has happened. Be wary of online vendors and avoid clicking on unsolicited hyperlinks and QR codes to make payments as they may be phishing for your confidential details. Check for signs of phishing (e.g., suspicious website links, messages and phone numbers) with official sources (e.g. call the ScamShield helpline (1799) or visit www.scamshield.gov.sg), or someone you trust. 3) TELL – Tell the authorities, family, and friends if or when you encounter scams. Report and block any suspected scam accounts and chat groups. If you suspect that you have fallen victim to a scam, call your bank or card issuer immediately to report and block any fraudulent transactions as well as make a police report … …. If you have any information relating to such crimes or are in doubt, please call the Police Hotline at 1800-255-0000, or submit it online at www.police.gov.sg/i-witness. All information will be kept strictly confidential. If you require urgent Police assistance, please dial ‘999’. For more information on scams, members of the public can visit www.scamshield.gov.sg or call the ScamShield Helpline at 1799.”
“ Singapore MAS, Police & Cybersecurity Agency Issue Reminder When Providing Credit Card Credentials for Online Transactions with Scammers Obtaining Credit Card Details via e-Commerce Phishing Websites & Social Media Advertisements, S$1.2 Million Losses from at Least 656 Cases in 2024 Q4 with 502 Cases Linked to Apple Pay “
Singapore MAS, Police & Cybersecurity Agency Issue Reminder When Providing Credit Card Credentials for Online Transactions with Scammers Obtaining Credit Card Details via e-Commerce Phishing Websites & Social Media Advertisements, S$1.2 Million Losses from at Least 656 Cases in 2024 Q4 with 502 Cases Linked to Apple Pay
Sign Up / Register
Caproasia Users
- Manage $20 million to $3 billion of assets
- Invest $3 million to $300 million
- Advise institutions, billionaires, UHNWs & HNWs
Caproasia Platforms | 11,000 Investors & Advisors
- Caproasia.com
- Caproasia Access
- Caproasia Events
- The Financial Centre | Find Services
- Membership
- Family Office Circle
- Professional Investor Circle
- Investor Relations Network
Monthly Roundtable & Networking
Family Office Programs
The 2025 Investment Day
- March - Hong Kong
- March - Singapore
- July - Hong Kong
- July - Singapore
- Sept- Hong Kong
- Sept - Singapore
- Oct- Hong Kong
- Nov - Singapore
- Visit: The Investment Day | Register: Click here
Caproasia Summits
- The Institutional Investor Summit
- The Investment / Alternatives Summit
- The Private Wealth Summit
- The Family Office Summit
- The CEO & Entrepreneur Summit
- The Capital Markets Summit
- The ESG / Sustainable Investment Summit
