The Police have observed a resurgence of a phishing scam variant involving fake buyers on Carousell and Facebook. Since June 2023, at least 84 victims have fallen prey to such scams, with reported losses amounting to at least $177,000.
In this variant, scammers would pose as “buyers” and would approach victims via in-app messages on Carousell or Facebook, expressing interest in the items that the victims had listed on the platforms. After agreeing to the sale of the items, the victims would receive a malicious URL link or QR code via email, in-app messaging or over WhatsApp on the pretext of receiving payment for the item or to pay for courier services to facilitate delivery of the item. Upon clicking on the links or scanning the QR codes, victims would be redirected to a spoofed website to provide their internet banking login credentials, credit card details and/or One-Time Password (OTP). Victims would realise that they had been scammed when they discovered unauthorised transactions made from their bank accounts/cards.
The Police would also like to advise members of the public to adopt the following precautionary measures:
- ADD - ScamShield App and set security features (e.g., enable two-factor (2FA) or multifactor authentication for banks and set transaction limits on internet banking transactions, including PayNow/PayLah). Never disclose your personal or internet banking details and OTP to anyone.
- CHECK - For scam signs and with official sources (e.g., visit www.scamalert.sg or call the Anti-Scam Helpline at 1800-722-6688). Do not click on dubious URL links and always verify the authenticity of URL links. If in doubt, always verify the authenticity of the information with the e-commerce platform directly.
- TELL - Authorities, family, and friends about scams. Report any fraudulent transactions to your bank immediately and report any suspicious user and fraudulent transaction from the online marketplace to the e-commerce platform.
If you have any information relating to such crimes or if you are in doubt, please call the Police Hotline at 1800-255-0000, or submit it online at www.police.gov.sg/iwitness. All information will be kept strictly confidential. If you require urgent Police assistance, please dial ‘999’.
For more information on scams, members of the public can visit www.scamalert.sg or call the Anti-Scam Helpline at 1800-722-6688. Fighting scams is a community effort. Together, we can ACT Against Scams to safeguard our community.
An example of a conversation between the victim and scammer ▼
Images 1 and 2: Example of a conversation between the scammer and victim on Carousell
WhatsApp or in-app message with links to phishing websites ▼
Image 3: WhatsApp message with link to the phishing website
Image 4: QR code that leads to the phishing website
Example of a spoofed Carousell website ▼
Image 5: Spoofed Carousell phishing website
SINGAPORE POLICE FORCE
28 June 2023 @ 8:05 PM