Landing page banner

The Police would like to alert members of the public about phishing scams involving SMSes impersonating the Land Transport Authority (LTA), sent to Singaporean travellers to Malaysia. Since 27 January 2026, at least 10 cases have been reported, with total losses amounting to at least $24,000.

In this scam variant, victims receive an SMS allegedly from LTA regarding unpaid vehicle tolls after their mobile phones connect to Malaysia’s telecommunications network for roaming. The SMS is sent via LTA’s former official sender ID named ‘LTA’, which was decommissioned on 1 July 2024 and is no longer in use. Victims are asked to click on a link to pay the unpaid tolls. The link redirects the victims to a phishing website, where they are prompted to provide their bank card details. Victims only realise that they have been scammed when unauthorised transactions are made to unknown merchants from their cards. 

The Police would like to advise members of the public to ignore dubious clickable links sent through SMSes claiming to be from LTA. Messages sent from LTA do not contain payment links. All official government messages are sent from a single ‘gov.sg’ sender ID. Messages received from decommissioned sender IDs of any government agencies such as ‘LTA’ are fake. Members of the public are advised to block all decommissioned sender IDs to prevent receiving such messages. To do so:

For iOS users: Open the ‘Messages’ app > search for the agency e.g., ‘LTA’ > tap the ‘LTA’ contact icon > tap 'info' > select ‘Block this Caller’.
For Android users: Open the ‘Messages’ app > search for the agency e.g., ‘LTA’ > tap the conversation > tap the ‘three-dot menu’ > select ‘Block contact’. 

Details on outstanding payments can be found via the ‘One Motoring’ website. For more information, members of the public may visit https://onemotoring.lta.gov.sg/ > Digital Services > Enquire Fines and Notices (Require Login).

The Police would like to remind members of the public not to disclose sensitive information such as banking, credit/debit card credentials, and OTPs to anyone. Members of the public may also adopt the following precautionary measures:

1. ADD – Add the ScamShield App to protect yourself from scam calls and SMSes. Set security features (e.g. set up transaction limits for internet banking transactions, enable Two-Factor Authentication (2FA), Multifactor Authentication for banks). 
   
   
2. CHECK – Check for scam signs with official sources. You can check the legitimacy of suspicious messages, phone numbers and website links via the ScamShield app or visit the ScamShield website at www.scamshield.gov.sg. 
   
   
3. TELL – Tell the authorities, family, and friends about scams. Report any fraudulent transactions to your bank immediately.

If you are in doubt, call the 24/7 ScamShield Helpline at 1799 to check. Fighting scams is a community effort. Together, we can ACT Against Scams to safeguard our community!

Annex A

Phishing Links/URLs:

Screenshots of Phishing SMS