Landing page banner

The Police have observed a growing trend of phishing scams impersonating courier companies, where scammers obtain victims’ personal details and banking information. Since 24 June 2026, at least 43 cases have been reported, with total losses amounting to more than $259,000. Notably, there were at least 20 reports lodged in a single day on 13 July 2026. 

In this variant, victims would receive text messages sent from numbers bearing the country code +212 (Morocco) or from email addresses comprising random alphanumeric strings that appear to come from recognised couriers such as NinjaVan and J&T Express, informing them that their parcels could not be delivered due to an “invalid” address. The messages would urge recipients to update their delivery address within 24 hours via a link that closely resembled the courier’s genuine URL. In some instances, the messages also included a local helpline number and directed victims to access the phishing link through various means, such as replying "Y" to receive the link or opening a separate message containing the link.

Upon clicking the link, victims would be redirected to a spoofed website that closely resembled the couriers’ official websites, where they would be prompted to pay a small “re-delivery fee” typically ranging between S$0.06 and S$1.64. Victims would then be asked to enter their card details and authorise the transaction using their digital tokens. In some cases, victims’ credit cards were subsequently added to Google Pay or Apple Pay without their knowledge. Victims would only discover that they had been scammed upon noticing unauthorised transactions made to their cards or bank accounts.

As courier companies are frequently used by members of the public, the Police would like to advise the public to adopt the following precautionary measures:

• ADD – ScamShield App and security features (e.g. enable Two-Factor Authentication (2FA), Multifactor Authentication for banks and set up transaction limits for internet banking transactions, including PayNow).
  
  
• CHECK – For scam signs with official sources. You can check the legitimacy of suspicious messages, phone numbers, and website links via the ScamShield Website at www.scamshield.gov.sg
  
  
• TELL – Authorities, family, and friends about scams. Report any fraudulent transactions to your bank immediately.

Anyone with information on such scams may call the Police Hotline at 1800-255-0000 or submit information online at www.police.gov.sg/i-witness. If you require urgent Police assistance, please dial '999'. For more information on scams, members of the public can visit www.scamshield.gov.sg or call the ScamShield Helpline at 1799. Fighting scams is a community effort. Together, we can ACT Against Scams to safeguard our community.

Annex A – Examples of Phishing Text Messages

Annex B – Phishing Website