Landing page banner

The Singapore Police Force (SPF), had worked closely with Pakistan's National Cybercrime Investigation Agency (NCCIA) and INTERPOL to disrupt a foreign cybercrime syndicate known as “Tycoon2FA”, suspected to be involved in providing phishing software and infrastructure to cybercrime groups that targeted Singapore. As a result of the successful collaboration, two Pakistani nationals were arrested in Pakistan on 25 June 2026 and 1 July 2026. 

Tycoon2FA was a phishing-as-a-service platform that provided ready-made phishing infrastructure to subscribers who were paying a monthly fee. This enabled cybercriminals to create phishing pages and platforms, which were used to deceive victims and gain unauthorised access to their accounts. Globally, the platform has been linked to more than 96,000 phishing victims. There were at least three cases reported in Singapore between November 2025 and January 2026, where business email accounts were compromised despite the use of multi-factor authentication. 

Following an operation supported by EUROPOL that disrupted the infrastructure of the Tycoon2FA phishing-as-a-service platform in March 2026, officers from the SPF's Cyber Command worked closely with counterparts from Pakistan's NCCIA and INTERPOL to share intelligence and investigative findings relating to the platform's infrastructure. The collaboration, which stemmed from cases reported to the SPF and the Cyber Command's collaboration with international partners, led to the identification of the two Pakistani nationals believed to be the developers of Tycoon2FA. Acting on the intelligence provided, the NCCIA arrested both suspects for offences under Pakistan's Prevention of Electronic Crimes Act 2016. During the operation, one laptop, two central processing units (CPUs), and six mobile devices were seized. Investigations by the NCCIA are ongoing.

Commander of the SPF's Cyber Command, Senior Assistant Commissioner of Police (SAC) Justin Wong, said, “The SPF will work with our law enforcement partners to identify, track down, and apprehend cybercriminals who target Singapore wherever they are in the world. We thank the NCCIA, EUROPOL and INTERPOL for their invaluable partnership in dismantling this criminal network and making our cyberspace safer for all."

INTERPOL's Cybercrime Director Neal Jetton said: "Cybercriminals exploit borders to conceal their identities and evade justice, but international police cooperation ensures they have fewer places to hide. This operation demonstrates how timely intelligence exchange, trusted partnerships and coordinated operational action can connect investigators across jurisdictions to identify and apprehend those responsible for transnational phishing attacks. As investigations continue, INTERPOL will remain committed to facilitating the secure exchange of information and intelligence, coordinating operational efforts, and providing specialized technical support to our member countries to disrupt cybercriminal networks and bring offenders to justice."

Pakistan’s NCCIA Director General Syed Khurram Ali said: “This case demonstrated the critical role of international cooperation in combating transaction cybercrime. The disruption of platforms such as Tycoon2FA is essential in protecting victims across jurisdiction.”