The Police would like to remind members of the public to remain vigilant against phishing scams involving the takeover of e-wallet accounts. Since 14 June 2025, there were at least 21 cases reported involving YouTrip accounts, with losses amounting to at least $16,000.
In this scam variant, victims would come across food-related advertisements or social media posts featuring various discounted food items such as durians on social media platforms. Enticed by the attractive promotions, victims would click on URL links in the posts and be redirected to phishing websites. Victims would then be prompted to key in their YouTrip card details and delivery details, including phone numbers, to complete the purchase. Scammers would then use the victims’ phone number to login to their YouTrip account. Victims would receive a One-Time Password (OTP) on their phone and proceed to enter into the phishing website, thinking that the OTP was meant to authorise their purchase of the food items. Subsequently, victims would be prompted to key in their 6-digit YouTrip login PIN. By obtaining the victims’ OTP and 6-digit YouTrip login PIN, the scammers were able to take over the victims’ YouTrip account.
Victims would realise that they had been scammed when they discover a takeover of their YouTrip accounts and unauthorised transactions.
Although the current spate of cases involves food-related promotions on social media platforms, scammers may evolve their tactics and narratives to lure potential victims. The public is also advised not to enter their e-wallet login PIN on any platform or website, unless it is into the e-wallet provider’s official mobile application or online platform. If an unauthorised transaction is detected, contact your financial institution immediately.
Members of the public are also advised to adopt the following precautionary measures to avoid falling for scams:
- ADD – Add the ScamShield app to block calls and filter SMSes. Set transaction limits for Internet banking transactions and enable Two-Factor Authentication (2FA) or Multifactor Authentication for banks and e-wallets. Do not disclose your personal information, bank/card details and One-Time Passwords (OTPs) to anyone.
- CHECK – Check for scam signs with official sources such as the ScamShield App. Call and check with the 24/7 ScamShield Helpline at 1799. Look out for tell-tale signs of a phishing website. Do not click on dubious URL links provided in social media advertisements. Be cautious of attractive deals that seem too good to be true. Always check that you are entering your e-wallet login PIN into the e-wallet provider’s official mobile application or online platform.
- TELL – Tell the authorities, family and friends about scams. Report any fraudulent transactions to your financial institution immediately and report any suspicious advertisements to the company or platform.
For more information on scams, members of the public can visit www.scamshield.gov.sg. Fighting scams is a community effort. Together, we can ACT Against Scams to safeguard our community!
SINGAPORE POLICE FORCE
15 August 2025 @ 9:50 PM