The Police would like to alert members of the public to phishing scams involving fake buyers on online marketplace platforms. Since 1 January 2025, at least 189 victims have fallen prey, with total losses amounting to at least $303,000.
In this variant, scammers would pose as interested “buyers” on Carousell, Facebook Marketplace or other platforms. After agreeing on the selling price of the listed items via in-app chat functions or separate messaging platforms (e.g. WhatsApp), victims would receive an email on the order confirmation purportedly from the online market platforms. The email would prompt victims to click on an embedded link to receive payment. Instead, victims would be redirected to a spoofed bank website and be deceived into keying their personal information such as banking credentials, card details, One-Time Passwords (OTPs).
In other cases, scammers would offer to receive items by arranging for a courier service. Victims would receive a QR code or a phishing link purportedly from delivery companies such as Grab, Lalamove to facilitate delivery. Upon scanning the QR code or clicking on the phishing link, victims would be redirected to spoofed delivery company website or bank website where they would key in their personal information to complete the transaction. Victims would subsequently realise that they have been scammed when they discovered unauthorised transactions made to their bank accounts or bank cards.
The Police would like to advise members of the public to adopt the following precautionary measures:
- ADD – Add the ScamShield App to protect yourself from scam calls and SMSes. Set security features (e.g. set up transaction limits for internet banking transactions, enable Two-Factor Authentication (2FA), Multifactor Authentication for banks). Do not disclose your bank/card details and One-Time Passwords (OTPs) to anyone.
- CHECK – Check for scam signs with official sources. You can check the legitimacy of suspicious messages, phone numbers and website links via the ScamShield app or visit the ScamShield website at www.scamshield.gov.sg. Do not scan or click on dubious QR codes or URL links provided. If in doubt, always verify the authenticity of information provided with the online marketplace platforms or delivery companies directly.
- TELL – Tell the authorities, family, and friends about scams. Report any fraudulent transactions to your bank immediately and report any suspicious users to the online marketplace platform.
If you are in doubt, call the 24/7 ScamShield Helpline at 1799 to check. For more information on scams, members of the public can visit www.scamshield.gov.sg. Fighting scams is a community effort. Together, we can ACT Against Scams to safeguard our community!
Annex A
Conversations between Scammers and Victims
In-App Chat (Carousell)
Off-Platform (Whatsapp)
Phishing Emails and Links sent to Victims
Spoofed Bank Website and Payment Interface
Spoofed Bank Website and Payment Interface
SINGAPORE POLICE FORCE
12 February 2025 @ 4:50 PM