The Singapore Police Force (SPF) has arrested two men, both aged 27, for their suspected involvement in a sophisticated series of phishing scams targeting WhatsApp users across the island. The men are believed to be part of a transnational syndicate.
The Phishing Modus Operandi
The scam operates by tricking users into handing over their WhatsApp account details:
The Hook: Victims receive unsolicited SMSes falsely claiming there is an issue with their WhatsApp account due to a prolonged lack of verification.
The Phishing Link: The SMS prompts the victim to verify their account by clicking a phishing link that leads to a fake WhatsApp webpage.
Account Takeover: When victims enter their mobile number and the vital verification code on the fake page, their WhatsApp account is immediately taken over by the scammers.
The Fraud: Once control is gained, the scammers exploit the compromised account to send fraudulent loan requests to the victim’s contacts.
One known victim has already fallen prey to this specific variant, suffering a total loss of about $1,823. Victims typically realize they have been scammed only after being logged out, noticing unknown linked devices, or being contacted by friends about the fraudulent loan requests.
Police Operation and Charges
Between November 18 and 19, 2025, officers from the Police Intelligence Department and the Commercial Affairs Department (CAD) conducted an island-wide operation, leading to the arrest of the two 27-year-old suspects.
Scale of the Scam: Preliminary investigations revealed that the two men were allegedly involved in sending mass SMSes to more than 7,000 random phone users in Singapore to obtain mobile numbers and verification codes.
Seized Items: During the operation, Police seized multiple network-related telecommunication devices, mobile phones, and a Malaysia-registered car.
The two men will be charged in court on November 20, 2025, with the offense of abetment to facilitating unauthorised access to computer material. This charge falls under Section 3(1) read with Section 12 of the Computer Misuse Act 1993. First-time offenders face a fine of up to $5,000, or imprisonment of up to two years, or both.
Public Advisory and Precautionary Measures
The Police warned the public to always reject requests to use their bank accounts or mobile lines to avoid becoming an accomplice to crimes.
The following precautionary measures are strongly advised for WhatsApp users:
| Category | Action |
| ADD Security | Install ScamShield app. Crucially, activate the ‘Two-Step Verification’ feature on WhatsApp (Settings > Account > Two-Step verification > Turn on). |
| CHECK Authenticity | Verify the authenticity of all clickable links and webpage addresses, and check for discrepancies via the ScamShield app. Verify unusual requests by calling the sender via non-WhatsApp calls. Regularly review linked devices (Settings > Linked Devices). |
| TELL Authorities | Report scams to authorities, family, and friends. If scammed, call your bank immediately to block fraudulent transactions and file a police report. Report phishing websites to internet browser service providers. |

Comments
Post a Comment