Past Scam Alerts

Maybank Phishing E-mail

14 October 2023

Beware of phishing e-mails purportedly sent by Maybank, informing victims that their space is temporarily suspended. The e-mail consists of a URL link, as well as instructions to rectify the matter. DO NOT respond to such emails as these are NOT valid emails sent by Maybank.

Sample of Phishing E-mail Notification

How to protect yourself from scams

• Be wary of fake e-mails sent using fictitious e-mail address and contents with grammatical errors.
• Do not click on the URL links sent via unsolicited e-mails and SMSes. Maybank does not send e-mails and SMSes with clickable URL links.
• Always verify the authenticity of the message directly with the official websites or sources.
• Never disclose your Singpass ID, banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to others.
• Please change your password immediately and lodge a police report as soon as you suspect that you have fallen victim to a scam.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 or Option 4 to suspend your Maybank2u digital banking access and to report any unauthorised transactions made to your account(s) and/or card(s).

Advisory on Mid-Autumn Festival Malware Scam

6 September 2023

Beware of new scams involving mooncake sales on social media platforms. Upon contacting the “sellers” through social messaging platforms to place orders for mooncakes advertised on Facebook and Instagram, the victims were directed through WhatsApp to make payment. The sellers would provide links that can lead to the download of malicious Android Package Kit (APK) files. In some cases, victims were instructed to make PayNow or bank transfers to buy the mooncakes.

The scammers would then inform victims that their orders had to be cancelled due to production or manpower issues, and direct them to the malicious links for “refunds”. After the APK file was downloaded and installed, the scammers would gain remote access to the victims’ devices, letting them steal passwords and retrieve banking credentials. The victims later discovered unauthorised transactions from their banking accounts.

How can you protect yourself against malware?

• Never download apps outside the official app stores.
• If you suspect that your device has been infected with malware, immediately turn on “flight mode”. Check to ensure WIFI and mobile data connection are disabled.
• Review the security permissions required by the application and/or its privacy policy before installation.
• Ensure that your mobile devices are installed with updated anti-virus and anti-malware applications that can detect and remove malware.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Source: https://www.straitstimes.com/singapore/online-mooncake-scam-27-people-lose-325000-in-a-month

Maybank Phishing E-mail

22 August 2023

Beware of phishing emails purportedly sent by Maybank, informing victims that an update is required or that their account has been suspended. The e-mail consists of a URL link, as well as instructions to rectify the matter. DO NOT respond to such emails as these are NOT valid emails sent by Maybank.

Samples of Phishing Email Notifications

 

How can you protect yourself from scams?

• Be wary of fake emails sent using fictitious email address and contents with grammatical errors.
• Do not click on the URL links sent via unsolicited emails and SMSes. Maybank does not send emails and SMSes with clickable URL links.
• Always verify the authenticity of the message directly with the official websites or sources.
• Never disclose your Singpass ID, banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to others.
• Please change your password immediately and lodge a police report as soon as you suspect that you have fallen victim to a scam.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 or Option 4 to suspend your Maybank2u digital banking access and to report any unauthorised transactions made to your account(s) and/or card(s).

Advisory on Fake Fixed Deposit Scam

4 August 2023

Beware of phishing SMSes targeting victims with fake Maybank fixed deposit promotion offering high interest rates. Upon contacting the scammer, the victims will be tricked to transfer money into the scammer’s bank account(s) or to provide sensitive banking and personal information. Once the scammers obtain this information, they will be able to access the victims’ bank accounts and consequently perform unauthorised transactions without the victims’ knowledge.

Sample of Fake SMS

 

How can you protect yourself from scams?

• Be wary of unsolicited advertisements and text messages, especially those related to deals that seem too good to be true.
• Be wary of fake SMSes with spoofed headers and check for grammatical errors in the message.
• Always verify the authenticity of the information with the official website or sources.
• Never disclose your personal details such as SingPass, online banking credentials, credit card details and One-Time Password (OTP) to anyone.   
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Advisory on Protecting Yourself From Malicious QR Codes

11 July 2023

Beware of the dangers and potential threats of malicious Quick Response (QR) codes as they could trick unsuspecting individuals into scanning these codes and exposing themselves to various threats. Some of the common types of attacks involving QR codes are as follows:

a) Phishing- Malicious QR codes are used to redirect unsuspecting individuals to phishing websites masquerading as legitimate ones to steal sensitive information such as login credentials, credit card numbers or other personal data.

b) QR Code Swaps- Legitimate QR codes displayed as businesses are altered or tampered with in order to trick individuals into redirecting payments to a scammer's account.

c) Malware Infection- Scammers may use QR codes to trick you into downloading malware from an app store or website. They seek permission to download other apps, read your SMSes or look through your phone. Saying 'yes' to a permission request will give scammers the opportunity to control your device, spy on your chats, steal your sensitive information and steal your money through funds transfers or credit card charges.

How can you protect yourself from Malicious QR Codes?

• Avoid scanning QR codes received via unsolicited text, WhatsApp messages, E-mails or social media messaging platforms.
• Look out for signs that the QR codes at public places have been tampered with. Only download files or applications from official and verified sources.
• Verify the recipients of the digital payments through QR codes before confirming payment.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Advisory on E-Commerce Scams leading to Unauthorised CPF Withdrawal

17 June 2023

Beware of scammers pretending to be "sellers" who would entice victims by posting fake offers of food items or merchandise on social media platforms. Victims would then contact the sellers via the messenger application or embedded URL links in the advertisement. The scammers would send a URL to download an Android Package Kit (APK) file, an application created for Android's operating system, to confirm the order and make payment. Victims would be directed to fake bank sites to key in their login credentials to make payment within the app.

These APK files containing phishing malware would allow the scammers to access the victims' device remotely and steal passwords, as the malware would capture the credentials entered by the victim. These include the Singpass passcode, among other things, which have been stored in the victims' device.

The scammers would then be able to access the victims' CPF account remotely using the stolen Singpass passcode and request to withdraw funds through PayNow. Once the CPF funds are deposited into the victims' bank account, the scammers would access the victims’ bank application and transfer the money out via PayNow.

The victims would only realise that they have been scammed when they fail to receive the orders and the seller becomes uncontactable, or unauthorised transactions have been found in their bank accounts or cards.

How can you protect yourself from scams?

• If the price or deal is too good to be true, it is likely to be a scam. Purchase only from authorised sellers or reputable sources.
• Avoid clicking on pop-up ads, suspicious links or opening files or e-mail attachments from unknown senders. Only download and install applications from the official app stores (i.e., Google Play Store for Android and Apple App Store for IOS). As an added precaution, check the developer information on the application listing and confirm it is the official developer before proceeding with the download.
• Review the security permissions required by the application and/or its privacy policy before installation.
• Refrain from making upfront payments to bank accounts or mobile numbers via PayNow belonging to unknown individuals. Instead, keep yourself safe by using the in-platform secure payment systems or opting for cash-on-delivery.
• Never disclose your Singpass ID banking or card credentials such as username, password, OTP or Card CVV numbers to anyone.
• If you suspect that your Singpass has been compromised, please contact Singpass Helpdesk at 6335 3533 (press ‘9’ for 24-hr scam support) and lodge a police report immediately.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Advisory on Misuse of Singpass Credentials to Create Bank Accounts

23 May 2023

Beware of scammers impersonating bank staff or marketing companies acting on behalf of banks to reach out to victims to complete surveys on banking services. Victims would be promised payments for completing the surveys and approached via messaging aps such as WhatsApp. Upon completing the surveys, the scammers would request the victims to scan a Singpass QR code sent via WhatsApp, claiming it to be part of the bank’s verification process to retrieve their survey results and enable payment for the completed surveys.

By scanning this Singpass QR code and authenticating it on their Singpass app, victims are tricked into unintentionally authorising the use of Myinfo data to open bank accounts under the control of the scammers. These bank accounts are subsequently abused by scammers to commit crimes or launder the proceeds of crime. Victims would only realise that something was amiss when notified of these transactions by their bank, or when they receive notifications in their Singpass app inbox that their personal details had been retrieved.

How can you protect yourself from scams?

• Do not scan any Singpass QR code sent to you by someone else, whether on brochures, social media apps or digital advertisements. Singpass will never send QR codes and web links though SMS and messaging apps like WhatsAapp.
• Adopt the following precautionary measures :
  • Add – Install security features on your devices such as the ScamShield App.
  • Check – Keep an eye out for scam signs and verify information with official sources.
  • Tell – Inform the relevant authorities, friends and family of any scam incidents immediately.
• Never disclose your Singpass ID banking or card credentials such as username, password, OTP or Card CVV numbers to anyone.
• If you suspect that your Singpass has been compromised, please contact Singpass Helpdesk at 6335 3533 (press ‘9’ for 24-hr scam support) and lodge a police report immediately. 
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Advisory on Phishing Scams involving Fake ScamShield App

22 May 2023

Beware of a new phishing scam variant involving the download of a fake ScamShield App. This scam involves the sale of food items or merchandise via social media platforms. Scammers would send a URL to the victims in order to make a purchase and to make payment. As a result, unauthorised transactions would be made from the victims' bank accounts or debit / credit cards.

Shortly after making these unauthorised transactions, the scammers would contact the victim and introduce themselves as bank staff who are following up on the fraudulent transactions. The scammers would then recommend that the victims download the ScamShield App using a URL link, fraudulently bearing the ScamShield logo, on the pretext of getting the victim to protect himself against scams. The victims would be unaware that they have downloaded a fake version of the ScamShield which would eventually lead to malware being installed on victims' device. The malware, depending on its functionalities are able to phish for the victim's credentials, and/or secretly collect the victim’s data and delete SMSes or bank notifications and/or take control of the victim’s phone.

How can you protect yourself from scams?

• If the price or deal is too good to be true, it is likely to be a scam. Purchase only from authorised sellers or reputable sources.
• Do not download any files or Scamshield app from third-party or dubious sites to your device. Only download and install applications from the official app stores (i.e., Google Play Store for Android and Apple App Store for IOS).
• Do not click on suspicious URL links in the pop-up advertisements.
• Never disclose your Singpass ID banking or card credentials such as username, password, OTP or Card CVV numbers to anyone.
• To find out more on downloading the ScamShield App on your device, please refer to the official guide for iOS and Android (https://www.scamshield.gov.sg/about-scamshield/scamshield-app/set-up-scamshield-app/).
• If you suspect that you have fallen prey to malware phishing scams, please contact your bank(s) to suspend all accounts and cards, do a factory reset of your phone and make a police report immediately.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

E-Commerce Scams

4 May 2023

E-Commerce scams are on the rise. Beware of scammers pretending to be “sellers” who would entice victims by posting fake offers of food items or merchandise on social media platforms. Victims would then contact the sellers via the messenger application or embedded URL links in the advertisement. After confirming the price and order details, victims would make the payment to the seller’s bank account or mobile number via PayNow. In some cases, victims would be redirected to fraudulent phishing websites where they would key in their debit or credit card details and OTP to make payment. The victims only realised that they have been scammed when they failed to receive the orders and the seller becomes uncontactable, or unauthorised transactions have been found in their bank accounts or cards.

How can you protect yourself from scams?

• If the price or deal is too good to be true, it is likely to be a scam. Purchase only from authorised sellers or reputable sources.
• Be wary of purported time-sensitive deals due to limited stocks being available.
• Refrain from making upfront payments to bank accounts or mobile numbers via PayNow belonging to unknown individuals. Instead, keep yourself safe by using the in-platform secure payment systems or opting for cash-on-delivery.
• Verify the seller’s profile through legitimate customer reviews and ratings.
• Do not click on suspicious URL links in the pop-up advertisements.
• Never disclose your banking or card credentials such as username, password, OTP or Card CVV numbers to anyone.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Advisory On Malware

10 April 2023

Beware of the dangers of downloading files from unknown sources that can lead to malware installation on victims’ mobile devices, which may in turn, result in confidential and sensitive date, such as banking credentials, being stolen. Please be wary if you are asked to download unknown or suspicious Android Package Kit (APK) files as this  may eventually lead to exfiltration of confidential and sensitive data stored in infected mobile devices such as banking credentials, stored credit card numbers and social media account credentials.

Attackers can use such information to gain unauthorised access to the victims’ social media accounts to perpetrate impersonation scams or perform fraudulent transactions resulting in monetary losses.  

How can you protect yourself against malware?

• Avoid clicking on pop-up ads, suspicious links or opening files or e-mail attachments from unknown senders. Only download and install applications from the official app stores (i.e., Google Play Store for Android and Apple App Store for IOS). As an added precaution, check the developer information on the application listing and confirm it is the official developer before proceeding with the download.
• Review the security permissions required by the application and/or its privacy policy before installation.
• Ensure that your mobile devices are installed with updated anti-virus and anti-malware applications that can detect and remove malware.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Cleaning Service Scams on Social Media Platforms

12 January 2023

Beware of fake advertisements on home cleaning services posted by scammers on social media platforms especially during this lunar new year season. Upon clicking the link and providing the mobile number, the victim would receive a whatsapp message with the instructions to download an app in order to book the service. The victim would be led to enter the debit or credit card details and OTP to make payment. The victim would only realise that he/she has been scammed after being notified of the unauthorised transactions charged to the credit/debit cards.

Sample of the fake advertisement

 

How can you protect yourself from scams?

• Before clicking on any social media ad, click on the company name to view their business page.  Make sure that the page was not set up just a few days ago and look at the number of followers that they have.  A legitimate company that has been operating for a few years will likely have many posts and would have made effort to grow their follower base. 
• Check if the cleaning company has a website with different ways to contact them such as email, phone or WhatsApp. They should also have customer reviews if they are listed on Google Maps.
• If the offer is too good to be true, it probably is, even if it is a ‘first-time special’ for new customers.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Advertisement Scams on Social Media Platforms

28 December 2022

Beware of fake advertisements circulated by scammers on social media platforms offering attractive discounts and express delivery service by food and beverage outlets. The discounts are meant to entice victims into placing orders and phish for their debit or credit card details and one-time passwords (OTP). The victims would be led to a website to place their food orders and input their contact and delivery details. After which, the victims would have to enter their debit or credit card details and OTP to make payment. The victims would only realise that they have been scammed after being notified of unauthorised transactions charged to their credit/debit cards.

How can you protect yourself from scams?

• Verify with the official sources to confirm if the food and beverage outlet exists and if they are having any promotions.
• Visit the outlet for a take-away or make use of legitimate food-delivery platforms.
• Never disclose your banking or card credentials such as username, password, OTP or Card CVV numbers to anyone.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Recruitment Scams

19 December 2022

You may have received unsolicited messages via SMSes or messaging applications from ‘recruiters’ who claimed to have received your resume and would like to offer you a job position. Please exercise caution when you receive such messages. The scammers may ask you to pay an advance administration fee during the application process or ask you for your bank account or internet banking details to set up salary payments. Subsequently, the scammers will use these details to steal money from your account.

Sample of Unsolicited Recruitment Messages

 

How can you protect yourself from scams?

• Check the official sources to confirm that the organisation offering you the job exists. If it does, contact the organisation directly through officially listed contact details to confirm that the job offer is genuine.
• Be aware of your recent online activities. If you have not submitted any resumes to any job portal recently, then you should not be expecting any calls / SMSes from any job recruitment companies.
• Be vigilant when you receive unsolicited calls or messages. Responding to such calls or messages may be used by scammers for social engineering to trick the victims into divulging confidential account and internet banking information.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

LTA and OneMotoring Phishing SMSes

13 December 2022

Beware of SMS phishing scams where scammers would send SMSes purportedly from LTA or OneMotoring notifying them of unpaid/overdue bills or fines. The SMS contains a URL link to make payment. Upon clicking the link, the victims would be directed to fraudulent websites where they would be requested to enter their credit or debit card details and one-time passwords (OTPs). The victims would only realise that they have been scammed after being notified of the unauthorised provisioning of Apple Pay or Samung Pay on their credit/debit cards or when there are unauthorised transactions charged to their credit/debit cards. LTA does not ask for payment via URL links in its SMS alerts on offence notices.

Sample of Fake SMS

 

How to protect yourself from scams?

• Always verify the authenticity of the information with official website or sources.
• Do not click on URL links provided in unsolicited messages and emails.
• Do not disclose your personal information or OTPs to anyone.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Maybank Staff Impersonation Scam

8 December 2022

We are receiving a surge in reports of ongoing scams calls to customers impersonating Maybank staff. Customers have received calls from 8429xxxx, 8114xxxx and 8144xxxx (These are not valid Maybank hotline numbers). Customers are either informed that there is an existing bank facility under their names or that they have an outstanding personal loan due for payment, and for them to follow specific instructions by the scammers in order to rectify the issues.

 

How can you protect yourself from scams?

• Beware of incoming calls with the ‘+65’ prefix. Do not pick up such calls if you are not expecting anyone calling from overseas.
• Always verify the authenticity of the information with the official websites or sources.
• Never disclose your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to anyone.
• Never reply to unsolicited calls. Responding to such calls may be used by scammers for social engineering or trick the victims into divulging confidential account and internet banking information.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Fake Maybank Receipt

8 December 2022

We received reports of fake Maybank receipts being circulated by scammers who impersonate buyers and deceive the victims that the payments have been made to the victims for the items that the scammer had purchased.

Sample of Fake Receipt

 

How can you protect yourself from scams?

• Deal with authorised buyers from reputable sources, especially for high-value items.
• Scammers may use a fake bank account receipt and provide a copy of a NRIC/driver’s licence to deceive the seller that they are genuine buyers. Check that you have received the funds in your bank account before releasing the item(s) to the buyer or suggest to transact in person instead.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 or Option 4 to suspend your Maybank2u digital banking access and to report any unauthorised transactions made to your account(s) and/or card(s).

Beware of scammers on Telegram

2 December 2022

Telegram, an instant messaging (IM) application, recently announced that users are allowed to buy and sell recognisable usernames. This poses a risk as this may result in scammers acquiring usernames to impersonate organisations. Please be informed that Maybank Singapore does not communicate with customers via Telegram. Be vigilant of scammers impersonating Maybank Singapore on Telegram.

 

How can you protect yourself from scams?

• Be wary when receiving messages from unknown contacts via instant messaging (IM) services impersonating Maybank Singapore. Maybank Singapore does not communicate with customers via Telegram.
• Do not click on URL links sent by unknown contacts.
• Always verify the authenticity of the message directly with the bank.
• Ignore the instructions given if you receive unsolicited calls via phone or instant messaging applications. Banks will not request for personal information, banking credentials or OTPs through phone calls or messaging applications
• Never disclose your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to others.
• Please change your password immediately and lodge a police report as soon as you suspect that you have fallen victim to a scam.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 or Option 4 to suspend your Maybank2u digital banking access and to report any unauthorised transactions made to your account(s) and/or card(s).

Surge of Phishing Scams Involving Fake Buyers on Carousell

1 December 2022

The Police would like to warn the public of a surge of phishing scams on Carousell. For this phishing scam variant, scammers would pose as buyers on Carousell and victims would be asked to key in their banking details in spoofed websites to facilitate payment or delivery. After agreeing to the price of the item, the scammer would request the victims to click on a link to facilitate the payment and courier arrangements. Upon clicking on the phishing URL link, victims would be directed to fraudulent websites and tricked into providing their banking or credit card credentials and One-Time Passwords (OTP) to complete the transaction. Victims would only realise that they have been scammed when they discovered unauthorised transactions made to their bank accounts or credit cards.

 

How to protect yourself from being a victim of scams?

• Always verify the buyer’s profile on online marketplaces by checking the account’s verification status, creation date, review and ratings.
• If in doubt, always verify the authenticity of the information with the e-commerce platform directly.
• Do not click on dubious URL links.
• Never disclose your Singpass ID, banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers with others.
• Please change your password immediately and lodge a police report as soon as you suspect that you have fallen victim to a scam.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 or Option 4 to suspend your Maybank2u digital banking access and to report any unauthorised transactions made to your account(s) and/or card(s).

Maybank Email Phishing Scam

22 November 2022

We received reports where victims would receive emails purportedly from Maybank Singapore to verify a transaction that was deducted from their bank account(s). DO NOT respond to such emails as this is NOT a valid email sent by Maybank.

 

How can you protect yourself from scams?

• Be wary of fake emails sent using fictitious email address and contents with grammatical errors.
• Do not click on the URL links sent via unsolicited emails and SMSes.  Maybank does not send emails and SMSes with clickable URL links.
• Always verify the authenticity of the message directly with the official websites or sources.
• Never disclose your Singpass ID, banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to others.
• Please change your password immediately and lodge a police report as soon as you suspect that you have fallen victim to a scam.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 or Option 4 to suspend your Maybank2u digital banking access and to report any unauthorised transactions made to your account(s) and/or card(s).

Phishing SMS and Bank Impersonation Scam

11 November 2022

Beware of SMSes indicating issues with your bank accounts and calls from scammers claiming to be from the bank. DO NOT click on the links in these SMSes as they will eventually lead you to fake websites of the bank. DO NOT agree to speak to the operator to ‘resolve an issue’ as you may be redirected to a scammer POSING as a Police Officer who would ask you to transfer money to them in order to resolve the issue or ‘crime’ you are supposedly involved in.

 

How can you protect yourself from scams?

• Do not click on URL links sent via unsolicited emails and SMSes.
• Always verify the authenticity of the message directly with the banks.
• Ignore the instructions given if you receive unsolicited calls via phone or messaging applications. Banks will not request for personal information, banking credentials or OTPs through phone calls or messaging applications
• Never disclose your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to others.
• Please change your password immediately and lodge a police report as soon as you suspect that you have fallen victim to a scam.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 or Option 4 to suspend your Maybank2u digital banking access and to report any unauthorised transactions made to your account(s) and/or card(s).

Impersonation Scam - SMS Phishing Scam

11 October 2022

We received reports where scammers would send SMSes purportedly from Maybank to deceive the victims into calling the telephone number in order to reactivate their credit and/or debit card. This is NOT a valid SMS sent by Maybank.

Sample of Fake SMS Alert

 

How can you protect yourself from scams?

• Be wary of fake SMSes with spoofed headers and contents with grammatical errors.
• Ignore the instructions given if you receive unsolicited calls via phone or messaging applications. Maybank will not request for personal information, banking credentials or OTPs through phone calls or messaging applications.
• Never disclose your Singpass ID, banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers with others.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Singpass SMS Phishing Scam

1 October 2022

Beware of SMS phishing scams where scammers would send an SMS purportedly from Singpass to deceive the victims into clicking on a phishing link leading to a fake Singpass website. The contents of the SMSes may include ‘Changing of Password’, ‘Completion of face verification’or ‘Singass account disabled due to incomplete facial verification’. Upon clicking on the link in the SMS, the victims would be sent to a spoofed Singpass website where they would be asked to enter their Singpass login credentials. The victims would then be requested to enter their Internet banking details and one-time passwords (OTPs). The victims would only realise that they have been scammed after being notified of the unauthorised transactions from their bank accounts or fraudulent credit card/bank account applications.

 

How to protect yourself from being a victim of scam

• Do not click on unverified links from unknown senders.  Singpass does not send SMS with hyperlinks.
• Always check the website domain before entering your Singpass ID and password.  The official website for Singpass is singpass.gov.sg.
• Always verify the authenticity of the message directly with the agency that sent the message.
• Update your contact details registered with Singpass and enable notifications via your Singpass app so that you can be promptly alerted of suspicious logins and contact Singpass to secure your account.
• Do not disclose your personal or Internet banking details or OTPs to anyone and report any fraudulent transactions to your bank immediately.
• Check against the list of trusted websites at www.gov.sg/trusted-sites if you receive a link that does not end with “gov.sg”.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 or option 4 to suspend your Maybank2u digital banking access and to report any unauthorised transactions made to your account(s) and/or card(s).

Re-emergence of Job Scams

29 September 2022

Beware of re-emerging job scams where victims would be invited to provide reviews on products or services in order to earn a commission. Victims would receive unsolicited messages from scammers who claimed to be job recruiter on various messaging platforms. Victims who expressed interest in the jobs were instructed to sign up for accounts via the website links provided by the scammers.

The scammers would provide the victims with bank accounts belonging to unknown individuals for payments to be made on the pretext of reviewing the items in order to earn the commissions. Victims would initially be convinced that their work was legitimate as they were able to receive the commissions. They only realised that they have been scammed when they stopped receiving the commissions.

 

How to protect yourself from being a victim of scam

• Do not accept dubious job offers that offer lucrative returns with minimal effort.
• Never download applications from unverified sources.
• Never send money to anyone whom you do not know or have not met in person.
• Lodge a police report as soon as you suspect that you have fallen victim to a scam.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 or Option 4 to suspend your Maybank2u digital banking access and to report any unauthorised transactions made to your account(s) and/or card(s).

E-Commerce Phishing Scam

15 September 2022

Beware of scammers impersonating buyers on e-commerce platforms such as Carousell where they would request victims to click on a link to arrange for payment and courier arrangements after agreeing to the sale of the item. Upon clicking on the phishing URL link, victims would be directed to fraudulent websites and tricked into providing their banking or credit card credentials and One-Time Passwords (OTP) to complete the transaction. Victims would only realise that they have been scammed when they discovered unauthorised transactions made to their bank accounts or credit cards.

 

How to protect yourself from being a victim of scams

• Do not click on URL links sent via unsolicited emails and messages.
• Never disclose your Singpass ID, banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers with others.
• Always verify the buyer’s profile on online marketplaces by checking their verification status, created date, reviews and ratings. If in doubt, always verify the authenticity of the information with the e-commerce platform directly.
• Please change your password immediately and lodge a police report as soon as you suspect that you have fallen victim to a scam.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 or Option 4 to suspend your Maybank2u digital banking access and to report any unauthorised transactions made to your account(s) and/or card(s).

IRAS Phishing SMS Scam

11 August 2022

Beware of phishing scams involving scammers impersonating the Inland Revenue Authority of Singapore (IRAS) through SMS.

Victims of such scams would receive unsolicited SMSes from IRAS as the SMS sender name (e.g. SG-IRAS, IRAS). The victims would be directed to complete their tax review or that their violation has been investigated under the tax law and to co-operate with the audit using an embedded link in the message. Upon clicking on the link in the SMS, the victims would be sent to a spoofed Singpass page where they would be asked to enter their login credentials. Thereafter, the victims would be redirected to another spoofed webpage which looks like an IRAS website, and finally to a spoofed bank login page. The victims would be requested to enter their Internet banking details and one-time passwords (OTPs) received on their mobile phones.

They would only realise they had been scammed after being notified of unauthorised transactions from their bank accounts or fraudulent credit card applications.

IRAS does not send SMSes containing links asking members of the public to log in with their credentials such as passwords and Singpass login details. SingPass does not send hyperlinks or QR codes through SMSes QR codes.

 

 

How can you protect yourself from scams?

• Be alert and always verify the authenticity of claims about problems with your income tax status with the official IRAS website.
• Always check that the URL domain of the Singpass website is singpass.gov.sg before you proceed.
• Update your contact details registered with Singpass and enable notifications via your Singpass app so that you can be promptly alerted of suspicious logins and contact Singpass to secure your account.
• Do not disclose their personal or Internet banking details or OTPs to anyone and report any fraudulent transactions to your bank immediately.
• Check against the list of trusted websites at www.gov.sg/trusted-sites if you receive a link that does not end with “gov.sg”.
• If you suspect that you have fallen victim to a scam, call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 or option 4 to suspend your Maybank2u online and mobile banking access immediately and/ or report any unauthorised transactions made to your account(s).

 

Source: Channel News Asia (CNA), 28 July 2022, 7.42pm (More than S$37,000 lost by victims this month amid 'sudden surge' in IRAS phishing scams)

Website Phishing Alert

4 June 2022

Scammers are actively targeting members of the public through phishing websites. Providing sensitive information such as username-PIN combinations, one-time passwords or PINS to these websites may result in unauthorised fund transfers by scammers from your bank account. If you have provided your credit card information and CVV, scammers may conduct unauthorised card transactions.

This phishing website has a log-in page which directs customers to key in their online banking details.

 

How can you protect yourself from scams?

• Do not give out your Internet Banking credentials, OTP, Digital Token or any Maybank-related email or SMS verification approvals to other individuals, non-Maybank websites, or mobile applications.
• Emails and SMSes from Maybank will not include clickable links. Always go directly to our website to verify the authenticity of any banking-related requests or offers.
• Maybank will never ask you for your credit or debit card details, CVV, SMS or email OTPs or Digital Token approvals to verify or unlock your account.
• Do not call phone numbers, click on URL links, or scan QR codes in unsolicited emails, SMS, or other Messaging Application messages.
• Never disclose your card numbers or OTPs to unverified sources. Bank staff and government officials will never request your card details, OTPs, or Digital Token Approvals through SMS, voice calls or unofficial websites.
• Please change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Impersonation Scam Calls (Maybank Staff)

23 May 2022

We have received reports of ongoing scam calls to victims impersonating Maybank staff. Victims received the calls from +65 6275 XXXX, +65 6330 XXXX, +65 6275 2669, +65 6235 6694 and +65 6475 2901 and are required to verify the transactions (These are not valid Maybank hotline numbers).

List of information that victims are informed by the scammers (but is not limited to):

• An unauthorised Maybank account (5304-XXXX-1190) is opened under their names
• Large amounts are transferred to another bank
• Verification is needed to confirm on the recent personal loan application
• An outstanding personal loan account (7790-XX-4489) is due for payment
• Accounts may be compromised and scammer offered to transfer the call to government officials

 

How can you protect yourself from scams?

• Beware of incoming calls with the ‘+65’ prefix.  Do not pick up such calls if you are not expecting anyone calling from overseas.
• Always verify the authenticity of the information with the official websites or sources.
• Never disclose your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to anyone.
• Never reply to unsolicited calls. Responding to such calls may be used by scammers for social engineering or trick the victims into divulging confidential account and internet banking information.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Re-emergence of SMS Phishing Scams Targeting Banks

21 May 2022

There have been reports of an influx of SMS phishing scams targeting banks where the victims first received the SMS alert informing them that their credit cards have been suspended and to activate, they have to call the number ‘3129 XXXX’. The scammers would then call the victims back and request the victims to provide card details and OTPs. These led to subsequent unauthorised card usage.

Sample of Fake SMS Alert

 

How can you protect yourself from scams?

• Be wary of fake SMSes with spoofed headers and contents with grammatical errors.
• Ignore the instructions given if you receive unsolicited calls via phone or messaging applications. Maybank will not request for personal information, banking credentials or OTPs through phone calls or messaging applications.
• Do not share your confidential banking or card details such as username, password, One-Time Password (OTP) or card CVV details with others.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Impersonation Scam

25 April 2022

We have received reports of ongoing scam calls to victims impersonating Maybank staff. Victims received the calls from +65 6275 XXXX, +65 6330 XXXX, +65 6275 2669, +65 6235 6694 and +65 6475 2901 and are required to verify the transactions (These are not valid Maybank hotline numbers). Victims are also informed that there is either an unauthorised Maybank account (5304-XXXX-1190) opened under their names or large amounts are transferred to another bank account.

 

How can you protect yourself from scams?

• Beware of incoming calls with the ‘+65’ prefix.  Do not pick up such calls if you are not expecting anyone calling from overseas.
• Always verify the authenticity of the information with the official websites or sources.
• Never disclose your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to anyone.
• Never reply to unsolicited calls. Responding to such calls may be used by scammers for social engineering or trick the victims into divulging confidential account and internet banking information.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Impersonation Scam - SMS Phishing Scam

22 April 2022

We have received reports of SMS phishing scams purportedly sent from ‘MAYBANK’ impersonating Maybank. Customers are informed that there has been a login attempt from a new device and are directed to click on a link if the login is not performed by them. Do not click on these links as these SMSes are not sent by Maybank.

Sample of the fake SMS – April 2022

 

How to protect yourself from being a victim of scams?

• Please note that Maybank does not send SMSes or emails that contain clickable links. Always verify the authenticity of the information with the official websites or sources.
• Never disclose your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to anyone.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Re-emergence of Job Scams

11 April 2022

Beware of job scam advertisements that are posted on social media platforms claiming to be job recruiters. Scammers would claim to be recruiting for jobs that offer high commission for reviewing of travel packages, promoting merchant products or watching movie trailers on dubious platforms.
Do not accept these dubious job opportunities that offer lucrative returns for minimal effort or asking for upfront payments before you start work on the promise of a refund with a commission. These are common tactics used by scammers to lure you into participating in their schemes or scams.

 

How to protect yourself from being a victim of scams?

• Ignore unsolicited messages advertising job offers from unknown numbers or unknown foreign numbers.
• Never download applications from unverified sources and ensure that the applications are downloaded directly from the official Apple app store or Google Play store
• Reject requests to use your personal bank accounts to receive and transfer money for others to avoid being involved in money laundering activities.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Re-emergence of China Officials Impersonation Scams

22 March 2022

There have been reports of elderly victims being targeted by scammers claiming to be China officials via unsolicited phones calls. The scammers would inform the victims that they were under investigations for various offences such as illegally opening a bank account in China and money laundering offences and would request for victims’ particulars and banking credentials for investigation.

In these cases, the scammers would get money mules to escort the victims to the bank counters to withdraw money or to fill up forms to activate their iBanking in order to transfer out sums of money from the victim’s bank account. It was observed that the victims are taught what to say in order to assure the bank staff of their actions.

 

How to protect yourself from being a victim of scams?

• No foreign law enforcement or authority can investigate offences here in Singapore.
• Ignore the instructions given if you receive unsolicited calls via phone. No government agency will request for personal information, banking credentials or OTPs through phone calls.
• Do not share your banking or card details such as username, password, One-Time Password (OTP) or card CVV details with others.
• Always verify the authenticity of the information by contacting the relevant government agencies through their official hotlines.
• Change your online banking password immediately as soon as you suspect that your online banking has been compromised. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Re-emergence of Tech Support Scams

10 March 2022

Please be vigilant of scammers impersonating staff from technical companies such as Microsoft, local telecommunication service providers or officers from government agencies who are offering technical support.

In these cases, the victim would receive pop up message on their electronic devices indicating that a virus had been detected or an issue with an application. Victims would click on the pop-up message which directs them to call a number for help. The scammer would then instruct the victims to install remote access applications such as ‘Anydesk’, ‘Ultraviewer’ or ‘TeamViewer’. The scammers would also access victims’ Singpass accounts. Victims would realise that something was amiss when they received notifications in their Singpass Inbox that their personal details have been retrieved or misused.

How to protect yourself from being a victim of scams?

• Install anti-virus, anti-spyware/malware, and firewall on your computer and perform regular updates.
• Do not share your banking or card details such as username, password, One-Time Password (OTP) or card CVV details with others.
• Always verify the authenticity of the information by contacting the relevant government agencies through their official hotline, if you are unsure of whether something is a scam.
• Change your online banking password immediately as soon as you suspect that your online banking has been compromised. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Beware of Business Emails Compromise Scams

9 March 2022

Please be vigilant of business email compromise scams. Scammers would hack into corporate emails or use spoofed email addresses, impersonating CEOs, business partners, employees of companies or suppliers to defraud victims into transferring money to their bank accounts for business partners or salaries of other employees. 

The scammers may also instruct the victims to purchase gift cards for work purposes or request for goods to be delivered and would trick the victims through fake invoices/purchase orders.  Victims realised that they have been scammed when they were informed that the funds or salaries were not received and there were discrepancies in the email addresses or after checking with their colleagues.

 

How to protect yourself from being a victim of scams?

• Be alert of any new or changes in the payment instructions and bank accounts
• Use strong passwords and enable two-factor authentication (2FA) where possible on email accounts. 
• Consider installing email authentication tools such as Domain-based Message Authentication, Reporting and Conformance, DMARC (dmarc.globalcyberalliance.org), which can help detect fraudulent emails.
• Install anti-virus, anti-spyware/malware, and firewall on your computer and perform regular updates.
• If you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Singpass QR Code Scam

5 March 2022

We received reports of ongoing Singpass QR code scam whereby scammers would mislead victims into scanning Singpass QR codes and promise them monetary rewards for their participation in various surveys. The scammers would request for the victims to scan a Singpass QR code with their Singpass app, claiming it was part of the verification process for disbursement of the monetary rewards.

However, the Singpass QR codes are fake and victims would unintentionally give the scammers access to certain online services; such as registering businesses, subscribing for new mobile lines or opening new bank accounts under the victim’s name. Victims would only realise something was amiss when they receive notifications in their Singpass Inbox that their personal details have been retrieved or misused.

Annex A:

Sample of Singpass QR code used by scammers:

 

How to protect yourself from being a victim of scams?

• Never scan any Singpass QR code sent to you by someone else. You should only scan the Singpass QR code on the official website of the e-service that you want to access, or tap on Singpass QR codes on the official apps of these e-services.
• Always verify with official sources on whether the information you have received is sent by the organisation and if the transaction involves authentication using the Singpass app.
• After scanning a Singpass QR code, always check the consent screen on your Singpass app to verify the legitimacy of the digital service you are accessing. Ensure that the domain URL displayed on your Singpass app matches that in the browser address bar. If otherwise, do not tap on the ‘Log In’ button on the consent screen.
• Never disclose your Singpass ID, banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers with others.
• Please change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

COE Loan Renewal Phishing Scam

15 February 2022

We received reports of ongoing car COE loan phishing advertisements appearing on Google searches which are being tagged to Maybank. The advertisement suggests that COE loan renewals can be done with Maybank.

Please note that Maybank does not have such partnerships with Oneshift and Carousell.

Sample of Phishing Google advertisement:

 

How to protect yourself from being a victim of scams?

• Be alert and always verify the authenticity of the information with the official website or sources.
• Do not reply or click on URLs in unsolicited and suspicious emails.
• Do not share your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers with others.
• Please change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Re-emergence of SMS Phishing Scams / Alert

10 February 2022

Beware of re-emergence of SMS phishing scams where scammers impersonate delivery companies. Targeted members of the public are warned of either 1) outstanding payments for parcel deliveries that are required to be paid before their item(s) can be delivered, or 2) a need to update their credit/debit card information, and are asked to log onto a phishing website to make the payment or update the credit/debit card information respectively. Users who click on the link are asked to provide their credit/debit card details and One-Time Password (OTP), which are subsequently stolen by the scammers.

Annex A: Sample of fake Singpost SMS

Additionally, there are also reports of a phishing SMS purportedly sent by banks (e.g. Sender ID ‘SMS Alert’), which state that an individual’s debit and credit cards have been temporarily blocked, and requests for the individual to call a listed number to unblock the cards. Users who call the number will speak to a scammer, who may trick them into divulging confidential credit card and internet banking information.

Annex B: Sample of fake SMS Alert

 

How to protect yourself from being a victim of scams?

• Be wary of fake SMSes with spoofed headers grammatical errors.
• Do not call unofficial telephone numbers and click on URL links provided in unsolicited emails and text messages. With effect from 31 January 2022, banks have removed the clickable links in both email and SMS notifications. Always verify the authenticity of the information with the official websites or sources.
• Never reply to unsolicited SMSes. Responding to such SMSes may be used by scammers for social engineering or trick the victims into divulging confidential account and internet banking information.
• Never disclose your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to anyone.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Re-emergence of Phishing Scams Involving Application of E-wallets

9 February 2022

Beware of a re-emergence of video call phishing scams where scammers impersonate government agency officials, including those from Singapore Police Force (SPF) and Ministry of Manpower (MOM). Targeted members of the public will receive unsolicited video calls from the scammers via messaging applications, such as WhatsApp, Viber, and IMO, who will request for the individual’s personal information, banking credentials and One-Time Password (OTP), under the guise of ‘verification purposes’ or ‘assisting in investigations’.

The scammers will then create e-wallets on applications such as DBS PayLah!, Singtel Dash or GrabPay in the victims’ names, and use the e-wallets to withdraw money from the victims’ back accounts.

The Police would like to emphasise that these calls are NOT made by police officers.

Annex A: Sample of fake video calls

 

How can you protect yourself from scams?

• Ignore the instructions given if you receive unsolicited calls via phone or messaging applications. No government agency will request for personal information, banking credentials or OTPs through phone calls or messaging applications.
• Do not share your banking or card details such as username, password, One-Time Password (OTP) or card CVV details with others.
• Always verify the authenticity of the information by contacting the relevant government agencies through their official hotline, if you are unsure of whether something is a scam.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Re-emergence of Tech Support Scams

29 January 2022

There are recent reports of the re-emergence of Tech Support Scams. Please be vigilant of scammers impersonating staff from local telecommunication service providers or officers from government agencies who are offering technical support.

Since 15 April 2020, only overseas calls will show a ‘+’ prefix before the number showing on your caller ID. Calls received from local numbers will no longer carry a ‘+’ prefix.
Example 1: +6955 0221

This is likely to be a spoofed call. For local numbers, there will not be a ‘+’ prefix.
Example 2: +4241 2345

This is an overseas caller; be vigilant if you are not expecting an overseas call.

The scammers may instruct the victims to install applications, type commands into their computers or log onto their online banking account.

Government agencies and service providers will not request for your confidential personal details or access to your online banking account over the phone or through automated voice machines.

How can you protect yourself?

• Beware of unsolicited calls from persons claiming to be a staff of the service provider or government officials
• Be vigilant when answering calls showing a ‘+’ prefix, especially if you are not expecting any overseas calls.
• Verify the authenticity of the call with the organisation.
• Do not share your personal or internet banking details and OTP with anyone.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report

Additional measures to protect you from scams

24 January 2022

Maybank Singapore, in consultation with the Monetary Authority of Singapore, will be implementing stricter measures by 31 January 2022 to lower the risks of online fraud. These safeguards include (but is not limited to) phasing out clickable links in SMSes and emails sent to you, revising the default threshold for local and overseas funds transfer notifications and delaying the activation of Secure2u (digital token) by at least 12 hours. For details, please refer to FAQ.

Please change your password immediately as soon as you suspect that you have fallen victim for a fraud. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Beware of Rising SMS/Email Phishing Scams

19 January 2022

There are recent reports of SMS and email phishing scams targeting bank customers in Singapore. The SMSes with spoofed headers or fictitious email addresses may appear to be sent from Maybank and include links to unfamiliar websites. These are phishing attempts and are not sent out by Maybank even though they may appear in the same thread as the legitimate SMSes from MaybankSG.

How can you protect yourself from scams?

• Be alert and always verify the authenticity of the information with the official Maybank website URL (www.maybank2u.com.sg). Do not respond to requests to perform funds transfer to unknown account numbers.
• Do not share your banking credentials such as username, password, One-Time Password (OTP) or bank account details with others.
• Never reply to unsolicited calls, SMS or emails. Responding to such calls, SMSes or emails may be used by scammers for social engineering or trick the victims into divulging confidential account and internet banking information.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect that you have been a victim of fraud.

Time Deposit Scams

28 December 2021

We have received reports of ongoing impersonation scams involving scammers impersonating Maybank staff and calling individuals to offer ‘Time Deposit Promotions’, and Fixed Deposit accounts. Targeted members of the public may be tricked into divulging their personal details, including bank details, One-Time Password (OTP), or to transfer money to unknown bank accounts.

Scammers offering the Fixed Deposit accounts may also send a phishing email including details of the ‘Fixed Deposit account’ to targeted members of the public and request for victims to deposit money to an unknown bank account.

The phone numbers reportedly used by the scammers include ‘68179208’, ‘+65 66028206’, ‘+65 68179208’, and ‘+65 67089332’. These are NOT valid Maybank hotline numbers.

Maybank will not request for application of Time Deposit accounts or Fixed Deposit accounts through calls, SMSes or emails. Do not respond to requests to perform funds transfer to unknown account numbers other than your account number(s) maintained with Maybank.

How can you protect yourself from scams?

• Be alert and always verify the authenticity of the information with the official Maybank website URL (www.maybank2u.com.sg) about opening of bank accounts and bank promotions. Do not respond to requests to perform funds transfer to unknown account numbers other than your account number(s) maintained with Maybank.
• Do not share your banking credentials such as username, password, One-Time Password (OTP) or bank account details with others.
• Never reply to unsolicited SMS or emails. Responding to such SMSes or emails may be used by scammers for social engineering or to trick victims into divulging confidential account and internet banking information.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report.

Impersonation Scams

13 December 2021

We have received reports of ongoing SMS scams purportedly sent from ‘MaybankSG’ impersonating Maybank. Customers were informed to reallocate their funds to another Maybank account and to call +65 66028206 (This is not a valid Maybank hotline number) for verification of customers’ details.

These SMSes are not sent by Maybank.

Sample of the fake SMS - December 2021

 

How can you protect yourself from scams?

• Be alert and always verify the authenticity of the information with the official website or sources.
• Contact us at 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to verify the contents of the SMS.
• Never reply to unsolicited SMS or emails. Responding to such SMSes or emails may be used by scammers for social engineering or trick the victims into divulging confidential account and internet banking information.

Job Scams Involving "Filmgo" related companies

7 December 2021

The Police would like to alert the public to a new variant of job scam where victims are invited to participate in jobs that allow them to earn commission through buying and selling movie tickets linked to various companies with the name “Filmgo”. Since November 2021, at least 41 victims have fallen prey to this scam, with losses amounting to at least S$203,000.

In these cases, the scammers would befriend victims on messaging applications such as MiChat and WeChat. These scammers would then introduce victims to purported job offers that would allow them to earn commission through the buying and selling of movie tickets involving various companies, such as Filmgo Production and Filmgo Digital etc. Victims would be directed to sign up for accounts on the “Filmgo” websites provided by the scammers. These websites would also offer mobile applications for victims to download and use its services conveniently.

Victims would be required to top-up their “Filmgo” accounts in order to buy and sell movie tickets and earn commissions, and the scammers would provide victims with bank accounts belonging to unknown individuals for the payment to be made. Most of the time, the victims would be convinced that their work was legitimate as their “Filmgo” account indicated the commissions they received after completing the jobs. However, victims would eventually discover that they had been scammed when they were unable to withdraw the money from their “Filmgo” accounts.

Annex A - Dec 2021

 

How to protect yourself from being a victim of scams

• Do not accept dubious job offers that offer lucrative returns for minimal effort.
• Never download applications from unverified sources.
• Always verify the authenticity of the information with the official website or sources.
• Never disclose your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to anyone.
• Change your password immediately as soon as you suspect that you have fallen victim to a scam. Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) and press STAR *1 to report any unauthorised transactions made to your account(s) and lodge a police report

Phishing Scams Involving Singapore Bicentennial Commemorative Notes

6 December 2021

The Police have received numerous reports of phishing scams involving text messages from scammers, where victims were allegedly directed to spoofed banking websites after being purportedly notified of their eligibility to receive Singapore Bicentennial commemorative notes.

Victims of such phishing scams would receive text messages from scammers that they are eligible to receive free Singapore Bicentennial commemorative notes and were directed to allegedly spoofed URLs. Upon clicking on the URLs, victims will be redirected to fraudulent websites which resembled the homepage of the purported bank’s internet banking website. Victims would then key in their internet banking credentials, thinking that this is necessary to receive the notes. Victims would only realise that they have been scammed when they discover unauthorised transfers of monies out of their bank accounts.

Sample of fake SMSes – Dec 2021

 

How to protect yourself from being a victim of scams

• Be wary of fake SMSes with spoofed headers and check for grammatical errors in the message.
• Do not click on URL links provided in unsolicited emails and text messages.
• Always verify the authenticity of the information with the official website or sources.
• Never reply to unsolicited SMS. Responding to such SMSes may be used by scammers for social engineering or trick the victims into divulging confidential account and internet banking information.
• Never disclose your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to anyone.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect that you have been a victim of fraud.

Re-emergence of fake SMS scams with spoofed bank headers targeting bank customers

25 November 2021

The Police would like to alert members of the public to a re-emerging trend where scammers would send SMSes with spoofed headers of banks to victims, claiming to offer fixed deposits with high interest rates.

Victims would receive SMSes with spoofed headers, purportedly from a bank, advertising fixed deposit promotions offering high interest rates. Victims would be instructed to contact a number provided within the SMS to express their interest and obtain more details about the promotion. Once contacted, scammers would then attempt to get victims to divulge their personal details, such as bank details or One-Time Password (OTP), or transfer money to unknown bank accounts.

Sample of fake SMSes - Nov 2021

How to protect yourself from being a victim of scams

• Be wary of fake SMSes with spoofed headers and check for grammatical errors in the message.
• Always verify the authenticity of the information with the official website or sources.
• Never reply to unsolicited SMS. Responding to such SMSes may be used by scammers for social engineering or trick the victims into divulging confidential account and internet banking information.
• Never disclose your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers to anyone.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect that you have been a victim of fraud.

Re-emergence of Phishing Email on Maybank Loyalty Programme

16 November 2021

We received reports of ongoing survey scams involving emails which are sent from MayBank-REWARDS (may.yagkbmaqsf@tohsyo-c.co.jp). The scam email tricks the victim to participate in a short survey in order to enjoy cash rewards. Upon clicking “Take the survey”, the phishing website will request the victim to provide confidential card information (e.g. Card Number, One-time Password, CVV number).  

Please note that Maybank did not conduct such surveys. The email address, email contents and URL links mentioned in the scam email below are not from Maybank Singapore Limited.

Sample of the scam email – November 2021

How can you protect yourself?

• Be alert and always verify the authenticity of such surveys by calling 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas).
• Do not reply or click on URLs in unsolicited and suspicious emails.
• Do not share your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers with others. Maybank will also not require you to key in confidential bank account or card details for such surveys.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect you have been a victim of fraud.

Payment Scams

3 November 2021

We received reports of ongoing payment scams involving scammers impersonating Maybank staff and requesting the victims to arrange for alternative payment modes for their facilities with Maybank. Scammers will also email the details to the victims using a fictitious Maybank email address.

Please note that the email address and the email contents mentioned in the email are not from Maybank. Maybank will not request for alternative payments to be made to unknown account numbers other than your account number(s) and/or credit card number(s) maintained with Maybank. For credit card payment methods, please refer to our website maybank.sg/ccpayment .

Sample of the scam email – Nov 2021

How can you protect yourself?

• Be alert and always verify the details from Maybank. Do not respond to requests to perform funds transfer to unknown account numbers other than your account number and/or credit card number maintained with Maybank.
• Do not share your banking credentials such as username, password, One-Time Password (OTP) or bank account details with others.
• Use the official Maybank website by typing the Maybank website URL (www.maybank2u.com.sg) to find out the payment methods for the respective Maybank facilities.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to verify the contents of the email or if you suspect that you have been a victim of scams.

Car Loan Scam

12 October 2021

The latest car loan scam involves scammers using a purported bank’s letter, requesting victims to perform early settlement under the company Swift Consumer Service “SCS” in order to enjoy rebates or other incentives. Impersonating as bank staff, scammers usually answer queries from a fake phone number and reply emails using a fictitious Maybank email address.

Please note that the email address, email contents and names of individuals mentioned in the letter are not from Maybank Singapore Limited. For car loan settlement, please refer to the payment modes under FAQ 6 . Funds transfer and telegraphic bank transfer are not the listed payment options for car loan full settlement.

Sample of the scam email – Sep 2021

How can you protect yourself?

• Do not respond to requests to perform funds transfer or telegraphic bank transfer for car loan full settlement. Be alert and always verify the details from Maybank.
• Do not share your banking credentials such as username, password, One-Time Password (OTP) or bank account details with others.
• Use the official Maybank website by typing the Maybank website URL (maybank2u.com.sg) to find out information about Car Loan.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to verify the contents of the letter or if you suspect that you have been a victim of scams.

Beware of Job Scams

12 October 2021

We received reports of ongoing job scams involving the downloading of applications (e.g. Uspeed Technology (‘UT’) app) and promising quick cash by liking or watching videos on different social media platforms.

Victims are usually recommended by their friends to download the mobile application (e.g. UT app) and perform tasks to “generate” income. Pictures of funds successfully credited to the accounts are usually shown to the victims convincing them to believe that the rewards are legitimate. After downloading the mobile application, victims are required to pay membership fees by depositing money to the mobile application before performing the daily tasks to receive the payouts.

Victims only realise that they had fallen prey to the scams when they can no longer open the mobile application, withdraw the remaining funds deposited to the application and the ‘administrator’ stopped responding to the messages.

 

How can you protect yourself?

• Be cautious when you are asked to make upfront payments before you start a job with the promise of attractive commission or rewards.
• Do not accept dubious job opportunities that offer lucrative returns for minimal effort.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect that you have been a victim of fraud.

New Security Notifications

As part of the financial industry-wide initiative for a safer online banking experience, we are introducing our new device login notification.

You will receive a notification if we detect a new device/browser login to your Maybank2u Online/Mobile banking or when you log in from a new location.

To find out more, please refer to our FAQ.

How can you protect yourself?

• Beware of links provided in unsolicited emails. Do not reply or click on URLs in unsolicited and suspicious emails.
• Do not share your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers with others.
• Change your passwords periodically.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect that you have been a victim of fraud.

Beware of Fake Job Offers

07 September 2021

The Singapore Police Force has noted a recent significant rise in the number of job scam cases.

In these transnational job scams targeting job seekers, the syndicate would post advertisements for fictitious jobs promising quick cash on different social media platforms. Victims are given instructions to make payments by transferring funds to designated bank accounts, claiming that it was to boost the sales of various merchants on popular e-commerce sites. In return, they were promised commissions based on the amount transferred, on top of the full reimbursements. Victims often receive the promised reimbursements and commissions initially, leading them to believe that it was a legitimate job and enticing them to deposit even larger sums of money. Victims only realise that they had fallen prey to scams when they did not receive the subsequent reimbursements and commissions.

How can you protect yourself?

• Be cautious of social media platforms asking for upfront payments before you start work on the promise of a refund with a commission.
• Do not accept dubious job opportunities that offer lucrative returns for minimal effort.
• Always verify the authenticity of the job with the official websites or sources.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect that you have been a victim of fraud.

 

Source: Channel NewsAsia 30 Aug 2021 12:01 PM

Beware of Phishing Email on Maybank Loyalty Programme

23 August 2021

We received reports of ongoing survey scams involving emails which are sent from MayBank-REWARDS (may.sglsenydnq@laylax.com). The scam email tricks the victim to participate in a short survey in order to enjoy cash rewards and complimentary miles. Upon clicking “Participate Now”, the phishing website will request the victim to provide confidential card information (e.g. Card Number, One-time Password, CVV number).   

Please note that Maybank did not conduct such surveys. The email address, email contents and URL links mentioned in the scam email below are not from Maybank Singapore Limited.

Sample of the scam email – August 2021

How can you protect yourself?

• Be alert and always verify the authenticity of such surveys by calling 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas).
• Do not reply or click on URLs in unsolicited and suspicious emails.
• Do not share your banking or card credentials such as username, password, One-Time Password (OTP) or Card CVV numbers with others. Maybank will also not require you to key in confidential bank account or card details for such surveys.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect you have been a victim of fraud.

New Type of Phishing Scams Targets Bank Customers with Spoof SMSes

16 July 2021

Banking-related phishing scams have re-emerged in the form of spoof SMSes that trick victims into thinking they were sent by their bank. A total of S$1.07 million was lost in 374 cases of such scams between January and May this year.

Victims of the scam received an SMS allegedly sent by their bank, informing them of the payment attempts detected from their bank account. As the scammers have spoofed the bank’s SMS accounts, the scammers’ message may be appended to the same SMS message thread from the bank.

Upon clicking on the link in the SMS, the victims were led to a phishing site resembling the bank’s official website. They were then asked for their personal information such as Internet Banking details and One-time-passwords (OTP). After providing the details, the victims realised that they have been scammed when they received SMS notifications about money being transferred from their accounts. 

How can you protect yourself?

• Be alert and always verify the authenticity of the information with the official website or sources.
• Always check that the message reflects your intended actions and do not proceed or authorise any suspicious transactions.
• Never reply to unsolicited SMS. Responding to such SMSes may be used by scammers for social engineering or trick the victims into divulging confidential account and internet banking information.
• Do note that Bank staff or government officials will never request for your banking credentials such as username, password and One-Time Password (OTP) over the phone.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect you have been a victim of fraud.

Increase in Ransomware Scam cases

9 July 2021

There has been a recent increase in ransomware cases involving small and medium-sized enterprises (SMEs).

Ransomware is a type of malware that criminals use to encrypt files on the victim’s computer or shared network drive, preventing the victim from accessing these files. The criminal will then demand a ransom in exchange for a decryption key to access these files again.

How can you protect yourself?

• Ensure your important files and data are regularly backed up.
• Beware of links provided in unsolicited emails.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect that you have been a victim of fraud.

Car Loan Scam

15 June 2021

We received reports of ongoing car loan scams involving emails which are sent from MAYBANK SINGAPORE LIMITED (fcs_services@maybank.com.sg). The email includes a letter with Maybank letterhead requesting the victim to perform full settlement under Fast Consumer Service “FCS” in order to enjoy early settlement rebates.

Please note that the email address, email contents and names of individuals mentioned in the letter are not from Maybank Singapore Limited. For car loan settlement, please refer to the payment modes under FAQ 6 . Funds transfer is not one of the listed payment options for car loan full settlement.

Sample of the scam email – June 2021

How can you protect yourself?

• Do not share your banking credentials such as username, password, One-Time Password (OTP) or bank account details with others.
• Use the official Maybank website by typing the Maybank website URL (www.maybank2u.com.sg) to find out information about Car Loan.
• Be alert and always verify the details from Maybank. Do not respond to requests to perform funds transfer for car loan full settlement.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to verify the contents of the letter.

Covid-19 Vaccination Scam

04 June 2021

The Singapore Police Force is cautioning members of the public to be vigilant when they receive SMS messages on the vaccination exercise to avoid falling prey to scams.

Scammers will request for payment of the vaccines or to obtain early access to the vaccines. Vaccines are free for Singaporeans, Permanent Residents and long-term residents. The Ministry of Health (MOH) will not ask for payment to schedule or to receive the vaccinations.

How can you protect yourself?

• Check the messages for grammatical errors.
• Ensure that the unique link ends with gov.sg before clicking on it.
• When in doubt, verify the authenticity of messages by calling MOH’s hotline at 1800- 333 9999.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect that you have been a victim of fraud.

Covid-19 Related Scam: Donations for oxygen machines to India

04 June 2021

The Singapore Police Force alerted the public to a new type of scam where scammers use compromised WhatsApp accounts to solicit donations for the purchase of oxygen concentrator machines to be sent to India.

The scammer would communicate with the victims using compromised WhatsApp accounts belonging to the victim’s friends. They would claim to be raising funds to purchase oxygen concentrator machines for donation to India and request for the victims to assist with the purchase or to donate to patients in India.

How can you protect yourself?

• Beware of unusual requests received over WhatsApp, even if they were sent by your WhatsApp contacts.
• Verify whether the request is legitimate by checking with your family and friends offline.
• Never send money to people whom you do not know or have not met in person
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect that you have been a victim of fraud.

Impersonation Scams

04 June 2021

The Singapore Police Force would like to caution the public to be vigilant of scammers impersonating staff from local telecommunication service providers or officers from government agencies who are offering technical support.

Since 15 April 2020, only overseas calls will show a ‘+’ prefix before the number showing on your caller ID. Calls received from local numbers will no longer carry a ‘+’ prefix. 

Example 1: +6955 0221
This is likely to be a spoofed call. For local numbers, there will not be a ‘+’ prefix. 

Example 2: +4241 2345
This is an overseas caller; be vigilant if you are not expecting an overseas call.

The scammers might instruct victims to install applications, type commands into their computers or log onto their online banking account.

Government agencies or service providers will not request for your personal details or access to your online banking account over the phone or through automated voice machines.

How can you protect yourself?

• Beware of unsolicited calls from persons claiming to be service provider staffs or government officials
• Be more vigilant and exercise greater care when answering calls showing a ‘+’ prefix, especially if you are not expecting any overseas calls.
• Verify the authenticity of the call with the organization
• Do not share your personal or internet banking details and OTP with anyone.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect that you have been a victim of fraud.

Vulnerability of Data Synchronisation of Mobile Devices

03 May 2021

Some smart phones have features that support the synchronisation of data such as SMSes and emails between the mobile device and online storage or cloud services in near real time.

For smart phone users who have enabled data synchronisation on their devices, sensitive information such as One-time Passwords (OTP) sent via SMS or emails by financial institutions, can be accessed by criminals if their login credentials to the online storage or cloud services have been compromised. Exposed OTPs together with online banking credentials or credit card information harvested from customers can potentially be used by criminals to perform fraudulent financial transactions.

Customers are advised to be vigilant to these cyber risks and keep their mobile devices and related online accounts secured.

How can you protect yourself?

• Do not share your banking credentials such as username, password, OTP or bank account details with others.
• Change your passwords periodically.
• Use unique passwords that do not include any personal information such as your name or date of birth.
• Call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report any unauthorised transactions made to your account(s) or if you suspect that you have been a victim of fraud.

Impersonation Scams

23 April 2021

We received reports of ongoing SMS scams sending from 79899 impersonating Maybank that we have temporarily suspended customers’ card and to call 31386333 for verification of customers’ details and to reactivate their cards.

These SMS are not sent by Maybank.

Sample of the SMS – April 2021

How to protect yourself from scams

• Be alert and always verify the details in the messages from Maybank. Always check that the message reflects your intended actions and do not proceed or authorise suspicious transactions.
• Contact us at 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to verify the contents of the SMS.
• Never reply to unsolicited SMS or emails. Responding to such SMSes or emails may be used by scammers for social engineering or trick the victims into divulging confidential account and internet banking information.

 

WhatsApp Takeover Scam

17 February 2021

The Singapore Police Force has noted an increase in the number of reports received for WhatsApp Account Takeover Scams involving the 2 variants below:

Variant 1 – Direct Contact with Victim
The scammer would impersonate support staff from WhatsApp and request a 6-digit verification code for account recovery to gain access to the account.

Variant 2 – Indirect Contact using Victim’s Voicemail
The scammer would repeatedly fail the 6-digit verification code on the victim’s phone number. If the victim did not answer the resulting voicemail, the scammer would then use the default PIN used by telco providers to retrieve the 6-digit verification code from the victim’s voicemail and take over the victim’s WhatsApp account.

Note: Upon accessing the victim’s account, the scammer could then enable two-step verification to prevent the victim from regaining control over the WhatsApp account.

 

What can you do to protect yourself?

• Never share your WhatsApp verification code with anyone regardless of who they claim to be.
• Be aware of any unusual requests received on WhatsApp, even if they were sent from your WhatsApp contacts.
• Enable the two-step verification feature on WhatsApp. This can be done by opening WhatsApp and go to ‘Settings’ → ‘Account’ → ‘Two-step verification’ → ‘Enable’.
• Change your voicemail account’s default PIN. Alternatively, contact your telco to deactivate the feature if you have no need for it.
• If you suspect that you have been a victim of scams, please call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas).

Scam Advisory

16 November 2020

The Singapore Police Force would like to alert the public about the re-emergence of scams spoofing as banks and targeting bank customers.  Victims would receive SMSes from “banks” informing them that their ATM cards have been blocked.  When the victims click on the link, they will be led to a phishing website which resembles the official bank’s website requesting for their personal particulars, internet banking details and one-time passwords (“OTP”).  Thereafter, the scammers will make unauthorised withdrawals from the victim’s bank account(s).

How to protect yourself from being a victim of scams

• Do not click on URL links provided in unsolicited text messages;
• Always verify the authenticity of the information with the official website or sources;
• Never disclose your personal or internet banking details and OTP to anyone; and
• Report any fraudulent credit/debit card charges to your bank and cancel your card immediately.

 

If you suspect that you have been a victim, please call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report it.

Sample Phishing SMSes

Are banks liable for your losses to scams?

11 December 2020

In the first half of this year, SGD102 million was lost to various types of scams.

Being scammed by someone impersonating a staff from a Telecommunications Company? Is the bank liable for your losses? Can banks recover your money if it is reported immediately?

Below are some questions and answers to understand the roles and responsibilities and extent of liabilities of Customers and the bank.

Q1. I received a call from a service provider who informed me that I am facing some issues with my Internet. He requested to access my laptop by downloading a software into my computer. Is the bank able to stop the funds going out if I realised that it was a scam after immediately after the call?

A. It is unlikely as the funds transfers are carried out instantly in most cases. Therefore, it is difficult to stop the transfer. However, the bank will try to assist in recovering the funds on best effort basis as soon as the bank alerted to the transaction. Please lodge a police report for such incidents.

Q2. Why is it necessary to alert the bank immediately if the fraudulent transactions cannot be stopped?

A. The bank will disable your online banking access and cards to prevent any further fraudulent transactions.

Q3. Is the bank able to stop fraudulent transactions that take days to complete?

A. Once an instruction is given, the funds will be deducted from your account. The funds could be transferred to an interim bank before reaching the recipient’s bank account. It would be difficult to intercept the transaction as the interim bank has an obligation to pass the funds to the recipient's bank.

Q4. Can the Singapore police help me to recover my funds, including transfers to overseas banks?

A. Yes, if the funds are transferred to a local bank account and the funds are still in that bank account. The police can issue an order to the bank to freeze the recipient’s account to prevent any further fund transfers. The funds will then be transferred back to the rightful owner after a court order has been issued. For overseas transfers, chances of recovery is low. However, the police will work with their international partners to trace the money.

Q5. When can I expect the bank to give me a reply after I have reported a fraudulent transaction?

A. The bank will conduct an investigation of your claim and give you a reply within 21 business days for straightforward cases, and up to 45 business days for complex cases.

Q6. I have been scammed by someone impersonating a bank employee and asked me to make a transfer to another bank account. Is the bank liable?

A. The bank’s liability will depend on whether the transfer occurred as a result of the customer’s negligence. Customers are generally liable for losses from transactions that they have authorised, even if they subsequently realised that they had been scammed.

Q7. What is the bank's duty of care to me?

A. The bank's duty of care is contractual in nature and most of the duty is imposed on the customer.

The MAS has issued the E-Payment Guidelines to protect users of electronic payments.

The guidelines set out the responsibilities of banks. For instance, banks are expected to provide real-time transaction notifications and a reporting channel so that you may be alerted to unauthorised transactions and report them should they happen.

Customers would also need to take reasonable steps to protect their own interests. These include adopting good security practices such as protecting your device, login credentials and one-time passwords.

If you suspect that you have been a victim of scams , please call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas).

 

Source:
The Straits Times (27 November 2020) - Is the customer or bank responsible for fraudulent transactions in Singapore?

Re-emergence of scams targeting bank customers with spoofed SMSes

16 November 2020

The Singapore Police Force would like to alert the public about the re-emergence of scams spoofing as banks and targeting bank customers.  Victims would receive SMSes from “banks” informing them that their ATM cards have been blocked.  When the victims click on the link, they will be led to a phishing website which resembles the official bank’s website requesting for their personal particulars, internet banking details and one-time passwords (“OTP”).  Thereafter, the scammers will make unauthorised withdrawals from the victim’s bank account(s).

How to protect yourself from being a victim of scams

• Do not click on URL links provided in unsolicited text messages;
• Always verify the authenticity of the information with the official website or sources;
• Never disclose your personal or internet banking details and OTP to anyone; and
• Report any fraudulent credit/debit card charges to your bank and cancel your card immediately.

 

If you suspect that you have been a victim, please call 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to report it.

Sample Phishing SMSes

Spot the signs. Stop the crimes.

13 October 2020

The Singapore Police Force and the National Crime Prevention Council (“NCPC”) have rolled out the sixth edition of their annual anti-scam campaign: "Spot the signs. Stop the crimes." The campaign runs from August 2020 to March 2021, with a focus on sharing real scam examples with the public to educate people on how to spot the various telltale signs of scams.

E-commerce scams, social media impersonation ruses, loan scams and banking-related scams topped the list of common scams, with surges in the number of cases in each of these categories. The amount lost in the 10 most common types of scams doubled to S$82 million, up from the $41.6 million that scammers made off with in the first six months of 2019. A sharp 139 per cent year-on-year rise in cases in the 10 main categories of scams for the first six months of this year.

Mr Gerald Singham, Chairman of NCPC encouraged members of the public to not only stop and think before revealing personal details or handing over one-time passwords, but to also take the extra step of verifying information with a third party or the authorities.

"If someone approaches you for personal information or asks for banking details, it must raise suspicion. The onus must be on us - the potential victim - to stop the crimes from happening and cut off communication before any important information can be divulged."

Learn to spot the signs and stop the crimes - https://www.scamalert.sg/

Source:
The Straits Times (26 August 2020) - $82 million lost through top 10 scams in first half of 2020, double the amount from a year ago
The Straits Times (27 August 2020) - New education campaign launched to address rising scam numbers

Impersonation Scams

2 October 2020

We received reports of ongoing SMS scams impersonating Maybank to offer loans. If the victim contacts the number in the SMS, the scammer may attempt to impersonate Maybank staff to place a “deposit” before the loan is disbursed.

Sample of the SMS – September 2020

How to protect yourself from scams

• Be alert and always verify the details in the messages from Maybank. Always check that the message reflects your intended actions and do not proceed or authorise suspicious transactions.
• Contact us at 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to verify the contents of the SMS.
• Never reply to unsolicited SMS or emails. Responding to such SMSes or emails may be used by scammers for social engineering or trick the victims into divulging confidential account and internet banking information.

 

24 July 2020

The Singapore Police Force (“SPF”) would like to educate the public regarding the increase in impersonation scams involving bank officials and authorities such as IRAS officers. These scammers will usually ask for the following Internet banking details:

• Account Usernames
• Personal Identification Numbers (PIN)
• One-time Passwords (OTP)

 

These scammers will try to impersonate bank officials or authorities and request the victim to conduct the following actions:

• provide their Internet banking credentials over the phone or on fraudulent websites
• provide SMS OTP or security token approval
• update funds transfer limit
• perform funds transfers to a new account

 

Scammers would then proceed to transfer money out of their victims’ accounts using the details provided.

How to protect yourself

• Do not reply or click on URLs in suspicious SMSes or emails.
• Beware of phishing websites that may look genuine.
• Do not give out your Internet Banking credentials, SMS OTP or security token approval to other individuals.

 

If you suspect you have provided your internet banking credentials, SMS OTP, or security token approval to unauthorized parties, please contact 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) immediately.

China Officials Impersonation Scam

13 April 2020

The Singapore Police Force (SPF) would like to alert the public to a new variant of the China Officials impersonation scam whereby callers impersonated as staff from the Ministry of Health (MOH) before referring victims to scammers claiming to be China Officials.

MOH will not ask for your banking credentials or to transfer monies to bank accounts.
You are advised to take the following precautions when you receive unsolicited calls from unknown parties:

• Don’t Panic – Ignore the calls and caller’s instructions. No government agency will request for transfer of money, personal details or bank account login credentials over the phone. Call a trusted friend or talk to a relative before you act as you may be overwhelmed by emotion and err in your judgment.
• Don’t Believe – Scammers may use caller ID spoofing technology to mask the actual phone number and display a different number. Calls that appear to be from a local number may not actually be made from Singapore. From 15 April 2020, all incoming international calls will be prefixed with a plus (+) sign. Stay vigilant when receiving any unexpected international calls, and reject those which spoof local numbers.
• Don’t Give – Do not provide your name, identification number, passport details, contact details, bank account or credit card details, and One-Time-Password (OTP). Such information are useful to criminals.

 

read full advisory

Scammers Impersonating Staff From Local Telecommunication Service Providers Or Officers From Government Agencies Offering Technical Support

10 April 2020

The Singapore Police Force (SPF) would like to alert the public about scammers impersonating staff from local telecommunication service providers, or officers from government agencies who are offering technical support.

You are advised to adopt the following preventive measures:

• Beware of unsolicited calls from persons claiming that they are staff of telecommunication service providers or from a government agency, even if they claim there are issues with your telecommunication devices or allege that you are implicated in a criminal offence. Scammers may use Caller ID spoofing technology to mask their actual phone numbers and display different numbers. Calls that appear to be from a local number may not actually be made from Singapore.
• Do not panic and do not follow instructions to install applications, type commands into your computer or log onto your online banking accounts. No telecommunication service provider or government agency will request for your personal details or access to your online bank account over the phone or through automated voice machines. When in doubt, always call the official hotline of your telecommunication service provider to verify. It may also be wise to call a trusted friend or talk to a relative before you act on such instructions, in order to get a second opinion which can help counter possible misjudgements on your part.
• Never provide your name, identification number, passport details, contact details, bank account numbers, credit card details, or One-Time-Passwords (OTPs) over the phone to unfamiliar or unverified persons. Such information can be very useful to criminals.

 

read full advisory

COVID-19 Phishing Calls

6 April 2020

The Singapore Police Force (“SPF”) has alerted the public regarding scams using the COVID-19 outbreak as a bait. These scammers purport to be from Singapore’s Ministry of Health (MOH) and claim to conduct contract tracing to detect potential infected individuals. If an individual falls victim to these claims, the scammer may ask for the following information or request the victim to conduct the following actions:

• Internet banking credentials
• SMS OTP or security token approval
• Update funds transfer limit
• Perform fund transfers to a new account

 

How to protect yourself

• MOH will never ask for your financial details during contact tracing calls. Verify these calls with the official MOH hotline if you receive such calls. Do not proceed further if you suspect a caller is asking you to conduct suspicious, unfamiliar actions or transactions.
• Do not give out your Internet Banking credentials, SMS OTP or security token approval to other individuals. If you suspect you have provided your internet banking credentials, SMS OTPs, or security token approval to unauthorised parties, please contact 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) immediately.

COVID-19 Cyber Scams and Campaigns

26 March 2020
It has been observed that there are multiple malicious campaigns taking advantage of the current COVID-19 situation by spreading malware through emails with malicious attachments and links to phishing websites related to the COVID-19 topic. The objective of these campaigns are to trick the victims into revealing sensitive information such as online banking login credentials.

How to protect yourself.

• Always verify any information received from emails, text messages and social media posts regarding COVID-19
• Stay alert. Do not reveal personal or financial information in an email and do not respond to email solicitations for this information.
• Do not click on links that that are provided to you which are related to COVID-19.
• Use trusted sources such as legitimate, government websites for up-to-date, fact-based information about COVID-19.

Security Alerts

Malicious Cyber Activities Leveraging COVID-19 Situation

5 March 2020
There are reports of cases whereby cyber criminals are leveraging the COVID-19 situation to conduct malicious cyber activities through means such as email or messages to entice users to open malicious attachments by offering more information related to the COVID-19 situation. The malicious files in these emails or messages could be masked under the guise of links, pdf, mp4 or docx files with link or file names that are associated with the COVID-19 situation such as how to protect yourself from the virus, updates on the threat or virus detection procedures.  These files could host a range of threats from Trojans to worms which are capable of destroying, blocking, modifying or copying data, as well as interfering with the operation of the computers or computer networks, when users click on the links or open the attachments.

How to protect yourself

• Do not click on links or open attachments found in suspicious-looking emails or messages.
• Refer to official sources such as the Ministry of Health (MOH) website for the latest information on the COVID-19 situation.

Phone Scams

24 January 2020
It has been brought to our attention that there is a party or parties involved in making phishing telephone calls purporting to be representing Maybank. The caller impersonates a Maybank staff and informs the victim that his/her account will be closed within 10 minutes, and requests for the victim to provide personal information (e.g. NRIC/Passport number, bank account number and name of account holder) if he/she does not wish for the account to be closed. We wish to alert the public to phone scams and customers should never divulge their personal information to unsolicited callers. Maybank will not request for customers’ PIN, password or OTP through phone call, email or SMS. Do not proceed with the call if you suspect that the caller is asking you to conduct suspicious transactions.

How to protect yourself

• Stay alert. Never provide personal or confidential banking account information to unsolicited callers.
• Alert Maybank if you receive an email, letter or a telephone call requesting for personal or confidential banking account information.
• Contact us at 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to verify the contents of the call.

Customer Advisory (SMS Scams)

14 January 2020
We have received reports of ongoing SMS scams impersonating Maybank to offer loans.  If the victim contacts the number provided in the SMS, the scammer may attempt to impersonate Maybank staff in order to steal personal information (e.g. NRIC details) from the victim.

Samples of the SMS – January 2020  

How to protect yourself from scams

• Be alert and always verify the details in the messages from Maybank. Always check that the message reflects your intended actions and do not proceed or authorise suspicious transactions.
• Contact us at 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) to verify the contents of the SMS.
• Never reply to unsolicited SMS or emails. Responses to such SMS or emails could be used by fraudsters to socially engineer information or trick users into performing unwanted actions. Be cautious of “unsubscribe” links as these may also be used to socially engineer information as well.

Technical Support Scams

There are reports of cases whereby the call scammers contact the members of the public claiming to be investigating a cybersecurity issue. The victims were led to believe that they were talking to a staff of the Cyber Security Agency of Singapore (CSA) or a government agency that deals with cybersecurity. The scammers would then attempt to trick victims into logging into their online banking accounts and transferring money to them. We would like to share that government agencies will never request for access to your online banking accounts or ask for transfers of money over the phone.

How to protect yourself from scams

• Beware of any unsolicited calls from persons claiming to be a staff of a government agency.
• Do not install any applications suggested by the scammers.
• Do not panic and do not follow any instructions to install any applications, type the commands into your computer or log into your online banking accounts.
• Ignore the calls and the callers' instructions.
• Call us immediately at 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) if you notice any unknown transactions appearing on your account or if you suspect that you have been a victim of fraud.

Reference
SingCERT, last retrieved on 06/12/2019

Business Email Scams

There are email scams targeting businesses by impersonating the businesses' CEOs, business partners or suppliers. Scammers used spoofed email accounts to pose as business partners, requesting for funds. Victims were led to believe that they had received genuine requests and transferred funds to the requested bank accounts.

Spoofed email addresses often include slight misspellings or replacement of letters, which may not be obvious at first glance.

Genuine email address	Spoofed email address
123@gmail.com	I23@gmail.com
abc@deshipping.com	abc@deshpping.com
lisa@faber.com.cn	lisa@faber-cn.com

Some scams may also imitate legitimate emails sent by businesses using logos, adding links to the business websites or adopting the business messaging formats.

What to do next?

• Educate your employees.
• Update your business operating system with new security patches regularly.
• Ensure that the sender's email address is genuine.
• Verify such requests by using the sender's official contact details, instead of using the contact details provided in the emails.

Reference
Channel News Asia, last retrieved on 26/11/2019, 1747hrs GMT+8.

Debt Collection, Kidnapping and Other Scams

Debt Collection Scams

It has been brought to our attention that there is a party or parties involved in making telephone calls to members of the public, purporting to be representing Maybank, collecting debts on behalf of the Bank. The caller(s) will claim that the customer has outstanding amounts owing to the Bank due to their spending on their credit cards, and request that they pay up the money by cheque. Most of these calls are made via an Overseas Number and on some occasions, the party has identified himself as a "Steven Lim Mun Kin" or "Vincent Tan".
We wish to inform members of the public that these calls are not made by representatives of Maybank and these people are not Maybank staff. You may make a report to the Police if you should receive similar calls.

Kidnapping scams

There has been a rise in the number of cases reported on people being threatened with the lives of their loved ones in exchange for ransom money which the "kidnappers" demand to be transferred to an overseas bank account. These "kidnap conmen" would insist that the victims continue with the telephone conversation and not hang up their mobile phones for as long as the transfer has not been completed. Under duress, for fear that the lives of their loved ones may really be threatened, the victims give in to the conmen's request.
On 4 Sep 2007, one such incident occurred at Maybank@JurongEast. The staff attending to the victim then was vigilant and calm, hence, managed to understand the situation by asking the victim to scribble useful information on a piece of paper. The conmen's plans were then thwarted after the victim's son contacted her upon being alerted by our staff.

Other scams

Whatever the reasons the conmen have, the ultimate request on the victims will be to transfer their hard-earned money to another account. Some of the ploys used to entice or coerce the victims to comply include:

• Lure of fictitious lottery or lucky draw winnings
• Lure of fortune from a fictitious will
• Prey on fear of the law (posing as police officers or Supreme Court staff)

Please do not hesitate to call us on 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (Overseas) if you need further clarification.

SMS Scams

It has been reported widely that an ongoing scam targets victims not familiar with Internet Banking (IB) and its related controls.

• A potential victim receives an SMS congratulatory text or call to inform that they have won prizes from a well-known organisation
• He/She is then tricked into applying for Internet Banking features for his/her account using the fraudster's mobile number
• Victim is also asked to reveal the User ID and Password to the fraudster
• With the Internet Banking User ID and Password, the fraudster can then log into the victim's account and receive a One-Time Password (OTP) via SMS (as a result of applying for IB features with the fraudster's mobile number) to perform illegal transactions

Please be reminded that all information used to perform banking transactions should never be disclosed to any unknown parties. When applying for Internet Banking, customers should use ONLY their personal mobile number for registration and to receive their SMS OTP.
Customers should always contact the Bank when in doubt and to report any discrepancies.

Phishing - SingHealth Data Breach

24 July 2018
SingHealth reported that its database containing about 1.5 million patient particulars and outpatient dispensed medicines had been the target of a major cyberattack. The patient data stolen included information such as name, NRIC number, addresses, gender, race and date of birth. Information on the dispensed medicines of about 160,000 of these patients had also been stolen.

Customers are advised to be cautious of the potential use of these stolen credentials by hackers to conduct social engineering and phishing scams on your financial account. Such scams utilize personally identifiable information to appear legitimate.

How to protect yourself

• Stay alert. Never provide personal or banking information to unsolicited callers.
• Never disclose any sensitive personal information (such as login passwords or one-time passwords) over the phone or email. Maybank will never request such information from our customers.
• Call Maybank immediately if you are in any doubt of a call, SMS or email’s authenticity. Contact our Customer Relationship Executives immediately at 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (if you are calling from overseas), if you receive such calls.

Phishing - SMS Phishing Alert

20 June 2018
We have been alerted of a phishing SMS that leads to phishing webpages targeting Maybank customers. If a customer receives the phishing SMS and clicks on the link, he/she will be redirected to a page requesting for user ID and PIN combinations, credit card number, expiration date and CVVs. Such websites are used to conduct card not present transactions but may also be utilized in order to steal personally identifiable data or promote fraudulent applications.

Sample of the malicious SMS. This is NOT from Maybank.

How to protect yourself

• Be alert. Minimize clicking on links in SMS as these may not be legitimate.
• Ensure you are using the official Maybank website. Always type the Maybank website URL (www.maybank2u.com.sg) directly into your web browser. If you are on mobile, consider using our official Maybank2u Mobile Banking (Maybank SG) App.
• Do not reply to unsolicited SMS. Responses to such SMS could be used by fraudsters to socially engineer information or trick users into performing unwanted actions.
• Provide your credit card details only if you are making a direct purchase. Always check that you intend to conduct a credit card transaction and do not provide an OTP to authorize payment if you are not.
• Maybank will never request for your PIN, password or OTP through SMS, phone call, or email. Should you have further queries, please do not hesitate to contact our Customer Relationship Executives on 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (if you are calling from overseas).

Phishing - Email Phishing Alert

25 May 2018
We have been alerted of a phishing email campaign impersonating the Monetary Authority of Singapore (MAS) recently with the following details:

Sender email information displayed: Monetary Authority of Singapore. info@mas.gov.sg

Summary of email information:
The email informs the recipient that Singapore banks have been attacked by hackers, and MAS has enacted a new law mandating all customers to update their details with the banks, as well as to register for insurance under the authority.
A link is provided for you to update your account.

Phishing details:
Upon clicking the email, the link will re-direct you to a spoofed MAS website. In the following page, it displays the logo of various banks for you to select. After clicking on the bank's logo, you will be taken to a spoofed internet banking page, prompting you to enter your user ID and password. Upon submission, it will prompt for a one-time-password which you will receive on your mobile device. The subsequent page will prompt you for your IC/Passport number, mobile phone number, and date of birth.

Potential impact:
The attacker may use your stolen information to conduct fraudulent transfers on your internet banking account or for fraudulent online purchases.

How to protect yourself

• Alert Maybank if you receive an email, letter, notification or a telephone call requesting for information relating to your PIN/access ID or username/password
• Do not provide your banking particulars, such as ID, password, bank account numbers, credit card or account details by email
• If you receive an email asking you to reactivate or update your account for any purpose or to provide personal account information, please contact Maybank to confirm the validity of the email
• For secured online banking access, always enter the URL address (www.maybank2u.com.sg) directly on your web browser.
• Should you have further queries, please do not hesitate to contact our Customer Relationship Executives on 1800-MAYBANK (1800-629 2265) or (65) 6533 5229 (if you are calling from overseas).

---

18 May 2018
There is a phishing email reported to be in circulation currently. Phishing emails are fraud attempts as the senders take on the identity of well-known companies such as banks or financial institutions to obtain personal information from the recipients of the email. These emails will often ask recipients to visit a fake website of a bank through links provided in the email, or ask for personal information such as credit card numbers or online banking IDs and passwords, in order to commit identity theft. They will then use the information they have acquired for illegal purposes or to perform unauthorised access to the recipient's online banking account.

How to protect yourself

• Alert Maybank if you receive an email, letter, notification or a telephone call requesting for information relating to your PIN/access ID or username/password
• Do not provide your banking particulars, such as ID, password, bank account numbers, credit card or account details by email
• If you receive an email asking you to reactivate or update your account for any purpose or to provide personal account information, please contact Maybank to confirm the validity of the email
• For secured online banking access, always enter the URL address (www.maybank2u.com.sg) directly on your web browser.
  Should you have further queries, please do not hesitate to contact our Customer Relationship Executives on 1800-
  MAYBANK (1800-629 2265) or (65) 6533 5229 (if you are calling from overseas).