Latest News

POSB Scam Asks Customers To Take ‘Survey’ Via Phishing Link, Bank Says Email Not Legit

New POSB Email Phishing Scam Promises Cash Reward Or Air Miles

It seems like a new scams emerges almost every day in Singapore, especially those linked to banks.

The dust had barely settled on the OCBC bank scam earlier this year when DBS Bank reported an SMS phishing scam targeting its customers.

A month after that, POSB customers have again been targeted by a scam, this time over email.

Source

It tells recipients to click on a link to take a survey, but the email isn’t legitimate, the bank warned.

Beware of phishing email

DBS alerted the public about the latest scam in a Facebook post on Friday (25 Feb), warning of a phishing email.

Source

The email contains a clickable link to a “POSB-PAssion Rewards 2022!” survey, and promises a possible cash reward upon completion of this “survey”.

This is not a legitimate email from POSB, the bank said.

Comes from non-DBS/POSB email address

The phishing email, which was seen by MS News, was from a sender named “PAssion POSB”, probably aiming to make recipients think it had something to do with the PAssion Card.

 

It also had the vague subject “Congratulations! Customer Satisfaction Survey”.

Screenshot of the phishing email

However, one telltale sign that all is not right was that the email address of the sender had nothing to do with DBS/POSB.

Instead, it had the “.jp” domain assigned to Japanese websites.

Source

While the content of the email even had the PAssion Card logo, it was riddled with grammatical errors – another sign that it’s dubious.

The email said the recipient had been “selected” as 1 of 500 “lucky customer” to take part in a survey.

To entice victims, it also indicated that they’ll get $110 after taking the “survey”.

Link redirects to phishing site

In a further advisory on its website, DBS said those who click on the link will be directed to a website that looks kinda like a legit survey.

However, the website address won’t be a valid DBS/POSB one.

Source

If that doesn’t set off alarm bells in your head, this surely should: The site will proceed to ask for personal details like date of birth, mobile number and credit card number, including expiration date and CVV.

Source

Do not, we repeat, do not provide this info.

If you do it, the next page will then ask for an SMS One-Time Password (OTP), according to DBS. This is disguised as a way to send the customer a “reward” in the form of 3,000 air miles or $110.

Source

“The scammer will exploit the stolen information to conduct unauthorised card transactions,” DBS said.

Thus, customers who’ve provided their personal info, including card details, to the website should contact the bank immediately.

They can call its anti-fraud hotline at 1800-339-6963, which operates 24/7.

No clickable links will be sent

DBS stated that they and POSB, which they operate, will not send customers emails/SMSes with clickable links, as per the new security measures rolled out in Jan.

Knowing this, customers should go directly to the bank’s website to verify any banking-related requests or offers.

Also, DBS and Government officials will never ask for info such as card details, CVV, OTPs, or Digital Token approvals.

Customers should thus not disclose such info to unverified sources, and avoid calling phone numbers, clicking links or scanning QR codes in unsolicited emails, SMS, or messaging apps.

Share scam prevention tips with friends & family

With the recent spate of scams wiping out millions from hundreds of unsuspecting victims, it’s important to keep updated over the latest scams in town.

Thus, be sure to also teach friends and family, especially those who’re not digitally savvy, of ways to protect themselves.

While we can always count upon law enforcement to have our back, the public also needs to play their part by staying alert and not falling for scams in the first place.

Have news you must share? Get in touch with us via email at news@mustsharenews.com.

Featured images adapted from Google Maps and DBS.

Jeremy Lee

Analog person making do with a digital world.

Recent Posts

Bloomberg issued POFMA order over S’pore GCB transactions article, Govt addresses falsehoods

False claims include that GCB transactions occur without government checks on beneficial owners' identities.

23 Dec 2024, 3:35 pm

Woman set on fire aboard New York subway train, suspect allegedly watches her burn

The suspect casually watched as the woman became consumed by flames.

23 Dec 2024, 3:14 pm

Elderly man pickpocketed on bus from JB to S’pore, loses S$450 & has S$800 charged to credit card

The thief left the wallet and more than RM200 behind, presumably to mislead the 72-year-old…

23 Dec 2024, 1:38 pm

SingPost fires 3 senior executives citing gross negligence, CEO & CFO to contest termination

Earlier this year, three managers were found to have made manual updates on a customer’s…

23 Dec 2024, 12:14 pm

Passenger on US flight slammed for bringing Great Dane as ’emotional support’ dog

On the other hand, some said they'd prefer sitting next to a massive dog than…

23 Dec 2024, 10:12 am