Written Reply to Parliamentary Question on Collaborating with Messaging Service Providers to Prevent Phishing Scams

Question:

Dr Wan Rizal: To ask the Minister for Home Affairs in light of the recent phishing scams involving at least 237 victims since November 2023 with total losses amounting to at least $606,000 as stated in the Police advisory of 13 November 2023, (a) whether the Ministry can provide insights on the collaboration with messaging service providers to ensure better security features and user education to prevent such scams; and (b) how is the Ministry planning to enhance international cooperation in tracking and apprehending scammers operating from overseas.

Answer:

Mr K Shanmugam, Minister for Home Affairs and Minister for Law:

1. In this recent scam variant, WhatsApp users who were attempting to access their account on their desktop had clicked on fake “WhatsApp Web” phishing websites. They then proceeded to scan the QR code in these phishing websites via their WhatsApp account on their mobile device. In doing so, they inadvertently granted the scammers access to their WhatsApp account. The scammers then used the compromised WhatsApp accounts to impersonate the users, reach out to their family or friends, and convinced them to transfer monies to the scammers’ bank accounts or PayNow numbers.

2. To combat this scam variant, the Singapore Police Force (SPF) has been working closely with Meta to stop further abuse of the compromised WhatsApp accounts, as soon as they are detected.

3. The SPF has also been working with online platforms, including Google, to introduce stronger safeguards to mitigate the risk of fraudulent takeover of online messaging accounts, such as through the pre-emptive detection and blocking of URLs linked to phishing sites.

4. In addition, the SPF has worked with various stakeholders to issue advisories to the public to raise awareness of the latest scam variants, and educate them on the precautionary measures that they can take to protect themselves. For example, in November 2023, the Ministry of Communications and Information disseminated an advisory on phishing scams involving the compromise of WhatsApp accounts via the Gov.sg WhatsApp channel.

5. The Online Criminal Harms Act, which will be progressively operationalised from the first quarter of 2024, will allow the Government to direct online messaging platforms to disable access to accounts suspected to be involved in scams. The Government can also require designated online service providers to introduce upstream measures to safeguard against the misuse of online accounts.

6. The Member asked about international cooperation in tracking and apprehending scammers operating from overseas. The Ministry of Home Affairs recently provided a written reply to a Parliamentary Question in November 2023 on this issue.

7. Ultimately, the best defence against scams is a discerning public. We urge the public to adopt precautionary measures through the three simple steps of “Add”, “Check”, “Tell”.

8. First, “ ADD ” security features, such as enabling two-step verification on your WhatsApp and other online messaging accounts. Turn on your notification settings to be alerted to changes to linked devices.

9. Second, “ CHECK ” that you are on the official WhatsApp Web website. Check your “Settings” for unauthorised linked devices, and be wary of unusual requests from your contacts whose accounts may be compromised.

10. Third, “ TELL ” your family and friends about your scam encounters, and report any fraudulent activity to your bank and to the Police immediately.