// Adds dimensions UUID, Author and Topic into GA4
Sunday, May 3, 2026
26.5 C
Singapore

OCBC clients lost S$140,000 in 10 days, warns of SMS phishing scam

Singapore — A sharp rise in phishing scam cases, with customers losing a total of S$140,000 in a mere 10 days, has prompted OCBC Bank to warn its clients to be extra careful.

“For the month of December so far, OCBC Bank has detected and initiated the takedown of 45 phishing websites, about eight times more than the average takedown requests every month,” the bank said on Thursday.

It related that mobile phone users had received unsolicited SMSes purporting to be from OCBC, claiming there were issues with their bank accounts or credit cards.

“The SMSes contain a link to a fraudulent website disguised as a legitimate bank website requesting banking information and passwords,” OCBC said in a report in The Straits Times.

The bank confirmed it would never send its clients an SMS to inform them of account closure or temporary lockout from their accounts.

Between Dec 8 and 17, 26 customers lost a total of S$140,000 to the scam.

A quick scan of Facebook shows multiple users warning others of the ongoing phishing scam.

One user, Gina Koh, said that the scammers were “getting better” because the SMS looks like the system-generated message from the genuine OCBC for one-time passwords.

She attached a sample phishing SMS and noted that the difference was in the website. The genuine message from OCBC comes from “ocbc.com”, while the scammers use  “ocbc-payee.com” as the website.

268839970 10158842432412055 3793592924234533862 n
Photo: FB screengrab/Gina Koh
268996578 10158842432532055 8492432403375297817 n
Photo: FB screengrab/Gina Koh
267701602 10158842432592055 2665027366197412139 n
Photo: FB screengrab/Gina Koh

Ms Koh added that the phishing page would appear as if it’s really from OCBC with a login and IP address section.

Separately, in a press release, the Singapore Police Force said that it has seen an increasing trend in phishing scams in which scammers impersonate banks.

It advises everyone to follow preventive measures such as:

  • Not clicking dubious URL links provided in unsolicited text messages and online advertisements
  • Verifying the authenticity of the information with the official website or sources
  • Never disclose personal or Internet banking details and OTPs to anyone
  • Reporting any fraudulent transactions to your bank immediately

OCBC said that those using iPhones could download the ScamShield app, which blocks unsolicited messages and calls.

When in doubt, customers can call OCBC at 1800-363-3333, or +65-6363-3333, if they happen to be overseas.

Meanwhile, those with any information relating to such crimes should call the Police Hotline at 1800-255-0000, or submit information online at www.police.gov.sg/iwitness /TISG

Read related: Scammers with faulty police disguise level up in latest attempt after taking public “constructive” criticisms

Scammers with faulty police disguise level up in latest attempt after taking public “constructive” criticisms

 

- Advertisement -

Hot this week

You can now buy designer perfume for S$1 from vending machines in Singapore

Perfume vending machines are now available at Marina Square (L2), Downtown East E!Avenue (L1), and Bukit Panjang Plaza (L1). For S$1, you get 2 spritzes of either English Pear & Freesia Cologne by...

Beyond the price tag: Why the pasar malam remains Malaysia’s greatest social anchor

It explains how Malaysia’s pasar malam and hawker culture remain relevant in 2026 despite rising costs, as they continue to serve as both an affordable livelihood option and an important social an...

Popular Categories

document.addEventListener("DOMContentLoaded", () => { const trigger = document.getElementById("ads-trigger"); if ('IntersectionObserver' in window && trigger) { const observer = new IntersectionObserver((entries, observer) => { entries.forEach(entry => { if (entry.isIntersecting) { lazyLoader(); // You should define lazyLoader() elsewhere or inline here observer.unobserve(entry.target); // Run once } }); }, { rootMargin: '800px', threshold: 0.1 }); observer.observe(trigger); } else { // Fallback setTimeout(lazyLoader, 3000); } });
// //
Enable Notifications OK No thanks