A new wave of tech support scams has surfaced in Singapore, leading to financial losses of at least S$17.5 million since January 2024, according to a joint release by the police and the Cyber Security Agency of Singapore (CSA) on 21 January. At least 198 cases have been reported.
Scammers lure victims through fake virus alerts displayed on their computer screens. These alerts claim the device is infected and offer a contact number for immediate support. The number often appears to be a local Singapore one, lending credibility to the scam.
When victims call, scammers impersonate representatives of well-known tech companies like Microsoft or Apple. They convince victims to install remote access applications such as Connect Wise, UltraViewer, or AnyDesk under the guise of adding firewalls to protect their devices.
Once granted remote access, scammers instruct victims to log into their online banking accounts. They then take control of the device to execute unauthorised transfers. If additional authentication is required, scammers manipulate victims into approving transactions using their digital tokens.
The police and CSA emphasised that legitimate messages from companies like Microsoft or Apple do not include phone numbers. Apple advises users to dismiss such pop-ups by closing the window or browser tab.
Prevention and response measures
To protect against such scams, users are advised to exit their browser immediately if they encounter pop-up alerts. If someone has already engaged with scammers, they should take the following steps:
- Delete any applications installed at the scammers’ direction.
- Perform a comprehensive anti-virus scan on their device.
- Change their online banking passwords.
- Remove any unauthorised payees added to their banking accounts.
- Contact their bank to report the incident and stop unauthorised transactions.
The growing sophistication of these scams underscores the importance of public awareness. Users should remain cautious and sceptical of unsolicited pop-ups, particularly those that include contact numbers or pressure them into immediate action.
