Collaborating with Messaging Service Providers to Prevent and Track Phishing Scams
Ministry of Home AffairsSpeakers
Summary
This question concerns Dr Wan Rizal’s inquiry regarding collaboration with messaging service providers to enhance security features against phishing scams and plans to bolster international cooperation against overseas scammers. Minister for Home Affairs K Shanmugam replied that the Singapore Police Force collaborates with Meta and Google to detect phishing sites and prevent fraudulent takeovers of messaging accounts. He highlighted that the Online Criminal Harms Act, operational from early 2024, will empower the Government to direct platforms to disable suspicious accounts and implement upstream safeguards. Public awareness efforts focus on the “Add, Check, Tell” strategy, encouraging users to enable two-step verification and remain vigilant against unusual requests from compromised contacts. Regarding international enforcement, Minister for Home Affairs K Shanmugam noted that the Ministry continues to work with foreign counterparts to track and apprehend scammers operating from abroad.
Transcript
6 Dr Wan Rizal asked the Minister for Home Affairs in light of the recent phishing scams involving at least 237 victims since November 2023 with total losses amounting to at least $606,000 as stated in the Police advisory of 13 November 2023 (a) whether the Ministry can provide insights on the collaboration with messaging service providers to ensure better security features and user education to prevent such scams; and (b) how is the Ministry planning to enhance international cooperation in tracking and apprehending scammers operating from overseas.
Mr K Shanmugam: In this recent scam variant, WhatsApp users who were attempting to access their account on their desktop had clicked on fake "WhatsApp Web" phishing websites. They then proceeded to scan the quick response (QR) code in these phishing websites via their WhatsApp account on their mobile device. In doing so, they inadvertently granted the scammers access to their WhatsApp account. The scammers then used the compromised WhatsApp accounts to impersonate the users, reach out to their family or friends and convinced them to transfer monies to the scammers' bank accounts or PayNow numbers.
To combat this scam variant, the Singapore Police Force (SPF) has been working closely with Meta to stop further abuse of the compromised WhatsApp accounts as soon as they are detected. SPF has also been working with online platforms, including Google, to introduce stronger safeguards to mitigate the risk of fraudulent takeover of online messaging accounts, such as through the pre-emptive detection and blocking of URLs linked to phishing sites.
In addition, SPF has worked with various stakeholders to issue advisories to the public to raise awareness of the latest scam variants and educate them on the precautionary measures that they can take to protect themselves. For example, in November 2023, the Ministry of Communications and Information disseminated an advisory on phishing scams involving the compromise of WhatsApp accounts via the Gov.sg's WhatsApp channel.
The Online Criminal Harms Act, which will be progressively operationalised from the first quarter of 2024, will allow the Government to direct online messaging platforms to disable access to accounts suspected to be involved in scams. The Government can also require designated online service providers to introduce upstream measures to safeguard against the misuse of online accounts.
The Member asked about international cooperation in tracking and apprehending scammers operating from overseas. The Ministry of Home Affairs recently provided a written reply to a Parliamentary Question in November 2023 on this issue. [Please refer to "Collaborations with Foreign Counterparts Against Scams", Official Report, 7 November 2023, Vol 95, Issue 116, Written Answers to Questions section.]
Ultimately, the best defence against scams is a discerning public. We urge the public to adopt precautionary measures through the three simple steps of "Add", "Check", "Tell".
First, "ADD" security features, such as enabling two-step verification on your WhatsApp and other online messaging accounts. Turn on your notification settings to be alerted to changes to linked devices.
Second, "CHECK" that you are on the official WhatsApp Web website. Check your “Settings” for unauthorised linked devices and be wary of unusual requests from your contacts whose accounts may be compromised.
Third, "TELL" your family and friends about your scam encounters and report any fraudulent activity to your bank and to the Police immediately.