At least eight families lost more than $18,000 in September after scammers took over students’ WhatsApp accounts and posed as their children to sell fake youth exchange seats and AI enrichment courses, the Singapore Police Force said in a 28 September advisory.
How the script unfolds
Parents receive messages from numbers they associate with their child. The sender claims a coveted exchange programme or AI course requires immediate payment to hold a slot. Forged consent forms carry logos of schools and government agencies; some victims were told fees would be subsidised and refunded later.
Payments run through PayNow QR codes. When a transfer fails or a bank flags activity, scammers ask for a second payment, citing processing errors. Victims often discover the fraud only after calling their child on a voice line or receiving anti-scam alerts from DBS, OCBC or UOB.
Why schools and MOE names appear
Branding borrowed from legitimate institutions is designed to survive a quick parental glance. SPF stressed that ministries do not collect programme fees through personal PayNow QR codes sent over WhatsApp. Verified school trips bill through official portals or named vendors with invoice numbers parents can cross-check.
The AI-course hook rides on household anxiety about digital skills. No accredited MOE enrichment programme requires same-day PayNow transfers from a hijacked chat thread.
What SPF and ScamShield advise
Police tell parents to verify unusual money requests by calling their child on a known number—not replying inside the same WhatsApp thread. ScamShield’s 1799 helpline and the ScamShield app remain the first stop when a QR payment request arrives from a “child” asking for secrecy.
Students should enable two-step verification on WhatsApp and report compromised accounts immediately. SPF’s ACT framework—Add safeguards, Check carefully, Tell authorities—applies even when the sender sounds like family.
Broader impersonation trend
The youth-exchange variant sits alongside heavier government-official scams involving fake police pop-ups and Harvey Norman impersonation calls that have drained millions this year. Rajesh Pillai’s security desk will continue tracking whether compromised student accounts cluster around school holiday travel periods when parents expect overseas bills.
Banks that pause suspicious PayNow outflows are doing more than customer service; they are often the backstop when forged forms look credible. Parents should treat bank friction as a feature, not an inconvenience.
Bank friction and recovery
Several victims told police that PayNow transfers completed before fraud departments intervened because QR codes were scanned inside trusted chat threads. Banks have tightened cooling-off prompts on new payees, but social engineering that mimics a child’s tone still bypasses rule-based filters.
Recovery rates for authorised scam payments remain low; SPF’s emphasis is on prevention and rapid reporting through ScamShield. Schools are circulating reminders that overseas trip deposits never arrive as personal QR requests hours before departure.