Scammers are hijacking WhatsApp accounts and posing as friends, colleagues or children to ask for quick PayNow transfers, the Singapore Police Force said on 21 October, after at least 128 cases since September with reported losses of about S$249,000.
How the variant works
Victims receive messages from numbers they recognise. The sender claims to be stuck at a payment limit, unable to complete a bank transfer, or needing help to pay for an overseas exchange programme. Some messages mention artificial-intelligence courses or school fees to pressure parents.
Because the chat history may still show the contact’s name and photo, recipients skip the checks they would apply to a cold call. Transfers are often small enough to pass daily limits but repeat across a victim’s contact list once the account is compromised.
Protecting the account
The advisory urges users to turn on two-step verification in WhatsApp and to remove unknown linked devices. Compromises frequently start with phishing links or SIM swaps that let attackers clone the account on another phone.
ScamShield can filter suspicious SMSes and block known scam numbers; the 1799 helpline remains the first stop when a message feels off. If money has moved, banks should be contacted immediately to attempt recovery before proceeds are laundered overseas.
Enforcement backdrop
The warning lands days after a two-week islandwide operation netted 277 suspects linked to more than 883 scam files with about S$6.1 million in losses. Syndicate members face mandatory caning under recent amendments, while money mules may face banking restrictions under the Facility Restriction Framework.
WhatsApp impersonation is not new, but police data show a fresh spike tied to compromised accounts rather than spoofed numbers alone. That makes caller-ID style defences less useful; the fix is habit—call back on a known mobile line before paying.
What employers and schools can do
Human-resources teams should remind staff that urgent payment requests over chat are out of policy. Schools can tell parents that fee notices arrive through official portals, not personal WhatsApp threads. The cost of a two-minute verification call is trivial next to a four-figure loss.
Reporting channel
Witnesses can submit tips through the Police Hotline at 1800-255-0000 or the i-Witness portal. Reports help link compromised accounts to broader syndicate investigations even when individual transfers are small.
Businesses that reimburse staff for mistaken transfers should document the loss for insurance claims, though policies vary on social-engineering coverage. Training slides distributed after the 21 October advisory emphasise calling known mobile numbers rather than replying inside the same chat thread.
Reporting channel
Witnesses can submit tips through the Police Hotline at 1800-255-0000 or the i-Witness portal. Reports help link compromised accounts to broader syndicate investigations even when individual transfers are small.
Businesses that reimburse staff for mistaken transfers should document the loss for insurance claims, though policies vary on social-engineering coverage. Training slides distributed after the 21 October advisory emphasise calling known mobile numbers rather than replying inside the same chat thread.
