Singapore Police Warn Public of Surge in Phishing Scams Involving Impersonation of POSB

The Singapore Police Force (SPF) has issued a public advisory warning of a recent uptick in phishing scammers impersonating POSB. Since April 2025, at least 13 cases have been reported to authorities, with losses totaling at least $172,000.

Victims receive emails falsely claiming to be from POSB, notifying them that their mobile banking digital token has expired. The fraudulent emails instruct recipients to click an embedded URL (Uniform Resource Locator) link to “activate” or “update” their token.

Upon clicking the link, victims are redirected to a phishing website where they are prompted to enter banking credentials, card details, and One-Time Passwords (OTPs). Victims only realize they have been scammed after discovering unauthorized transactions—often in foreign currencies such as AED or IDR—on their bank accounts or cards.

SPF urges the public to remain vigilant and ignore urgent emails, SMS messages, or messages from non-SMS communication channels such as iMessage and Rich Communication Services (RCS) that claim to be from banks and contain clickable links.

“Your bank will never send you clickable links through email, SMS, or non-SMS message,” the advisory reads.

Below are the screenshots of fraudulent emails purportedly sent by POSB: