Countering Online Scams

Major retail banks in Singapore progressively phase out One-Time Passwords (OTPs) for bank account login

9 July 2024

MAS and The Association of Banks in Singapore (ABS) announced that major retail banks in Singapore would progressively phase out the use of OTPs for bank account login by customers who are digital token users. This measure strengthens resilience against phishing scams by making it harder for scammers to fraudulently access a customer's account and funds without the customer’s explicit authorisation using his mobile device.

Major retail banks to introduce Singpass Face Verification (SFV), further strengthening resilience against phishing scams

18 September 2024   

MAS and The Association of Banks in Singapore (ABS) announced that major retail banks in Singapore would progressively implement SFV to strengthen the digital token (DT) setup process for retail banking customers. SFV makes it more difficult for a scammer to take over a customer’s DT by setting it up on his own device using phished credentials such as an SMS, one-time passwords and/or bank card information.

Warnings on scams variants with a nexus to the financial sector 

Ongoing   

MAS and the Singapore Police Force (SPF) issued several joint media advisories to warn the public about upticks in multiple scam variants, including Government Official Impersonation Scams featuring the impersonation of officers from financial institutions and MAS, phishing scams involving the fraudulent provisioning of debit or credit cards into mobile wallets, and scams involving digital manipulation. MAS reminds the public to be vigilant and adopt precautionary measures against scammers.

Implementation of Shared Responsibility Framework

24 October 2024

MAS and the Infocomm Media Development Authority of Singapore (IMDA) announced the implementation of the Shared Responsibility Framework (SRF) for phishing scams which assigns financial institutions (FIs) and telecommunication companies (Telcos) relevant duties to mitigate phishing scams, and sets expectations of payouts to affected scam victims where these duties are breached. The SRF will operate as part of the broader suite of upstream and downstream measures that Government, FIs, Telcos, and other ecosystem players have progressively implemented to tackle scams in Singapore. Beyond the SRF, banks also have their respective discretionary goodwill frameworks to support scam victims. The Government will continue to work with FIs and Telcos on other anti-scam measures to keep pace with the evolving scam landscape.

As part of the rollout of the SRF, e-wallet providers have also been onboarded to FIDReC, to provide their customers an independent dispute resolution. Customers may also use FIDReC’s dispute resolution services for other non-SRF-related disputes with e-wallet providers as FIDReC’s services extend beyond SRF-related matters.