View
bg-orb

Consumer Social Intelligence Safety and Security Report 2024​

Key Topics

Singapore    |   01 Oct 2023 - 31 Mar 2024

Payment methods

Bank Cards Conversation

Social media users stressed vigilance against credit card fraud, advising regular statement checks, transaction alerts, site security awareness, and legal action if needed.

Share of Voice Bank Cards

N=4.3k

This chart shows the number of posts from the main search query that mentions specific bank cards and the % of conversations related to each type of card. Shares/Reposts are included. The % change in volumes is compared to the previous six months.

Vigilance and Prevention Techniques

  • Credit card statement vigilance

    People discuss checking credit card statements regularly to protect themselves against scammers who may start fraud by executing 1-2 small transactions every month.

  • Credit card fraud alert: Unauthorized transactions and prevention tips

    Reddit user discovered five unauthorized credit card transactions. Commenters stress regular statement checks, transaction alerts and being cautious with non-3D Secure sites.

  • Avoid saving card details on websites

    Forum user was defrauded via saved details on mobile service provider's site. Scammer deleted the account post-fraud. The victim advised removing saved details from the site and commenters recommended paying with digital wallets instead, thus bypassing the need for saving card details.

  • Bank denies chargeback: Reddit user seeks advice

    Reddit user seeks advice on unreversed stolen credit card amount. Bank refuses chargeback for physical transactions. Commenters suggest media outreach and legal assistance.

What People Are Saying

“What is the moral of the story? Just stop doing all online banking until the banks can guarantee and demonstrate it is safe. Start visiting personalised bank counters again. Trash all your bank apps. All they do is make you trade security for convenience. And the bank rarely suffers any consequences”

"Hackers can target phones from around the world. Hackers can slip in 1-2 small transactions every month or increase transaction amounts slightly and it will be difficult to track. I rather have a physical card. I keep $1XX in my card and my maximum loss is minimal."

Bank Cards - Fraud Types Conversation

Discussions highlighted emerging scams like ‘formjacking’, hotel reservation scams, and SMS spoofing. Also, phishing scams on Facebook remain a major concern, with losses totalling S$1.8M.

Share of Voice Bank Cards - Fraud Types

N=1.4k

This chart shows the number of posts from the main search query that mentions specific fraud types within the bank cards conversation and the % of conversations related to each type of fraud. Shares/Reposts are included. The % change in volumes is compared to the previous six months.

Scam Types

  • Credit cards fraud via ‘formjacking’

    Tech company shares X tips to prevent credit card fraud before Christmas: caution about public Wi-Fi and awareness of "formjacking“, whereby cybercriminals inject malicious code into websites to capture information such as credit card details entered on online forms.

  • Hotel reservation scam: Fake representatives sending phishing links

    Scammers impersonated hotel representatives, tricking victims into providing personal and credit card details via fake reservation links.

  • Phishing scams on Facebook and online marketplaces

    "Forum users discussed S$1.8M in losses from Facebook and online marketplace phishing scams. Users debated victim susceptibility and severity of punishment. The article recommended prevention techniques like multi-factor authentication and reporting suspicious activities."

  • Bank SMS spoofing scam

    Forum users discussed victims being tricked by scammers spoofing bank SMS, resulting in 103 victims losing S$161K. The messages contained links leading to fake banking websites where victims were tricked into entering their usernames, passwords and One-Time Passwords. Shared prevention tips included verifying messages and avoiding online banking.

What People Are Saying

"Scammers impersonated hotel representatives, tricking victims into providing personal and credit card details"

"Forum users discussed victims tricked by scammers spoofing bank SMS"

Bank Cards Conversation Over Time, Oct’23 to Mar’24

Credit cards dominated security discussions, as users shared fraud instances like denied chargebacks for stolen credit card changes and unauthorized debit transactions. Suggestions included regular statement checks and segregating debit accounts for protection.

Chart displays daily conversation volumes (including shares/reposts) on ‘Bank cards’ category query. This visualisation is used to identify key stories (either from the news or social media) that drove conversations and consumer interest.

Payment methods

Non-card Services Conversation

Conversations centered around a bank’s new security feature, criticism to malware responds, mobile banking safety tips, and police warnings against unverified software installation.

Share of Voice Non-card Services

N=3.7k

This chart shows the number of posts from the main search query that mentions specific non-card services and the % of conversations related to each type of service. Shares/Reposts are included. The % change in volumes is compared to the previous six months.

* Online banking refers to A2A (account to account) transfer using internet, including PayNow/Paylah
** Bank transfer refers to offline banking

Vigilance and Prevention Techniques

  • Bank’s new security feature sparks customer feedback

    Bank introduces new security feature: three security questions for verifying user’s identity for online banking enterprise users. Comments highlight technical issues and customer service concerns.

  • Bank’s alleged malware response criticized on Reddit

    Reddit discusses bank's alleged lax response to S$10K fraud transfer complaint amid malware concerns. Suggestions include account freezing and better training of bank’s support staff.

  • Mobile banking safety tips for online marketplaces

    Forum users share mobile banking safety tips for online marketplace: avoid sharing email, watch for suspicious accounts and being cautious of links.

  • Bank stops scam transaction; police warn against unverified software

    Bank blocks large scam transaction, freezes scammer-controlled accounts. Police warn against installing software from unverified sources.

  • Police and Banks Collaborate to Prevent Over S$69 Million in Scam Losses

    Singapore's Anti-Scam Centre collaborated with four banks and used RPA technology to issue SMS alerts, preventing numerous scam victims from losing S$69 million.

What People Are Saying

"As we continue our fight against fraud, fraudsters are no doubt adopting more intricate and sophisticated tactics to deceive their targets. This underscores the importance of continuous training and heightened vigilance — bank’s Senior Relationship Manager."

Victim faced an identity theft issue involving a mistaken PayPal transaction:
“so im involved in a identity theft with [payment platform] at the moment. so someone send me "free money" but then someone else come up and press claim against me for said money. thou the disputed amt is the same, the person are totally different.”

Non-card Services - Fraud Types Conversation

Consumers discuss phishing scams, including a fake website mimicking a fast-food chain resulting in a S$27K loss, a Facebook ad phishing scam leading to a S$150K fraud, as well as mobile security vulnerabilities and payment scams on mobile banking apps

Share of Voice Non-card Services - Fraud Types

N=1.0k

This chart shows the number of posts from the main search query that mentions specific fraud types within the non-card services and the % of conversations related to each type of fraud. Shares/Reposts are included. The % change in volumes is compared to the previous six months.

Scam Types

  • Phishing scam – Fake website and social media ads

    Consumers discuss new phishing scam involving fake website mimicking top fast-food chain's website which resulted in a total loss of S$27K. Victims were tricked into placing orders and entering credit card details on these fraudulent sites. Company advises verifying website URLs, avoiding sponsored Google ads.
    Reddit users discuss Facebook ad phishing scam targeting organic egg buyers to enter bank login details, resulting in S$150K fraud. Emphasis on public education to prevent such incidents.

  • Forum debates mobile security: Android vs. iPhone vulnerability

    Forum debates mobile security after a victim downloaded a malware file, raised concerns about Android's vulnerability compared to iPhones and emphasised user responsibility in preventing scams. Suggestions for enhanced bank security like physical tokens were discussed. Users emphasize personal responsibility and expect stronger bank protocols.

  • Payment scam on mobile banking application

    A forum user shared an experience of being asked for authorisation for a payment on their mobile banking app. They denied the payment and contacted customer service and were informed that it was likely a scam attempt. Commenters shared similar experiences.

What People Are Saying

"Anyway, I recently had a "scare" too - my [bank name] mobile app wanted me to authorize a foreign in-person payment at some family mart in don't know where for SKR500+ Of course, I denied the payment and I called into the hotline - the CSO acted like nothing happened and said it's scammers just fishing for credit cards with loopholes and because of their security"

"Fake Website Scams - Victims were tricked into placing orders on fake food chain website"

Non-card Services Conversation Over Time, Oct’23 To Mar’24

Online banking saw spikes after a 68-year-old lost S$72K to a malware-infected app, debates on security methods, and the arrest of seven in SMS phishing scams, prompting calls for stricter penalties.

Chart displays daily conversation volumes (including shares/reposts) on ‘Non-card services’ category query. This visualisation is used to identify key stories (either from the news or social media) that drove conversations and consumer interest.

Singapore Frauds/Scams Related to Cyber Attacks, Oct’23 to Mar’24

Concerns about cyber attacks on banking customers prompted analysis of cyber security threats in Singapore’s banking industry.

Cyber Attack Events on Banks in Singapore1

Cyber Attack Methods on Banks¹

Source:
  1. Mastercard Cyber Insights Data. Based on data for the period Oct 2023 – Mar 2024
  2. Attack patterns within this category focus on the manipulation and exploitation of people using e-mails.
  3. Malware performs undesirable operations such as data theft or some other type of computer compromise. Some of the main types of malware include trojans, viruses, worms and spyware.
  4. Ransomware refers to a type of malware that infects the computer systems of users and manipulates the infected system in a way that the victim cannot (partially or fully) use it and the data stored on it.
  5. Others include mobile device attacks, web phishing, pretexting, supply chain attacks, command and control and persistence techniques.

Cyber attacks dominated discussions as a prevalent type of fraud

  • There were a total of 322 attacks in Oct 2023- Mar 2024 on banks in Singapore, 52% of which were executed through malware, email phishing and ransomware techniques.

  • Out of all the fraud type discussions for Bank Cards and Non-Card services , ~ 60% were related to cyber attacks (38% in bank cards, 86% in non card services). 85% of cyber attack discussions under bank card services were associated with credit cards, while 55% of cyber attack discussions under non- bank card services were related to Online Banking.

  • 80% of the cyber attacks are found within online news and are primarily associated with attacks on banking institution and infrastructure. These attacks often capture fraud that boasts a high level of sophistication, through compromising or impersonating organizations and businesses.

Best practices that can be deployed by banks to enhance cyber controls:

  • Establish a non-negotiable cybersecurity culture by strengthening awareness and training program.
  • Collect, monitor, and analyze information to build cyber intelligence to make informed data backed security decisions.
  • Establish a program to allow you to manage & monitor your critical third parties to prevent their risk becoming your risk.
  • Effective management of patches and vulnerabilities.

Get More Information

Get More Information

Your message sent successfully!

Message Submitted!

We'll get back to you promptly with a response.