5 Scams Hitting Singapore and Malaysia Right Now (and How to Stop Each One)
Scams aren't some distant threat happening to other people. In Singapore and Malaysia right now, ordinary people are losing money every single day to schemes that are getting cleverer and harder to spot. The good news: almost all of them rely on the same handful of tricks. Once you can recognize the pattern, you become very hard to fool.
Here are the scams actually circulating in our region right now — and exactly how to shut each one down.
1. The "failed parcel delivery" text
You get a WhatsApp message or SMS saying a parcel couldn't be delivered — supposedly from SingPost, a courier, or a delivery service. It asks you to click a link to "reschedule" or "update your details." This exact scam has been actively reported, with victims directed to fake websites that steal their banking and card details.
How to shut it down: Never click delivery links in messages. If you're expecting a parcel, go directly to the courier's official app or website and check the tracking number there. Real couriers don't need your banking details to redeliver anything.
2. The "send me the OTP, it was sent to you by mistake"
A message comes from someone in your contacts — a friend, a family member. They say a one-time password (OTP) was accidentally sent to your number and ask you to forward it. The catch: their account is already hijacked, and that OTP is the key to taking over your WhatsApp next.
Once they're in, they log you out and run the same trick on everyone in your contact list. Authorities have flagged this exact method in our region.
How to shut it down: Never share an OTP with anyone — ever. No legitimate person or company will ask for it. An OTP sent to your phone is for you alone. If a friend asks for one, their account is compromised; message them another way to warn them.
3. The fake CEO or boss on WhatsApp
You receive a WhatsApp message from someone using your CEO's name and photo (both easily found online). They're friendly but urgent — they need you to buy gift cards, transfer funds, or handle a "confidential" payment quickly. In some cases scammers even run Zoom calls using digitally altered appearances to impersonate executives. Losses from this scam have run into the millions.
How to shut it down: Any unexpected request involving money or urgency from a "boss" on a messaging app deserves suspicion. Verify through a known channel — call them on their real number, or check in person. Real executives don't conduct surprise financial transactions over WhatsApp.
4. Investment "opportunities" that look too good
These spread through Facebook, WhatsApp, and Telegram, often dressed up as legitimate investment firms with slick websites and fake testimonials. They lean hard on urgency — "limited-time offer," "guaranteed returns," "only a few spots left." The returns are real at first (small payouts to build trust), then your money vanishes.
How to shut it down: Guaranteed high returns don't exist — that's the oldest rule in finance. Check whether the company is licensed with the relevant authority (MAS in Singapore, Securities Commission in Malaysia). If you feel rushed, that pressure is the scam working on you.
5. The WhatsApp account "verification" link
An SMS claims there's a problem with your WhatsApp account and you must verify it through a link. The link leads to a fake WhatsApp page designed to capture what scammers need to take over your account.
How to shut it down: WhatsApp doesn't send account warnings by SMS with links. Ignore these entirely. To genuinely secure your WhatsApp, open the app yourself and turn on two-step verification in Settings → Account.
The one pattern behind all of them
Notice what every single scam above has in common:
- Urgency — "act now," "your account will be closed," "limited time"
- A link or a request — click here, send the code, transfer the money
- Impersonation — pretending to be someone you trust
When you feel rushed to click, send, or pay — that feeling is the warning sign. Scammers manufacture urgency precisely because it stops you from thinking clearly. The single most powerful anti-scam habit is simply this: slow down. Real organizations don't mind if you take a moment to verify. Only scammers need you to act before you think.
What to do if you're unsure
| Situation | What to do |
|---|---|
| Got a suspicious message? | Don't click. Verify through official channels. |
| Asked for an OTP or password? | Never share it. It's always a scam. |
| Feeling rushed to pay or click? | Stop. Urgency is the red flag. |
| In Singapore and unsure? | Call the ScamShield Helpline at 1799. |
| Already sent money? | Contact your bank immediately to freeze transactions. |
The bottom line
Scammers are counting on two things: that you're busy, and that you'll react before you reflect. Take those away and most scams simply fall apart. You don't need to memorize every variation — you just need to recognize the three-part pattern of urgency, a request, and impersonation.
The next time a message makes your heart rate jump, pause. That pause is your best defense.
Share this with the people in your life most likely to be targeted — older relatives especially. A two-minute read could save someone you love from a devastating loss.
Written by a cybersecurity professional working in Identity & Access Management in Singapore. LockItDown.blog explains digital security for real people — no jargon, no fear, just fixes.