Social Media Advertisement Phishing
Beware of Scammers using mobile malware to access and conduct fraudulent fund transfers from your bank account. Scammers may use attractive offers, discounts, and promotions to encourage you to download and install third-party applications via unofficial app stores, web links, email attachments, or WhatsApp file downloads.
The scammer or the app will ask for certain permissions, such as:
- Accessibility services.
- Change your SMS app to the newly installed app.
- View and send SMSes.
- Granting full control over your device.
Once these malicious apps are installed, the malicious apps grant the scammers remote access to your phone. With this remote access to your mobile device and your login credentials, the scammer will take over your phone and conduct unauthorized transactions such as changing to your transfer limits, adding payee and make fund transfer using your bank account.
Social Media Advertisement Phishing
Remember that if a deal seems too good to be true, it often is.
- Be wary of deals that seem too good to be true, such as unbelievably low prices on iPhones, durians, or services like cleaning or pet grooming. Scammers often prey on your emotions with these enticing offers through ads, emails, SMS, or WhatsApp messages.
Only download mobile apps from official app stores like Google Play Store and Apple App Store.
- Official app stores have security measures to minimize your risk of installing a malicious app. However, always check the reviews and ratings of apps to ensure their trustworthiness. Never sideload apps from third-party websites, emails, SMSes, or social media.
Pay attention to the permissions an app asks for and use a reputable mobile security software.
- Think twice if an app requests accessibility permissions, full control over your device, or access to sensitive information like SMS and emails. These requests are often red flags for malicious activities. Consider using reputable mobile security software to detect and block any malicious apps or alert you to potential risks.
If you suspect that your phone is compromised by malware, do this immediately:
- Turn on airplane mode on your phone or turn off your phone.
- Call DBS immediately so we may help you.
Customers are advised to be mindful of such scams
Customers are reminded to check that they're on DBS's official websites and social media accounts or use DBS's official mobile applications to conduct any DBS bank-related requests.
- DBS will not send you login links in our official SMSes.
- DBS will never ask you for your credit card details, CVV, SMS or email OTPs, or Digital Token approvals to verify or unlock your account.
- Do not call phone numbers, click on URL links, or scan QR codes in unsolicited emails, SMS, or other Messaging Application messages.
- Always verify the authenticity of the message with the official websites or sources.
- Never disclose your card numbers or OTPs to unverified sources. Bank staff and government officials will never request your card details, OTPs, or Digital Token Approvals through SMS, voice calls, or unofficial websites.
Report scams to protect your family, friends, and our community
If customers are concerned that they may have disclosed their personal information or have conducted any suspicious transactions through such channel, they should immediately contact the Police and DBS Bank (Hong Kong) Limited’s bogus calls enquiry hotline at (852) 2290 8345.