![](https://i.imgur.com/CLvY2jA.png")
10-01-2022, 12:01 AM
Being penniless and hungry on Christmas Day was not something that 33-year-old Trisha (not her real name), whose OCBC bank account was targeted by scammers through an SMS phishing scam on Christmas Eve last month, ever imagined could happen to her.
Like many others who received a text message disguised as an official message from the bank, the Singaporean clicked on a link in the fake message that exhorted her to activate the bank’s OneToken authentication tool.
It brought her to another fake website, but one that, to her, looked convincingly like the bank’s internet banking login page.
Within minutes of her keying in her account information and one-time password (OTP), the scammers hijacked her OCBC bank account and drained it of S$68,000 — her entire savings. The bank could not reverse the fraudulent transactions.
For someone who works in the finance industry, is well-read in bank protocols and regulations, and is IT savvy, Trisha could not believe that she had fallen prey to a phishing scam.
.........One couple in their 40s, whose joint savings account was wiped of S$80,000, admitted that while they were at fault for compromising their bank account by divulging their account name and bank access code, they did not give the scammers any OTP or security token information.
More at https://shrtco.de/jND6Yz
Like many others who received a text message disguised as an official message from the bank, the Singaporean clicked on a link in the fake message that exhorted her to activate the bank’s OneToken authentication tool.
It brought her to another fake website, but one that, to her, looked convincingly like the bank’s internet banking login page.
Within minutes of her keying in her account information and one-time password (OTP), the scammers hijacked her OCBC bank account and drained it of S$68,000 — her entire savings. The bank could not reverse the fraudulent transactions.
For someone who works in the finance industry, is well-read in bank protocols and regulations, and is IT savvy, Trisha could not believe that she had fallen prey to a phishing scam.
.........One couple in their 40s, whose joint savings account was wiped of S$80,000, admitted that while they were at fault for compromising their bank account by divulging their account name and bank access code, they did not give the scammers any OTP or security token information.
More at https://shrtco.de/jND6Yz
