[sgbuffett]

If that is the case, then I think PAP shud step in and hold the Bank and Telco responsible and make them compensate the victims on a 50-50 basis or hold a COP to apportion percentage of responsibility. ....

Customers should be compensated 100% for following.

1. Scammers made use of OCBC banking features to carry out the scam- movement of digital  token to another device

2. The sms came in via the same chain as official OCBC sms.

3.  Delay of sms notification exploits flaws in OCBC -telecom interface system.

Customers are not responsible for above.

The sms based cyber attacks were reveal already in various cyber conferences but no fixed was made.

My conclusion is the system is designed not to protect against some of the low probability attacks leaving Customers vulnerable. Either this or they were not even aware.