[Huliwang]

Come to think of these scam cases, all the scammers needed are just three things to take over your account completely..

1. Phone number. This is obtained by trial and error by sending you a phishing message with a link for you to click. Once you click the link and responded, the scammers confirmed a fish is caught with this phone number. Once he got your phone number, he can imitate bank and send OTP to you by SMS.

2. User ID. This is obtained by you clicking his phishing link and logging into your OCBC or whatever bank fake bank site .

3. Password. Same as 2 above this is obtained by you clicking the fake bank link and logging in.

So that's it, your account is being hijacked. So the lesson learnt is dun and never click any link send by bank on SMS which I believe banks dun do this.

If the phishing message comes from email asking you to click a link, this will not expose your phone number and scammers cannot send fake OTP to you by SMS. ....