Singapore police issued a warning on Aug 13 regarding a resurgence of a scam involving Telegram accounts being compromised after victims click on fake public transport voucher scheme links. According to the police, victims receive a Telegram message containing an infographic that allegedly verifies their eligibility for a public transport voucher, alongside a fraudulent link that directs them to a data-harvesting web page.
How the Telegram Public Transport Voucher Phishing Scam Operates
In this scam variant, clicking the fraudulent link leads users to a web page requesting personal details. These requested details include names, mobile numbers, NRIC numbers, and a Telegram verification code, commonly known as an OTP. Once scammers obtain the OTP, they can seize control of the victim’s Telegram account.
Compromised accounts are subsequently weaponized by bad actors to distribute similar phishing links to the victim’s contacts. Scammers also use hijacked accounts to add victims to chat groups promoting fraudulent investment schemes. Victims typically discover the breach only when their contacts report receiving unexpected messages or when they notice unauthorized activity on their Telegram accounts.
Did You Know? The Ministry of Transport (MOT) will never send messages via Telegram or issue requests requiring users to click on a link to claim a voucher. Information regarding legitimate public transport vouchers is communicated strictly through official MOT channels, such as its website or authorized social media accounts.
Protective Measures and Official Advice
To combat this ongoing scam trend, police have urged members of the public to take specific defensive actions. Users should enable two-step verification on their Telegram accounts immediately. Furthermore, individuals must never share verification codes or OTPs with anyone under any circumstances.
Authorities also advised the public to avoid giving personal details in response to unsolicited messages. Adopting these habits significantly reduces the likelihood of unauthorized account access.
Expert Insight: Phishing campaigns relying on social engineering frequently exploit familiar public assistance schemes to lower victims’ defenses. When government entities like the Ministry of Transport maintain rigid communication boundaries—such as refusing to utilize messaging applications like Telegram for voucher claims—public awareness remains the most effective barrier against account takeover operations.
Frequently Asked Questions
What triggers the Telegram account compromise in this scam?
Victims trigger the compromise by clicking on a fake public transport voucher scheme link, receiving a phishing infographic, and entering their personal details and Telegram verification code (OTP) on a fraudulent web page.
How do victims usually find out their account has been hacked?
Victims typically discover the breach when their contacts inform them about receiving unexpected messages, or when they spot unauthorized activity directly inside their Telegram application.
How does the Ministry of Transport distribute legitimate voucher information?
Legitimate public transport voucher details are communicated exclusively through official MOT channels, which include its official website and authorized social media accounts.
Are you or anyone you know planning to enable two-step verification on messaging apps following recent police advisories?
Related reading