Credit Card & Banking Scams: Protecting Your Money and Cards
Credit card and banking scams aim to capture your card details, banking logins or OTPs, then move money or make purchases without your consent. Tactics include fake alerts, cloned websites, and social-engineering calls.
The strongest protections are simple habits: guard your OTP, monitor transactions, and verify any alert through your official banking app rather than the message that contacted you.
How the scam works
- 1A fake alert claims suspicious activity or a pending charge and urges you to act immediately.
- 2You are directed to a cloned login page or asked to confirm card details and an OTP by phone.
- 3Scammers use the captured details for online purchases or to add your card to a digital wallet.
- 4Some persuade you to approve a transaction or in-app prompt, framing it as cancelling a charge.
- 5Funds are moved quickly across accounts to make recovery harder.
Common warning signs
- Alerts demanding urgent action through a link or callback number.
- Requests for full card numbers, CVV, banking passwords or OTPs.
- Calls asking you to approve a payment to cancel or reverse it.
- Unexpected device or payee changes on your account.
- Small unfamiliar test charges followed by larger ones.
Real-life examples
The following scenarios are fictional and generalised for illustration only.
The cancel-the-charge call
A cardholder gets a call about a large overseas charge and is told to read out an OTP to cancel it. The OTP actually authorises adding her card to the scammer's wallet, leading to a string of purchases.
The fake fraud alert
An SMS warns of suspicious login activity and links to a page resembling the bank. After entering credentials and an OTP, the victim's funds are transferred to a new payee added by the scammer.
How to protect yourself
- Never share your OTP, CVV or banking password with anyone, including callers claiming to be your bank.
- Access your bank only through the official app or a typed address, not message links.
- Enable transaction alerts and review statements regularly.
- Set sensible card and transfer limits, and use disposable or virtual cards online where available.
- Verify any alert by calling the number on the back of your card.
- Keep your banking app and device updated.
What to do if you become a victim
- 1Call your bank immediately to freeze the card or account and dispute transactions.
- 2Change your banking password and revoke unknown devices or payees.
- 3Lodge a police report and call 1799.
- 4Monitor statements closely for further unauthorised activity.
- 5Replace compromised cards and update any saved payment details.
Frequently asked questions
Explore our financial education resources
Borrow smart and stay safe. Compare loan options through a trusted platform, and read our guides on responsible borrowing in Singapore.
Related articles
WhatsApp & SMS Scams: Hijacked Accounts and Spoofed Messages
From account-takeover codes to spoofed sender IDs and malicious links, learn how messaging scams operate and how to lock down your accounts.
ReadPhishing Scams: Fake Pages Built to Steal Your Logins
Phishing uses convincing fake emails, websites and login pages to capture passwords and OTPs. Learn to recognise and resist it.
ReadIdentity Theft: Protecting Your NRIC, Singpass and Personal Data
When criminals misuse your NRIC, Singpass or personal data they can open accounts and take loans in your name. Learn to prevent and respond.
Read