Authorities warn of a new scam involving the manipulation of digital identity documents to open fraudulent payment service accounts. Scammers are altering IC softcopies, bypassing facial liveness detection, and using accomplices to pass verification checks. Financial institutions are increasing security measures to combat this evolving threat.
Authorities have issued a warning regarding a sophisticated new method employed by scammers to illicitly establish accounts with payment service providers. The modus operandi involves the manipulation of digital identification documents, specifically focusing on altering soft copies of identity cards (ICs). Scammers are exploiting digital tools to replace the original facial image on the IC softcopy with a different facial image.
This doctored copy is then submitted to payment service providers (PSPs) to open new accounts. These accounts are subsequently used for a range of illegal activities, highlighting the evolving nature of cybercrime and the importance of robust security measures. The police have emphasized that this method underscores the need for vigilance and a multi-layered approach to identity verification. The affected PSPs have been alerted and have already begun to implement more stringent security protocols to counter these fraudulent activities. This proactive response by both law enforcement and financial institutions is crucial in preventing further exploitation of this vulnerability. The authorities also highlighted that those who alter an electronic record for the purpose of cheating can face prosecution.\The core of the scam revolves around the clever circumvention of facial liveness detection, a security measure commonly used by PSPs to verify the authenticity of individuals. However, the scammers have devised a method to bypass this security layer. After submitting the doctored IC, they instruct an accomplice who closely resembles the altered image on the fraudulent IC to undergo the facial liveness checks. This allows the accomplice to successfully pass the superficial checks designed to determine if a presented image is a real person or a spoof. The police indicated that some of the compromised ICs originated from victims of prior scams. This fact is significant as it suggests that scammers are actively compiling databases of personal information, thus magnifying the potential impact of their schemes. This emphasizes the need for individuals to be extremely cautious about sharing their personal information online. Moreover, the Monetary Authority of Singapore (MAS) has alerted all financial institutions of this new tactic, reinforcing the collaborative effort between regulatory bodies and financial institutions to combat fraud. The MAS's immediate response demonstrates the seriousness with which this emerging threat is being taken, highlighting the need for continual vigilance and adaptation to new methods used by cybercriminals.\The effectiveness of facial liveness verification versus facial liveness detection is also highlighted in this recent wave of scams. While facial liveness detection is a common practice used by businesses to ensure the user is an actual person and not a spoof or an AI-generated image or video, it has its limitations. The primary issue with sole reliance on facial liveness detection is the fact that the check is only being performed against the doctored document itself. Scammers can therefore circumvent these checks with the use of accomplices. However, facial liveness verification systems operate differently, using a trusted source that has already authenticated and stored the user's profile. These systems, for instance, check the provided image against a secure, verified database, such as the one maintained by Singpass. In the cases described, if the PSPs had used facial liveness verification, the accomplice would have failed the checks since their facial features would not have matched the original, verified profile in the secure database. This difference underscores the importance of choosing a robust identity verification system that links the user's current identity to a trusted record, making it substantially more difficult for scammers to succeed. The case underlines the importance of a multifaceted security approach to safeguard against the latest cybercrime tactics
Please follow us on Google to support usScam Identity Fraud Digital ID Facial Liveness Payment Services Cybercrime
Singapore Latest News, Singapore Headlines
Similar News: You can also read news stories similar to this one that we have collected from other news sources.
Two Malaysian Nationals Charged in Singapore Government Official Impersonation ScamTwo Malaysian men were arrested for their suspected involvement in a government official impersonation scam. They are due to be charged in court on Monday, November 10th. The scam involved impersonating officials from the Ministry of Law and the Monetary Authority of Singapore to defraud a victim of over $1 million and a large amount of gold.
Read more »
Restaurant Ibid Targeted by Online Extortion Scam, Chef Woo Wai Leong Speaks OutChef Woo Wai Leong, owner of Restaurant Ibid, was targeted by an online scam involving fake negative reviews and an extortion attempt. He is calling for small businesses to be aware of the scam and to unite against it.
Read more »
Chef Woo Wai Leong of Restaurant Ibid targeted by online review scamChef Woo Wai Leong, owner of Restaurant Ibid, was targeted by an alleged scammer who threatened to post negative reviews unless paid. The chef reported the incident to the police and has since received supportive reviews from customers.
Read more »
Man Jailed for Role as Dummy Director in Million-Dollar ScamA Singaporean man, enticed by quick money, became a dummy director for shell companies that were later used to process scam proceeds. He was sentenced to jail after also attempting to deposit a large cashier's order linked to scam funds.
Read more »
Police Warn of New WhatsApp Account Takeover Scam VariantThe Singapore Police Force is alerting the public to a new scam variant targeting WhatsApp accounts. Scammers are sending phishing links via SMS, prompting users to verify their accounts and gain access to their contacts to request fraudulent loans. The police advise the public to be vigilant and employ the ACT framework to protect themselves.
Read more »
Police Warn of New WhatsApp Scam Targeting User AccountsAuthorities are alerting the public to a new scam variant that targets WhatsApp users, employing phishing tactics to gain access to accounts. The scam involves SMS messages with phishing links that prompt victims to verify their accounts, leading to unauthorized access and fraudulent activities. Users are advised to take precautions, including using the ScamShield app and reporting suspicious activity.
Read more »