Police warn of fake GST Voucher app targeting Android users

SINGAPORE – The police have issued a warning about a new scam involving a fake Goods and Services Tax (GST) Voucher mobile app – the latest variant in scams that trick the public into downloading apps from third-party sites.

The police said on Friday that the scam has been making its rounds on social media, with posts made on Facebook and messages shared on platforms such as WhatsApp, encouraging Android phone users to download and sync the fake app with their bank accounts.

Victims are lured into downloading an Android Package Kit (APK) file labelled as “GST Voucher” to redeem GST vouchers, but, in reality, the file is malicious.

Under the Government’s GST Voucher scheme, the vouchers are disseminated via PayNow for those who have linked their NRICs to it. Those who have not will receive them via direct bank crediting.

For citizens who have neither provided their bank account details nor linked their NRICs to PayNow, they can withdraw the amount at OCBC Bank automated teller machines islandwide. This can be done only after they enter payment reference numbers sent to them from Aug 21, as well as their NRIC numbers, and after verification via facial recognition.

This can be done even without an OCBC account.

The police advise the public not to download any suspicious APK files, which could contain malware enabling scammers to remotely access and control the device and steal stored passwords. They also reminded the public of the dangers of downloading applications from third-party or dubious sites, which can lead to malware being installed on their devices.

To protect themselves from being scammed, people should install anti-virus apps on their devices and regularly update their operating systems and applications, said the police.

Apps should also be downloaded only from official app stores, they added.

Those who may have downloaded third-party apps and suspect that their phones are infected with malware are advised to switch their phone to flight mode, run an anti-virus scan, and check for unauthorised transactions.

If there are any found, they should be reported to the bank and the police.

In July, Android users were warned not to download any application via a link in an SMS claiming to be from the police’s Anti-Scam Centre.

The police said that since January, they have received more reports of Android devices being exposed to malware, which resulted in unauthorised transactions involving the victims’ bank accounts.

This occurred despite victims not disclosing their Internet banking credentials, one-time passwords or Singpass details to anyone.

Those who have any information on such crimes should contact the police hotline on 1800-255-0000 or submit it online at 

www.police.gov.sg/iwitness

For more information on scams, visit 

www.scamalert.sg

 or call the Anti-Scam Helpline on 1800-722-6688.