SINGAPORE - All OCBC Bank customers affected by a recent spate of SMS phishing scams will receive "full goodwill payouts" covering the amount they lost, the bank said in a statement on Wednesday (Jan 19).
More than 100 victims have already received the payouts and the bank will make arrangements for the payout with all remaining affected customers by next week, it added.
"We seek the understanding and patience of our customers as thorough validation of each case requires time to ensure accuracy. This process is necessary so that every case is fairly and properly treated," said OCBC group chief executive Helen Wong.
"We apologise for taking more time than expected to resolve the issues with our customers during this time of distress and anxiety," she said.
Ms Wong said the bank has contacted customers who might not be aware that their banking activities were susceptible to the phishing scam.
"This has helped to prevent another 200 and more customers from falling prey to the scam," she added.
Nearly 470 OCBC customers lost at least $8.5 million last December to the phishing scams. Some victims have lost life savings built up over the years for their families.
The victims received unsolicited SMS messages purporting to be from the bank, claiming there were issues with their banking accounts and they had to click on a link given in the message to resolve the issue.
The link led to fake bank websites and victims were asked to key in their Internet banking account login details.
Many victims of the latest scams were fooled because the SMS sender name “OCBC” was spoofed by the scammers, and the fake SMS messages were grouped in the same SMS thread with genuine ones sent previously by the bank for one-time passwords and transaction alerts.
OCBC said on Monday it had been making goodwill payments to affected customers since Jan 8.
In a separate statement on Monday, the Monetary Authority of Singapore said it would consider supervisory actions against OCBC and that it expected all customers to be treated fairly.
Some victims who are still awaiting their payouts told The Straits Times on Wednesday that they are happy with OCBC’s decision announced on the same day.
One of them, a 38-year-old man, said the bank should have told the victims about the full payments instead of making them wait in anticipation. The fintech professional lost about $10,000 via the scam.
“Also, why do they need a non-disclosure agreement if everyone is getting a full payout?” he said.
Another victim, Adam (not his real name), said: “Since the phishing scam is creating more awareness and causing people to lose confidence in OCBC, reimbursement is the only way to stop the negative impact on its brand image.”
The 36-year-old, who works in the home renovation industry, lost about $5,000. “I’m happy that all the victims can sleep well again, and put the traumatic experience to an end,” he added.
