Another woman falls for 'healthy meal' scam, in tears after bank balance goes from $20k to $0

Anjali Raguraman
The Straits Times
Aug 18, 2023

A food delivery order that was supposed to cost $58 ended up costing Ms Lim (not her real name) over $20,000 after scammers took control of her Android phone and banking details remotely.

Ms Lim, 54, lost almost $20,500 from a credit card account and two DBS Bank savings accounts in hours after she clicked on a link to download a third-party app, following which scammers then increased her credit limits and siphoned out all her money.

She had been looking for healthy tingkat (tiffin) meal delivery options for her elderly parents, and on July 26, she made an inquiry after seeing a Facebook advertisement from a company called Healthy Box.

The ad appeared to be from local caterer Grain, whom she had ordered from before. Hence, she was not suspicious.

She contacted the poster of the ad via Facebook Messenger, after which the conversation continued on WhatsApp at around noon that day.

After the person confirmed they were from Grain, they sent her a link via WhatsApp to download an app – one that she had not used before – to make the order. She then installed the app, which she said looked exactly like the mobile-enabled version of Grain’s site.

When asked to make payment of $58 via PayNow to another number, she received a message saying that the vendor had not installed PayNow and that she could send the vendor a link to do so.

She then messaged the person to inform them that their PayNow was not working and asked them to check on it, but did not receive a reply.

Ms Lim, who works in events and marketing, went back to her online meetings. About 90 minutes later, when taking a lunch break, she noticed that her phone felt “burning hot”.

When she switched it on, the phone showed a blank screen and it had automatically performed a factory reset. Not suspecting anything, she followed the sequence to reset the phone and set it up again, as one would with a new phone.

Later that day, when she attempted to use her ATM card to withdraw money at around 6pm, she realised that her bank balance was zero.

She called the DBS customer service hotline, and an officer confirmed that $20,493.87 had been transferred out of her account.

A few days later, she went to the DBS headquarters in Marina Bay, where a customer service officer uncovered some of what had transpired.

First, the credit limit on her POSB Everyday credit card had been increased from $14,500 to $18,500.

A total of $17,850 was transferred from the credit card account to her POSB Savings account. Another $1,553 was also transferred to this POSB account from a third account she owns, a DBS Savings account.

Through Internet banking, the total amount of $20,493.87 – she is unsure where the extra amount of $1,090.87 came from – was then transferred from her POSB account to three different Standard Chartered accounts in the amounts of $6,281.40, $6,258.95 and $7,953.52.

“It’s very scary... how did (the scammers) manage to increase my credit limit without any verification?” asked Ms Lim, who also questioned how there were so many large transactions made without notifications sent to her.

A week later, on Aug 2, she received a letter from DBS – dated July 26 – informing her that her request for a credit limit increase on July 26 had been approved.

She said: “I’m very shocked... when you try and increase your withdrawal or credit limit, they ask you so many questions, so why weren’t any questions asked of that person (who made all the transactions)?”

Ms Lim made a police report on July 26. Catering company Grain also made a police report on July 27 about scammers mimicking its mobile application. Police have told The Straits Times that investigations are ongoing.

After her savings were wiped out, Ms Lim said she is unable to meet the payment deadlines set by the bank for her credit card bill.

The last message from the bank asked for an interest payment of $4,075, which had to be paid by Aug 12.

“We have nothing in the bank, we have nothing to return,” said Ms Lim as she choked up in tears.

While she has friends who have extended money and supermarket vouchers to her family, she is worried about paying for her housing and other such loans.

She added that she is traumatised and that “every (new) message on my phone now scares me to bits... I have lost confidence in phone banking”.

In desperation, Ms Lim sought help from her MP to write appeals to DBS, the police and the Monetary Authority of Singapore (MAS) to waive the amount that was drawn from her credit card account.

When contacted, DBS said it has dedicated resources to “act swiftly and assist” customers who are scammed, including a dedicated fraud hotline – 1800-339-6963 (from Singapore) or (+65) 6339-6963 (from overseas) – or the safety switch function on the digibank app, which would temporarily block access to funds.

“We will assist these customers with necessary follow-up actions, which include making a police report, or replacing their cards/re-securing their accounts,” DBS said, adding that scammed customers can also report fraud in person at any DBS bank branch.

“While we continue to adopt multi-pronged measures to strengthen fraud prevention and recovery, customers remain the first line of defence in safeguarding against scams.”