Sharp rise in number of people getting scammed by fake Carousell buyers this month

At least 877 people have fallen prey to a phishing scam involving fake Carousell buyers this month with total losses amounting to at least $836,000, said police.

This is a sharp rise from the other 11 months of the year where at least 975 people had fallen prey to this scam with reported losses amounting to at least $938,000 from January to November.

Scammers would approach victims on Carousell and express interest in the items that the victims had listed on the platform.

After agreeing to the sale of the items, the scammer would request for the victims’ contact details to receive a link to facilitate payment or delivery of the item.

Depending on the contact details provided by the victims, victims would then receive an email, SMS or WhatsApp message from the scammer with dubious URL links or QR codes (e.g. cutt.ly/31uXCDu, carousell.quick-funds.in/266780736).

Upon clicking on the links or scanning the QR codes, victims would be redirected to a spoofed website to provide their Internet banking login credentials, bank card details and/or One-Time Password (OTP).

Victims would realise that they had been scammed when they discovered unauthorised transactions made from their bank accounts/cards. 

You are advised to note and follow these crime prevention measures:

• Always verify the buyer’s profile on online marketplaces by checking the account's verification status, creation date, reviews, and ratings.
• Do not click on dubious URL links and always verify the URL links. Only domains that end with carousell.com or carousell.sg are Carousell domains. URLs such as carousellpay.com, carousell.xxx.com, carousell-pay.com, carousell.pay-sg.com are NOT Carousell domains. Carousell does not send links via SMS, and would only send OTPs via SMS. This OTP should only be keyed into the Carousell application or webpage.
• If in doubt, always verify the authenticity of the information with the e-commerce platform directly.
• Never disclose your personal or internet banking details and OTP to anyone.
• Report any fraudulent transactions to your bank immediately.
• Report any suspicious user and fraudulent transaction from the online marketplace to the e-commerce platform.

Carousell users are advised to be wary of buyers asking for an email address or phone number on the pretext that these details are required for the buyer to make an order through Carousell Protection.

Carousell does not ask for payment, order confirmation, or card details via external sites or email.

For more information on differentiating real Carousell websites from phishing sites, spotting scam trends, or transacting safely on Carousell, users may wish to check out Carousell’s Help Centre. 

If you have any information relating to such crimes or if you are in doubt, please call the police hotline at 1800-255-0000, or submit it online at www.police.gov.sg/iwitness. All information will be kept strictly confidential. If you require urgent police assistance, please dial ‘999’.

For more information on scams, members of the public can visit www.scamalert.sg or call the Anti-Scam Hotline at 1800-722-6688.