DBS Banking Scam Remote Phone Control Malware

In highly publicized recent incidents, victims who downloaded malicious apps (e.g., a fake fitness app or sideloaded Android file) received alarming fake messages from a spoofed "DBS Fraud Department" claiming a massive unauthorized transaction (such as S$50,000) was pending. As the victims attempted to verify the transaction, scammers triggered a remote device lock, sometimes displaying chilling messages on the screen like "I won't let you contact DBS and fraud team," effectively hijacking the device to prevent the victim from stopping the theft.

How's the Scam Works

1. The Trap: Victims are targeted through social media advertisements (e.g., cheap classes, food deliveries, or tech support) and are guided to install an application outside official stores or to grant broad permission access.
2. The Hijack: The application leverages accessibility permissions or hidden malware, enabling scammers to track strokes, mirror screens, and take over physical control of the phone.
3. The Panic Incentive: Scammers send a fake message or call pretending to be DBS, creating sudden panic about stolen money so the victim acts without thinking.
4. The Blockade: When the victim attempts to clear the issue or contact the bank, the scammer uses remote control software to freeze the phone, dim the screen, or lock the user out entirely.

Immediate Action Plan (If You Are Affected)

• Sever the Connection Immediately: Force-shutdown the phone completely or immediately toggle Flight Mode to cut off the internet connection. This severs the remote controller's stream.
• Freeze Your Bank Account from Another Device: Do not use the infected phone. Use a family member’s phone or a computer to contact the DBS Dedicated Fraud Hotline directly at 1800-339-6963 (or +65 6339-6963 from overseas).
• Activate the Safety Switch: When calling the DBS automated voice system, navigate to the DBS Safety Switch feature to immediately block all digital access to your funds.
• Clean the Device: Boot the infected phone in Safe Mode to uninstall any recently added apps, or perform a total factory reset. Change all online passwords once the device is safe.
• Report the Incident: File an official report via the Singapore Police Force portal or through the ScamShield Helpline.

Built-in Defenses

To fight back against these attacks, DBS features an anti-malware tool integrated into its DBS digibank mobile app. If the digibank app detects that active screen-sharing/mirroring tools are running, or that a sideloaded app has unverified accessibility permissions turned on, it will automatically restrict access to your banking profile until you disconnect and delete the dangerous software.