Phishing scams involving fraudulent emails from DBS and POSB are on the rise. Since 15 January 2026, more than 70 victims have lost a combined total of $484,000 to this scam. Victims were tricked into entering their banking credentials and one-time passwords (OTPs) on fake websites, resulting in unauthorised transactions in their accounts. If you have received an email like this, do not click on any of the links inside it.

🚩 Remember, banks in Singapore will never send clickable links via email or SMS. Your digital token can only be set up through the official DBS or POSB digibank app, and never through a link.

Knowing how a scam works is the best way to protect yourself and your loved ones.

How the digital token email scam works:

The scammers send an email designed to look like an official communication from DBS or POSB.

Step 1: You receive an email appearing to be from DBS or POSB. It says your digital token has expired, and that you need to activate or update it.

Step 2: You are directed to click a link. The link leads to a fake website that closely resembles the official DBS or POSB webpage.

Step 3: You enter your banking details. The fake website prompts you to enter your banking login, password, credit or debit card details, and OTPs.

Step 4: Your account is compromised. Scammers use the information you have entered to steal your money, often in foreign currencies such as Euros or Saudi Riyals.

How to protect yourself:

Don’t click any links in emails or SMSes claiming to be from your bank. If you receive such a message, go directly to your bank's official website or app by typing the address yourself.

Never enter your banking details, card information, or OTPs on any website accessed through a link. These details should only be entered on the official DBS or POSB digibank app.

Download the ScamShield app. Use it to block scam calls, filter scam SMSes, and report scams.

Check before you act. Verify the legitimacy of any suspicious message, phone number, or website link using the ScamShield app, or by calling the 24/7 ScamShield Helpline at 1799.

If you think you’ve been scammed, report it. Call the police and your bank immediately if you suspect your banking details have been compromised. Contact DBS or POSB's fraud hotline at 1800-339-6963 or 6339-6963 to stop further unauthorised transactions. Report the scam via the ScamShield app, and file a police report.

For more information on scams, visit ask.gov.sg/scamshield