If you have any feedback for us regarding our Scam Trend Alerts (BETA) feature or about this article, please write to us here.

• If you want to know how to set up scam alerts on your ScamShield app, please refer to this guide.

  NOTE: This is a beta feature being rolled out to a small group of users first, so not everyone will see it yet.

Scammers are posing as Microsoft and Crypto.com technical support, with pop-up alerts and phone numbers claiming your device or crypto wallet is at risk. Since May 2026, the Police have received at least 30 reports, with losses of at least $1 million. Knowing how this scam unfolds gives you the confidence to shut it down before you dial.

How this scam works:

• Step 1: A pop-up alert appears, warning your device or account is compromised. It shows a phone number, often eight digits starting with "3", and tells you to call Microsoft or Crypto.com support.

• Step 2: You call the number. The person who answers claims to be technical support.

• Step 3: You are guided to install an app that controls your device, or asked to share crypto wallet details: your seed phrase, passphrase, private keys or authentication codes.

• Step 4: With that access, scammers drain your bank account or transfer your cryptocurrency. Because crypto transfers cannot be reversed, those assets are almost impossible to recover.

You can spot this scam the moment a pop-up tells you to call a number. Microsoft does not put phone numbers in its error or warning messages, and no genuine support team will ever ask for your wallet's seed phrase or private keys.

Tips to protect yourself:

• Know what real support will never do. No legitimate platform will ask for your seed phrase, passphrase, private keys or authentication codes.

• Close the pop-up instead of calling. Do not click any buttons. Exit your browser to close it; if it forces full-screen, press F11 or Escape (Windows).

• Verify through official channels. Check any alert with your software or crypto provider's official website, not the number in the pop-up.

• Act fast if you have already engaged. Disconnect from the internet, remove any apps the caller told you to install, and change your passwords from another device. If your seed phrase is exposed, move your crypto immediately.

• Download the ScamShield app to block scam calls and filter scam SMSes. Use it to verify suspicious messages and contact details before responding.

• Report what you see. If you come across a suspicious phone number, text message or website link, report it to us via the ScamShield app.

If you have already transferred money or shared your banking details, file a police report immediately at https://www.police.gov.sg/E-Services/Lodge-Police-Report.

For more information on scams, visit www.scamshield.gov.sg or call the 24/7 ScamShield Helpline at 1799.