Fake Android App Wipes Singpass, Targets Singapore Seniors

Fake Android App Wipes Singpass, Targets Singapore Seniors. The Singapore Police Force has issued an advisory about a malware scam that has cost at least eight seniors more than S$69,000 since 1 April 2026.

The Singapore Police Force has issued an advisory about a malware scam that has cost at least eight seniors more than S$69,000 since 1 April 2026. It is a worrying case because it quietly removes the very tools families rely on to stay safe.

How the scam works

It starts with a friendly advertisement on Facebook or TikTok promoting activities for senior citizens. After an older person submits their contact details, scammers reach out on WhatsApp and ask them to download an app — an Android Package Kit, or APK file — supposedly to view an activities list.

That file is malware. Once installed, it does two things that make it dangerous:

It quietly uninstalls Singpass and ScamShield, so the device loses its scam-blocking protection.
It allows attackers to change settings without permission — in one case, raising a victim's banking transaction limits.

Then the fake officials call

With protection gone, scammers pose as officers from the Ministry of Law or the Anti-Scam Centre. They claim the victim's device is compromised and demand money transfers or valuables — gold, phones, cash — for a supposed “police investigation.”

Real government officers will never ask you to download an app from a chat message, and never ask for money or gold to help an investigation.

Why this one is hard to spot

Most scams ask you to do something risky. This one disarms your defences first, so warning signs you would normally see simply disappear. An APK installed from outside the Google Play Store can change your phone in ways an app from the official store cannot.

How ScamGuard helps

ScamGuard watches for the exact moves this scam relies on. It flags requests to sideload APK files, alerts you if protective apps like ScamShield are removed, and warns the family when an unfamiliar app tries to change banking or security settings. For households caring for elderly parents, that early warning can be the difference between a close call and a real loss.

How to protect yourself

Only install apps from the Google Play Store. Never tap an APK link sent over WhatsApp or chat.
Turn on Google Play Protect and disable installs from “Unknown Sources” in your phone settings.
Keep ScamShield installed. If it disappears, treat that as a red flag and seek help.
Ignore unsolicited ads for activities or prizes that ask for your contact details.
Verify any “official” caller. Hang up and call the agency directly using a number from its real website.
When unsure, call the ScamShield helpline at 1799 — it is free and available 24/7.
Check in on elderly relatives. A quick phone call before they act can stop a scam in its tracks.

Scammers count on isolation and urgency. A calm second opinion — from a family member, a helpline, or a tool watching your back — is your strongest defence.