Singapore reports $1 million lost to Microsoft and Crypto.com scams

Scammers have siphoned at least $1 million from Singapore residents by posing as Microsoft support or Crypto.com staff, prompting police to warn of heightened phishing risk and advise immediate safeguards [1].

How the scams operated

Victims first receive a pop‑up that mimics a Microsoft warning, claiming their device is compromised. The alert directs them to call a number beginning with “3”, where a fraudster pretends to be a technical‑support officer before handing the call to a second actor posing as police. The “officer” alleges illegal activity or malware infection and instructs the victim to download tools that give the scammers control over bank accounts, leading to unauthorized transfers [1].

A parallel scheme targets Crypto.com users. Scammers claim the victim’s account was accessed from abroad (e.g., Turkey) and urge them to install the Crypto.com On‑Chain app, create a new wallet with a seed phrase generated on a malicious website, and move crypto to addresses supplied by the fraudsters. Both approaches culminate in the victim noticing unauthorized withdrawals only after the scammers disappear [1].

Police response and prevention tips

Singapore authorities stress that cryptocurrency transactions cannot be reversed, making recovery unlikely once funds are moved. They urge users to never disclose seed phrases, private keys, or authentication codes, and to verify any alerts through official Microsoft or Crypto.com channels—Microsoft does not embed phone numbers in its error messages. Additional safeguards include exiting full‑screen pop‑ups, running anti‑virus scans, and contacting banks or platforms immediately to block further activity [1].

What to watch

• Emerging phishing vectors – Monitor for new impersonation tactics beyond Microsoft and Crypto.com, especially those leveraging other high‑profile brands.
• Regulatory alerts – Watch for updates from Singapore’s CSA or local consumer‑protection agencies that may introduce reporting hotlines or additional safeguards.
• Volume of complaints – A rise in reported cases could signal broader campaign expansion, prompting tighter security advisories.

The incidents underscore how quickly scammers can adapt trusted brand identities to exploit crypto users, highlighting the need for vigilant verification and rapid response to any unsolicited security alerts.