{"id":3316,"date":"2025-10-22T01:53:04","date_gmt":"2025-10-22T01:53:04","guid":{"rendered":"https:\/\/ft365.org\/index.php\/2025\/10\/22\/singapore-officials-impersonated-in-sophisticated-investment-scam\/"},"modified":"2025-10-22T01:53:04","modified_gmt":"2025-10-22T01:53:04","slug":"singapore-officials-impersonated-in-sophisticated-investment-scam","status":"publish","type":"post","link":"http:\/\/ft365.org\/index.php\/2025\/10\/22\/singapore-officials-impersonated-in-sophisticated-investment-scam\/","title":{"rendered":"Singapore Officials Impersonated in Sophisticated Investment Scam"},"content":{"rendered":"<div id=\"cphContent_pnlArticleBody\" data-layout-id=\"2\" data-edit-folder-name=\"text\" data-index=\"0\">\n<p>A large-scale scam operation impersonating Singapore\u2019s top officials has been uncovered by cybersecurity experts.<\/p>\n<p>The operation uses verified Google Ads, fake news websites and deepfake videos to lure victims into a fraudulent investment platform. The scam falsely associates itself with Singapore\u00a0prime minister Lawrence Wong and coordinating minister for national security K\u00a0Shanmugam to appear credible.<\/p>\n<p>According to a report published by Group-IB today, the campaign specifically targeted Singapore residents by configuring Google Ads to appear only to local IP addresses. Victims who clicked on the ads were funneled through a chain of redirect sites designed to conceal the final fraudulent destination \u2013\u00a0a Mauritius-registered forex investment platform.<\/p>\n<h2>Verified Google Ads and Redirect Networks<\/h2>\n<p>Investigators identified 28 verified advertiser accounts behind the campaign, mostly registered to individuals in Bulgaria, with others in Romania, Latvia, Argentina and Kazakhstan.<\/p>\n<p>These accounts ran malicious Google Ads promising lucrative returns. The ads led users to 52 intermediary domains that redirected them to fake news pages impersonating outlets like CNA and Yahoo! News.<\/p>\n<p>Group-IB also found that 119 malicious domains mimicked mainstream news sites. The fabricated CNA site, for instance, featured a deepfake video of prime minister Wong promoting the \u201cImmediate Era\u201d\u00a0program, while a fake Yahoo! News article falsely depicted Shanmugam endorsing the platform.<\/p>\n<p><em>Read more on AI-generated deepfakes and digital fraud trends: Deepfake Attacks Hit Two-Thirds of Businesses<\/em><\/p>\n<h2>Evasion and Psychological Pressure<\/h2>\n<p>To avoid detection, scammers used advanced evasion techniques including IP filtering, developer-tool detection and URL parameter gating, showing scam content only to real users in Singapore.<\/p>\n<p>Once victims provided contact information, they were contacted by phone or email and pressured to invest. Withdrawals were often delayed or blocked with bureaucratic excuses.<\/p>\n<p>The Mauritius-registered platform appeared legitimate due to its regulatory license. Still, Group-IB noted that its Cyprus-based parent company had faced multiple suspensions and lost its UK authorization in 2022.<\/p>\n<h2>Growing Trend of Sophisticated Fraud<\/h2>\n<p>Group-IB estimated that 3808 Singaporeans clicked on the malicious ads last month, with 685 redirected to scam sites. The team concluded that this case reflects the professionalization of online fraud, where criminals blend verified ad networks, licensing loopholes and AI-driven media manipulation to deceive users.<\/p>\n<p>Experts warn that traditional red flags, such as poor grammar or suspicious URLs, are no longer reliable indicators. Users are advised to:<\/p>\n<ul>\n<li>\n<p>Independently verify investment claims<\/p>\n<\/li>\n<li>\n<p>Avoid providing personal details on unfamiliar sites<\/p>\n<\/li>\n<li>\n<p>Be skeptical of celebrity or official endorsements in online ads<\/p>\n<\/li>\n<\/ul>\n<p>\u201cBoth investigators and everyday users must now assess scams holistically,\u201d\u00a0Group-IB said.<\/p>\n<p>\u201c[Consider] technical, behavioral, and contextual indicators to identify deception effectively.\u201d<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>A large-scale scam operation impersonating Singapore\u2019s top officials has been uncovered by cybersecurity experts. The operation uses verified Google Ads, fake news websites and deepfake videos to lure victims into a fraudulent investment platform. The scam falsely associates itself with Singapore\u00a0prime minister Lawrence Wong and coordinating minister for national security K\u00a0Shanmugam to appear credible. According<\/p>\n","protected":false},"author":2,"featured_media":3317,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3316","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"featured_image_urls":{"full":["http:\/\/ft365.org\/wp-content\/uploads\/2025\/10\/3316-578efe1b-9832-4907-9d81-85b907c79977.jpg",300,300,false],"thumbnail":["http:\/\/ft365.org\/wp-content\/uploads\/2025\/10\/3316-578efe1b-9832-4907-9d81-85b907c79977-150x150.jpg",150,150,true],"medium":["http:\/\/ft365.org\/wp-content\/uploads\/2025\/10\/3316-578efe1b-9832-4907-9d81-85b907c79977.jpg",300,300,false],"medium_large":["http:\/\/ft365.org\/wp-content\/uploads\/2025\/10\/3316-578efe1b-9832-4907-9d81-85b907c79977.jpg",300,300,false],"large":["http:\/\/ft365.org\/wp-content\/uploads\/2025\/10\/3316-578efe1b-9832-4907-9d81-85b907c79977.jpg",300,300,false],"1536x1536":["http:\/\/ft365.org\/wp-content\/uploads\/2025\/10\/3316-578efe1b-9832-4907-9d81-85b907c79977.jpg",300,300,false],"2048x2048":["http:\/\/ft365.org\/wp-content\/uploads\/2025\/10\/3316-578efe1b-9832-4907-9d81-85b907c79977.jpg",300,300,false],"morenews-featured":["http:\/\/ft365.org\/wp-content\/uploads\/2025\/10\/3316-578efe1b-9832-4907-9d81-85b907c79977.jpg",300,300,false],"morenews-large":["http:\/\/ft365.org\/wp-content\/uploads\/2025\/10\/3316-578efe1b-9832-4907-9d81-85b907c79977.jpg",300,300,false],"morenews-medium":["http:\/\/ft365.org\/wp-content\/uploads\/2025\/10\/3316-578efe1b-9832-4907-9d81-85b907c79977.jpg",300,300,false],"crawlomatic_preview_image":["http:\/\/ft365.org\/wp-content\/uploads\/2025\/10\/3316-578efe1b-9832-4907-9d81-85b907c79977-146x146.jpg",146,146,true]},"author_info":{"display_name":"henry","author_link":"http:\/\/ft365.org\/index.php\/author\/henry\/"},"category_info":"<a href=\"http:\/\/ft365.org\/index.php\/category\/uncategorized\/\" rel=\"category tag\">Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","_links":{"self":[{"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts\/3316","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/comments?post=3316"}],"version-history":[{"count":0,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts\/3316\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/media\/3317"}],"wp:attachment":[{"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/media?parent=3316"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/categories?post=3316"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/tags?post=3316"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}