Local Trends And Safety Advisories [Singapore] – Carousell Help Centre

Avoid these latest scams in Singapore! We update these safety advisories regularly to share with users what to look out for and how to protect themselves.

If you come across any suspicious accounts, please report it to our team.

[August 2024] Reminder about rising phishing threats!

How do phishing attacks on platforms occur?

Phishing attacks typically involve fraudulent emails, messages, or websites that mimic legitimate platforms to trick users into revealing sensitive information.

What are common signs of phishing attempts on platforms?

Look out for suspicious URLs, urgent requests for personal information, grammatical errors in messages, and offers that seem too good to be true.

How can I protect myself from platform phishing threats?

Verify URLs: Always check the web address for accuracy before entering login credentials.
Enable Two-Factor Authentication (2FA): Add an extra layer of security to your accounts.
Educate Yourself: Stay informed about current phishing tactics and warning signs.
Be Cautious with Links and Attachments: Avoid clicking on links or downloading attachments from unknown sources.

What should I do if I suspect a phishing attempt?

Do Not Respond: Avoid interacting with suspicious messages or emails.
Report It: Report phishing attempts to the platform's security team or customer support.
Monitor Accounts: Regularly check your accounts for unauthorized activity.
Educate Others: Share information about phishing threats with friends and family to help them stay safe.

Remember, staying vigilant and informed is key to protecting yourself from emerging phishing threats on platforms.

[May - July 2024] Phishing Pattern Reminder
- Why are new phishing patterns being updated?
  - Scammers constantly evolve their tactics to deceive users. We continuously give reminders about phishing patterns to help you stay ahead of these threats and protect your personal information.
- How can I spot these phishing patterns?
  - Be cautious of unexpected emails, especially those urging immediate action or containing suspicious links, fake websites, asking for personal information (email, phone number and redirecting outside of the platform.)
- What should I do if I encounter a potential phishing email?
  - Do not click on any links or be asked for personal information. Report users through report buttons or reaching out to our contact support teams to cater possible scammers on the platform.
- For more, check this out Frequently Used Messages and Images by Phishing Scammers on Carousell

[Apr 2024] 🔥A MUST WATCH OUT FOR ACCOUNT TAKE OVER PHISHING AND TICKET SCAMMERS!🔥
1. What is account takeover phishing?

Account takeover phishing is a type of cyberattack where scammers attempt to gain unauthorized access to a user's account by tricking them into revealing sensitive information such as usernames, passwords, or other personal data. Once access is gained, the attacker may use the compromised account for various malicious activities.

2. How do attackers carry out account takeover phishing?

Attackers often use deceptive techniques such as sending fake emails or messages that appear to be from legitimate organizations or trusted contacts. These messages typically contain links to fake websites or malicious attachments designed to steal login credentials when clicked or opened.

3. What are some common signs of account takeover phishing attempts?

Signs of account takeover phishing include receiving unsolicited emails or messages requesting sensitive information, such as passwords or account details. These messages may contain spelling or grammatical errors, appear to be from unfamiliar senders, or include urgent requests for immediate action.

4. How can I protect myself from account takeover phishing?

To protect yourself from account takeover phishing, it's essential to remain vigilant and cautious when responding to unsolicited messages or emails. Be wary of clicking on links or downloading attachments from unknown sources, and always verify the legitimacy of requests for sensitive information before providing any details.

5. What are ticket scammers?

Ticket scammers are individuals or groups who exploit the popularity of events, concerts, or other gatherings by selling fake or fraudulent tickets to unsuspecting buyers. These scammers often operate online through classified ads, social media platforms, or fake ticketing websites.

6. How do ticket scammers operate?

Ticket scammers typically create fake listings or websites offering tickets to popular events at attractive prices. They may use tactics such as offering discounts for bulk purchases or creating a sense of urgency to pressure buyers into making hasty decisions. Once payment is made, the scammer disappears, leaving the buyer with counterfeit or non-existent tickets.

7. What are some warning signs of ticket scams?

Warning signs of ticket scams include sellers asking for full payment, refusing to provide proof of ticket authenticity, or offering tickets at prices significantly below market value. Additionally, buyers should be cautious of listings with limited contact information or sellers unwilling to meet in person for ticket exchanges.

8. How can I avoid falling victim to ticket scams?

To avoid falling victim to ticket scams, it's crucial to purchase tickets from reputable sources such as official ticketing websites, authorized resellers, or directly from the event organizers. Always verify the legitimacy of sellers and tickets before making any purchases, and be cautious of deals that seem too good to be true. If possible, use secure payment methods that offer buyer protection, and never send payment to unverified sellers without ensuring the authenticity of the tickets.

9. What should I do if I believe I've been targeted by account takeover phishing or encountered ticket scammers?

If you believe you've been targeted by account takeover phishing or encountered ticket scammers, it's essential to report the incident to the appropriate authorities or organizations immediately. Additionally, take steps to secure your accounts by changing passwords, enabling multi-factor authentication, and monitoring your financial accounts for any suspicious activity. If you've already fallen victim to a scam, contact your bank or financial institution to report the fraudulent transactions and explore options for recourse or reimbursement.
[Mar 2024] Certainly, staying vigilant against phishing attempts and job scams is crucial, especially on platforms like Carousell where users interact frequently. Here are some reminder tips to help you and others stay safe:

Account Take Over Phishing:

1. Verify the Source: Always double-check the sender's email address and domain. Legitimate organizations usually have official email addresses.

2. Be Wary of Urgency: Phishing emails often create a sense of urgency, pressuring recipients to act quickly. Be cautious of such tactics.

3. Avoid Clicking Suspicious Links: Hover over links to see the actual URL before clicking. If it looks suspicious or doesn't match the purported sender, don't click on it.

4. Check for Secure Websites: Make sure any website you're providing sensitive information to is secure (look for "https://" and a padlock icon in the address bar).

5. Enable Two-Factor Authentication (2FA): Enable 2FA wherever possible, as it adds an extra layer of security to your accounts.
6. Educate Yourself and Others: Stay informed about the latest phishing techniques and educate friends and family about the risks.

Job Scam safety tips:

1. Be Skeptical of High-Paying Offers: Scammers often entice victims with promises of high earnings for minimal work. If an offer seems too good to be true, it likely is.

2. Question Unconventional Tasks: Be wary of offers that involve tasks like liking videos on YouTube/TikTok for commission. Legitimate job opportunities typically involve reasonable and standard tasks.

3. Avoid Downloading Unknown Platforms: Do not download or install any applications or platforms from unknown sources, especially if they promise easy money or passive income. These could be fake platforms designed to steal personal information or money.

4. Never Transfer Money Upfront: Legitimate employers or platforms will never ask you to transfer money upfront in exchange for work opportunities or commissions. If you're asked to transfer money before receiving payment, it's likely a scam.

5. Protect Your Banking Credentials: Never share your banking credentials, account information, or any other sensitive personal information with unknown individuals or platforms. Scammers may use this information for illegal activities, leading to financial loss or identity theft.

6. Verify the Legitimacy of Offers: Research the company or individual offering the opportunity. Look for reviews, check their website, and verify their contact information. Legitimate businesses will have a transparent online presence.

7. Trust Your Instincts: If something feels off or if you're uncertain about an offer, trust your instincts and proceed with caution or avoid it altogether.

8. Report Suspicious Activity: If you encounter any suspicious offers or activities, report them to the relevant authorities, such as the platform administrators, law enforcement agencies, or consumer protection agencies.

👉By staying vigilant and following these guidelines, individuals can reduce the risk of falling victim to scams involving work opportunities, passive income, and work-from-home offers on platforms like YouTube/TikTok and Carousell.
[Feb 2024] Concert season approaches and concert ticket scams are on the rise! "Secure Your Concert Tickets: Essential Safety Tips"

Here are some safety tips for buying concert tickets on Carousell platform:
1. Check Seller's Reputation: Before making a purchase, review the seller's profile on Carousell. Look for positive feedback, completed transactions, and overall ratings. Sellers with a good track record are more likely to provide legitimate tickets.
1. Communicate Securely: Use Carousell's messaging system to communicate with the seller. Avoid sharing personal information such as email addresses or phone numbers until you're comfortable with the transaction and sure of the seller's legitimacy.
1. Ask for Proof of Purchase: Request proof of purchase or verification of the concert tickets from the seller. This could include photos of the tickets, purchase receipts, or confirmation emails. Verify the details such as the event date, venue, and seat numbers.
1. Arrange a Safe Payment Method: Use Carousell's secure payment options whenever possible. Avoid making payments outside of Carousell's platform, such as bank transfers or wire transfers, as these methods offer little to no protection against fraud.
1. Meet in a Safe Location: If meeting the seller in person to exchange tickets, choose a well-lit and public location, such as a coffee shop or shopping mall. Avoid secluded areas and insist on meeting during daylight hours.
1. Inspect the Tickets: Inspect the concert tickets in person before finalizing the transaction. Check for any signs of tampering, such as altered dates or seat numbers. Ensure that the tickets look genuine and match the description provided by the seller.
2. Trust Your Instincts: If something feels off or too good to be true, trust your instincts and proceed with caution. Be wary of sellers who pressure you to make a quick decision or offer unrealistic deals.
3. Report Suspicious Activity: If you encounter suspicious listings, fraudulent sellers, or any signs of scamming on Carousell, report them to Carousell's customer support immediately. Provide as much information as possible to help prevent others from falling victim to the same scams.
  
  👉👉👉By following these safety tips, users can reduce the risks associated with buying concert tickets on Carousell and increase their chances of having a positive and secure transaction experience.
[Dec 2023 & Jan 2024] 🔥🔥🔥 Attention
- Watch out for Fake Carousell websites that may mimic the platform's appearance but are designed to scam users. These fake sites often play around with individuals into providing confidential information, leading to identity theft or money loss. Always ensure that you are using the official Carousell website to conduct transactions and avoid falling victim to these such schemes.
  
  👉How do I know if the website is from Carousell? When using online platforms, be careful about potential phishing attempts originating from ATO (Account Takeover) accounts. These fraudulent activities aim to manipulate users into disclosing sensitive information, compromising account security. Stay alert and double-check if the communication is legit to keep your personal data and account safe.
  
  👉Enable Two-Factor Authentication (2FA) for suspicious logins: When a Carousell account is being logged in through a new device, we have 2FA codes sent to the account’s email address to confirm and inform the account owner that there is an attempt to log into their Carousell account.
- Exercise caution when encountering to pretend as customer support sites that may be fraudulent. These fake support channels can mislead users into sharing sensitive details under the guise of assistance.
- Remember, legitimate customer support from Carousell will never request unnecessary information, such as your email address to complete transactions or process payments. Stay informed and prioritize your online safety by avoiding these potential risks. If you have any doubts, please always verify with official support team first
  
  👉How do I contact Carousell Support Team?
[Nov 2023] ⚠️ Friendly reminder to all!

1. Be Skeptical of OTP Requests:
-Avoid sharing OTPs or personal information, especially when prompted by unknown contacts.
-Legitimate transactions rarely require sensitive information such as OTPs for confirmation.

2. Verify Contacts and Transactions:

-Prioritize transactions with verified users or established sellers.
Confirm the legitimacy of payment requests before proceeding with any financial transactions.

3. Exercise Caution with Concert Ticket Offers:

-Double check sellers offering concert tickets at exceptionally low prices or with overly enticing deals.
-Research the seller's reputation and check for user reviews or feedback before making a purchase.

4. Trust Your Instincts:

-If an offer seems too good to be true, it probably is. Trust your instincts and approach such deals with caution.
-Report any suspicious activity promptly to the platform's support team.

5. Educate Yourself on Common Scam Tactics:

-Stay informed about the latest scam techniques, such as phishing attempts and deceptive practices used by scammers.
-Knowledge is your best defense against falling victim to fraudulent schemes.

6. Enable Two-Factor Authentication (2FA):

-Strengthen your account security by enabling 2FA, adding an extra layer of protection against unauthorized access.

7. Regularly Update Your Security Settings:

-Keep your account settings up-to-date and review privacy controls regularly to enhance overall security.
-By following these safety tips, you can significantly reduce the risk of falling to scams and ensure a more secure online experience.
[Oct 2023] Phishing scammers are increasing using compromised accounts, here's how these scams work:
- A compromised ATO (account takeover) account is used to send phishing messages.
- These messages may request sensitive information, such as personal information (email address, passwords, phone numbers) and financial details.
- Scammers use these data for fraudulent activities.
⚠️Safety tips to protect yourself:

✅ Always verify the sender's identity.
✅ Be cautious when sharing personal information.
✅ Use strong, unique passwords and enable two-factor authentication.
[Sept 2023]🛡️Beware of Phishing Scams🛡️ - Phishing attempts are continuously on a rise, especially on online marketplaces. Here's how these scams work:
1. Scammers are now requesting sellers to provide screenshots of their email addresses and phone numbers. You provide a screenshot that reveals your email address and phone number. (*please refer to below screenshot 1.)
2. Shortly after, you receive an email claiming payment has been made for one of your items. The email requests and your bank account details to receive payment. (*please refer to below screenshot 2 and 3.)

Remember, when using Carousell's payment system, you NEVER need to leave the app, send your email address, or mobile number to receive payment. Stay safe and protect your personal information. Be cautious about sharing your details with unknown parties. #OnlineSecurity #ProtectYourInfo

*Screenshot 1

*Screenshot 2
*Screenshot 3

⚠️Safety tips to protect yourself:
✅ Please be vigilant and do not share your personal information in the aforementioned way.
✘ Never scan suspicious QR codes that could lead to phishing scams.
[July 2023] Think using cash on delivery for luxury items is 100% safe? Think again! Scammers try to gain buyers trust by offering cash on delivery, assuring buyers that they only pay when they receive the item.

However, buyers are not able to open and check the parcel before paying for it and after paying, find themselves receiving an item that is completely different from what they ordered! Be extra vigilant when
(1) Sellers refuse to do meet-ups with excuses that they are overseas for a work trip/holiday
(2) Account is new and is selling brand new, high demand luxury products/accessories at attractive prices. If it is too good to be true, it probably is!

Protect yourself from cash on delivery scams by paying through our on-platform payment system, whereby Carousell holds onto the funds until you have confirmed that you have received your item as described.
[July 2023] Concert season is around the corner and concert ticket scams are on the rise. Ticket buyers are encouraged to verify the authenticity of the tickets before making any payment. Opt for meet-ups to check the tickets physically – cross check the name on the ticket with the seller's name. Carousell would like to remind users that tickets purchased from third-party vendors do not guarantee entry. Be wary when sellers try to get you to pay a deposit or in-full immediately to secure the tickets – scammers will try to create a false sense of urgency by claiming that they have other buyers lined up to get you to transfer to them as soon as possible.
[June 2023] Phishing attempts are on the rise and scammers are asking sellers to provide a screenshot of your verified status to prove that you are a verified user. After providing this screenshot that reveals your email address and phone number, you will receive an email claiming that payment has been made for one of your items and you will need to enter your bank account details to receive payment. You would never need to leave the app, send your email address or mobile number to receive payment through Carousell's payment system. If you're being asked to enter your credit/debit card details to receive payment, do not proceed and report the user to us immediately. Be careful who you share your personal information to.

[May 2023] Concert season is around the corner and concert ticket scams are on the rise. Opt for meet-ups to check the tickets physically – cross check the name on the ticket with the seller's name. Be wary when sellers try to get you to pay immediately to secure the tickets – scammers will try to create a false sense of urgency by claiming that they have other buyers lined up to get you to transfer to them as soon as possible.
[Mar 2023] If you are dealing with someone who claims to be a property agent, verify their mobile number on CEA website. Check if the estate agent's mobile number matches the number you are liaising with.
[Nov 2022] We've been alerted by the local authorities that scammers are now impersonating Carousell via SMS to inform victims that they are receiving payment for their sold items. The victims (sellers) would first be contacted on Carousell with the scammer informing the victims that they are interested to purchase the items sold by the victims. The victims are then told that they will receive an SMS pertaining to either the courier or payment. The victims will then receive the SMS and are re-directed to a phishing site to key in their credit card details thinking that the page is to facilitate them to receive payment for their sold items.
[Oct 2022] Scammers might take advantage of high demand items such as latest release iPhone by opening Pre-Order items and ask for advance payments. Always do your due diligence especially before making such a high value item transaction and opt for safer payment method such as Carousell Protection. The Singapore Police Force has released an advisory that you can refer to for tips on purchasing high demand online electronic products.
[Sep 2022] We've been alerted by the local authorities on the rise of phishing scams whereby scammers are impersonating Carousell and approaching sellers on the platform claiming that they are interested in purchasing their item. The seller will then re-directed to a phishing site to input credit card details, with the impression that they will receive their payments for the item. Note that official emails from Carousell will always come from @carousell.com email domain. Some of the fake domain used are: notification@carousell.me. notifications@carousell.me, offer@carousell.me. You will also never be directed to a third-party website to input your personal details for Carousell Protection-related services.
[Sep 2022] If you are dealing with property agent to buy or rent your home, verify their mobile number on CEA website. Check if the estate agent's mobile number matches the number you are liaising with.
[Apr 2022] Looking for a place to buy or to rent? Beware of scammers pretending to be property agents. You do not need to pay fees to secure a viewing appointment.
[Mar 2022] Always take precaution when purchasing virtual items or in-game products such as mobile game accounts, add-on items, inventory or tradable game items. Check against the game provider and its policy to confirm if such transactions are safe and allowed on its platforms.
[Jan 2022] Beware of individuals impersonating as Carousell Customer Support. We’ve received reports of victims receiving paid tasks from such individuals, only to lose all the money after completing the tasks and topping up money.
[Jan 2022] We’ve been notified by the local authorities of a scammer posing as a buyer, typically approaching sellers to express interest in buying their items. After agreeing to buy the item, the scammer would request to make payment via Carousell Protection and would require the seller to click on a link in their email to complete the transaction. These emails would be from domains like @gmail.com and would lead users to a phishing site where you will be asked for your online banking credentials. For Carousell Protection transactions, we will never require you to confirm payment via email or ask for online banking login credentials through 3rd party websites. Also, official emails from Carousell will always come from @carousell.com email domain. Please refer to our tips on Account Security to understand how to spot such scams and fake email domains that appear to be from Carousell.
[Dec 2021] Take note of a new scam trend where scammers create fake job advertisements outside of Carousell (e.g. on FaceBook, or sent via unsolicited WhatsApp messages from unknown numbers). Victims will then be asked to list items on Carousell under their own account on behalf of the scammer, and include the scammer’s phone number on the listing description so future victims will transact directly with the scammer. Please be wary of easy jobs that offer lucrative commissions that are simply too good to be true! Protect yourself and others by not accepting dubious job offers that offer lucrative returns for minimal effort.
[Dec 2021] Opt to use Carousell protection when buying attraction or hotel voucher for your staycation. Especially if the price is too good to be true!
[Apr 2020] As the school holiday season approaches, we typically see a higher demand in gaming consoles like Nintendo Switch, Xbox, PS5. For higher value items, use our secure escrow in-app payment Carousell Protection, avoid paying upfront without doing your due diligence or even opt for a meet-up so that you can check the item before making payment.

Articles in this section