iMessage courier scam losses climb to S$2.2 million as scammers widen their targets
A simple “Y” or “1” reply can activate links that were initially blocked by iMessage’s protection for messages from unknown senders. This article ( iMessage courier scam losses climb to S$2.2 million as scammers widen their targets ) first appeared on The Independent Singapore News .
According to the Cyber Command, losses from Apple iMessage scams impersonating courier companies have increased to around S$2.2 million since June 2026. This is a rise from S$1.2 million in losses reported by The Independent Singapore in August 2026, covering 251 cases at that time. The escalation is due to scammers expanding their targets beyond courier companies like NinjaVan, J&T Express, and SPX Express to include government agencies and financial institutions.
Scammers send iMessages from foreign numbers or email addresses, directing victims to click links resembling those of legitimate entities. Victims who respond with "Y" or "1" activate the links, leading to spoofed websites where they are asked to enter sensitive information like card details or OTPs. This allows scammers to steal financial information and potentially add unauthorized devices to payment systems like Google Pay or Apple Pay.
iMessage is vulnerable on Apple's ecosystem, unlike SMS, which has network-level protections. Government agencies and courier companies do not use iMessage for public communication. To protect themselves, iPhone users should enable "Filter Unknown Senders" and "Filter Spam" in their iMessage settings, report suspicious messages, and follow the ACT framework provided by the Police.
This includes using the ScamShield app, enabling Two-Factor Authentication, setting transaction limits, and activating Money Lock features on bank accounts.
Written by urgent.news from The Independent Singapore's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
