Opinion Archives - Page 2 of 2 - Security Common Sense

Reflections from the Global Anti-Scam Summit Asia 2025

Glad to be able attend the Global Anti-Scam Summit Asia 2025 in Singapore. Across two days, one theme stood out clearly: scams are no longer niche or amateur — they are professional, adaptive, and global. Here are some highlights and reflections.

The Scale of the Problem

In Singapore, digital crime now outpaces physical crime two to one.
On average, each person in Singapore loses US$1,000 to scams.
It’s no longer just the elderly — younger people are also being caught out, often by “good deals” (concert tickets, food deliveries, task scams).

The Psychology of Scams

Scams are not about how intelligent you are; they are designed for you. 94% of adults try to verify offers, yet billions are still lost.
Greed, trust, loneliness, and love are powerful levers — and scammers know how to pull them.
The impact goes beyond money: shame, withdrawal, and even self-harm are real consequences.

Technology: Weapon and Shield

AI is changing the game. Gone are the days of scam emails full of grammatical mistakes. AI now generates polished messages and can deploy psychological tactics at scale.
On the flip side, AI is being used by defenders to detect unusual activity and even “chat” with scammers — keeping them occupied and away from real victims.
Scammers also layer apps on legitimate platforms. One example: a translation tool running on top of WhatsApp, making scams seamless across languages.
Tools like WormGPT and OnlyFake (fake IDs and documents) show how innovation cuts both ways.

Collaboration and Cat-and-Mouse

Speakers broke down scams into a lifecycle: preparation (profiling, phishing kits, AI tools), deception (initiating contact and social engineering), and monetisation (laundering illicit funds). It’s a reminder that scams are structured enterprises, not random one-offs.
For years, telcos, banks, and platforms pointed fingers. Now, there’s a push toward collaboration — data sharing, APIs, and initiatives like GASA’s Global Signal Exchange.
Singapore’s own approach includes upstream blocking of scam calls/sites, tighter laws, public reporting, and education via ScamShield and the 1799 hotline. (Ironically, scammers are already spoofing calls claiming to be from the scam centre.)
It’s clear: there is no 100% tech solution. Trust, vigilance, and human awareness remain essential.

Human Cost and Unseen Victims

Behind the headlines are people trafficked into scam compounds, forced to work under duress. This hidden second layer of victims is often forgotten.
One exposé revealed a compound in the UAE with 2,000 workers running pig-butchering scams. The sophistication was chilling: real girlfriends on-site, curated social media profiles, even video calls to build trust — all leading victims toward fake investment platforms.
Groups like the Luffy crime ring show how organised, ruthless, and adaptable these networks have become.

Where Do We Go From Here?

The summit closed with more questions than answers:

How do we balance fraud prevention with user experience?
How do we build trust as effectively as scammers do?
Who draws the line of responsibility — governments, industry, or us as individuals?

Here at Security Common Sense, we believe awareness starts at home. That’s why we’ve been working on this site for a few years — to help friends and family cut through jargon, spot red flags, and talk about scams openly. If you’ve stumbled across us and find us interesting, share it with your friends and family too.

Also in This Series

This article is part of our reflections from the Global Anti-Scam Summit Asia 2025 (GASS Asia). You can read the full series here:

Together, these articles explore how scams are evolving, how they affect all of us, and what we can do to fight back.

The Future of Scamming

Scammers have always been a part of the global economy, but the rise of technology and the internet has led to an explosion in the number and variety of scams. The most recent trend in scamming is the use of social media and online platforms to target individuals and businesses.

One popular scam is the "phishing" scam, in which scammers send emails or messages that appear to be from a legitimate source (such as a bank or government agency) in order to trick people into giving away personal information or money.

Believe it or not, the few paragraphs above are AI generated. Tools such as ChatGPT allow a user to conduct natural language conversations with software, and the software to respond in a way that on many occasions, pass off as a real human.

Consider 4 years ago, Google highlighted new technology for a digital assistant to make a phone call to a restaurant to make reservations, or to a hairdresser to make an appointment.

Click this link to see it on YouTube.

In the same year 2018 - comedian Jordan Peele produced a deepfake video of President Obama saying things he wouldn't say. Watch it here.

Consider that most scamming and phishing attempts currently received on email or text are poorly formatted, or have spelling mistakes, or bad grammar. In Singapore, the IMDA has gone on a campaign over the past few years educating the public on how callers with a +65 prefix are possibly scam calls. This may cause people to instinctively trust what appear to be legitimate local numbers. Well, the scammers have found a way to call from a non +65 number.

How else can scammers up their game? What if they automated the process using natural language tools and deep-faked voices (or more scarily, deep-faked video)? What if you received an urgent video call from your boss asking you to buy some gift cards? Or from a frantic child saying they have been kidnapped and that her captors are demanding a ransom?

No matter how technology evolves to counter scammers and phishers, the bad actors will always come up with something more sophisticated. Scammers rely on impulsive actions to get what they want. It is up to the individual to be the final line in the defense of their personal information and money.

Some of us are fortunate enough to have corporate training on good cybersecurity hygiene, but continual personal training and practice in critical thinking is the key to keeping safe. Always think of the veracity of the message before you respond.

The Importance of Organisational Policies and Procedures

Every organisation, whether it is a small business or a large corporation, needs to have clear and concise policies and procedures in place. These documents provide a framework for decision-making and action, ensuring that work is performed consistently and effectively.

Furthermore, policies and procedures should be aligned with relevant industry guidelines and standards. This allows for an organisation to operate more consistently, effectively, and efficiently. With additional benefits such as clear definitions, reduced confusion, provides a common language, and promotes understanding among employees.

The Importance of Policies and Procedures

Policies and procedures are essential for organisations as they establish a set of rules and guidelines for employees to follow. They promote consistency and fairness in decision-making, while also fostering a positive organisational culture. Policies and procedures help to define an organisation's goals, principles, and values, providing a framework for employees to follow.

When policies and procedures are unclear or non-existent, employees may struggle to understand what is expected of them, leading to confusion, misunderstandings, and potential conflicts. On the other hand, clear policies and procedures provide a shared understanding of how work should be done, reducing the likelihood of conflicts and misunderstandings.

Effective policies and procedures should be concise, clear, and consistent with the organisation's mission, values, and objectives. They should also be regularly reviewed and updated to ensure that they remain relevant and effective, especially in industries that are subject to frequent changes in regulations or technology.

The Importance of Industry Guidelines and Standards

Industry guidelines and standards are established criteria or guidelines that define minimum requirements or best practices for a particular activity, product, or service. They are typically developed by industry groups, professional associations, or government agencies and are designed to ensure safety, quality, and consistency in a particular field or industry.

Aligning policies and procedures with appropriate industry guidelines and standards is essential for organisations to operate effectively and efficiently. By following established best practices, organisations can reduce the risk of errors, improve the quality of their work, and enhance their reputation within their industry.

Industry guidelines and standards can cover a wide range of topics, including manufacturing processes, environmental practices, information security, and clinical care. These guidelines and standards may be voluntary or mandatory, depending on the industry or regulatory context.

Benefits of Aligning Policies and Procedures with Industry Guidelines and Standards

By aligning policies and procedures with appropriate industry guidelines and standards, organizations can reap numerous benefits. Here are some of the key benefits:

Clear Definitions - Industry guidelines and standards provide clear definitions of terms, processes, and procedures. By aligning policies and procedures with these guidelines and standards, employees can have a shared understanding of how work should be carried out, reducing confusion and promoting a common language.
Reduced Confusion - Aligning policies and procedures with industry guidelines and standards can reduce confusion and misunderstandings among employees. When employees have a shared understanding of how work should be carried out, they are less likely to make mistakes or carry out tasks incorrectly.
Improved Efficiency - Industry guidelines and standards provide best practices for performing specific tasks or activities. By following these guidelines and standards, organisations can improve the efficiency of their work processes and reduce the risk of errors or delays.
Improved Quality - Industry guidelines and standards are designed to ensure quality and consistency in products and services. By adhering to these guidelines and standards, organisations can improve the quality of their work and enhance their reputation within their industry.
Improved Compliance - Adhering to industry guidelines and standards can help organisations comply with regulatory requirements and avoid potential legal issues. This is especially important in industries that are heavily regulated, such as healthcare, finance, and manufacturing.
Enhanced Reputation - Organisations that adhere to industry guidelines and standards are often viewed as more trustworthy and reliable by customers, regulators, and the public. This can help enhance the organisation's reputation and lead to increased business opportunities.

Institutionalisation through Company Culture

Infusing the importance of policies and procedures into an organisation's culture requires a deliberate and strategic approach. Here are some steps that can help:

Communicate - Ensure that employees understand the purpose and importance of policies and procedures. Provide clear and concise explanations of how policies and procedures contribute to the success of the organisation, and how they help ensure compliance with legal and regulatory requirements.
Train - Provide employees with training on the policies and procedures that are relevant to their roles. This training should include not only the content of the policies and procedures, but also the reasons behind them and the potential consequences of non-compliance.
Lead by example - Model the behaviour that is expected of employees in terms of following policies and procedures. If leaders consistently follow policies and procedures, it will send a clear message that these are important to the organisation.
Reinforce - Consistently reinforce the importance of policies and procedures through ongoing communication, training, and feedback. Provide regular reminders of the consequences of non-compliance, and recognise and reward employees who consistently follow policies and procedures.
Continuously improve - Regularly review and update policies and procedures to ensure they remain relevant and effective. Solicit feedback from employees on how policies and procedures can be improved, and incorporate this feedback into future updates.

By taking these steps, organisations can create a culture that values policies and procedures and sees them as a critical component of the organisation's success. This culture can help ensure that employees consistently follow established protocols, reducing the risk of errors, accidents, and other negative outcomes.

In Conclusion

Having clear and well-written policies and procedures that align with appropriate industry guidelines and standards is essential for organisations to operate consistently, effectively, and efficiently. This will enable organisations to enhance their reputation, improve compliance, and achieve greater success in their industry.

In addition, a company culture that values policies and procedures can help to reinforce their importance and promote compliance. This can help to ensure that employees are working towards common goals, following consistent practices, leading to a safer and more productive workplace, as well as greater trust and confidence from customers and stakeholders.

The Dark Side of Cryptocurrencies: Uncovering the Risks and Dangers of Digital Currency

Cryptocurrencies, such as Bitcoin and Ethereum, have gained significant attention and popularity in recent years as a form of alternative investment and digital currency. However, despite their potential benefits, there are also many dangers associated with the use of cryptocurrencies. This article will explore some of the major risks associated with investing in and using cryptocurrencies.

Lack of Regulation

One major danger of cryptocurrencies is their lack of regulation. Because cryptocurrencies are decentralized and operate outside of traditional financial systems, they are not subject to the same regulations and oversight as traditional currencies and investments. This lack of oversight can make it easier for fraudsters to take advantage of investors, as there is no regulatory body to protect them. In addition, the value of cryptocurrencies can be highly volatile, making it difficult for investors to predict their worth and making them a risky investment.

Promotes Illicit Activities

Another danger of cryptocurrencies is their association with illegal activities. Because of their anonymity and lack of regulation, cryptocurrencies have become a popular form of payment for illegal goods and services, such as drugs and weapons. In addition, there have been a number of high-profile cases of cryptocurrency exchanges being hacked, resulting in the theft of millions of dollars' worth of cryptocurrency. This lack of security makes it more likely that individuals will fall victim to fraud and hacking.

Environmental Impact

Additionally, cryptocurrencies also poses a danger to the environment. The process of "mining" cryptocurrencies, which is necessary to validate transactions and add new coins to circulation, requires a significant amount of energy. Bitcoin mining, for example, is estimated to consume more electricity than the entire country of Argentina. This energy consumption has a significant environmental impact, and as more people adopt cryptocurrencies, this impact is likely to grow.

Limited Use Case

Another risk is that the use of cryptocurrencies is still not widely accepted. Many businesses and merchants do not accept payment in the form of cryptocurrencies, making it difficult for individuals to use them in their everyday lives. In addition, because of their digital nature, cryptocurrencies are also susceptible to cyber attacks and hacking, and once stolen, it is almost impossible to recover it.

In Conclusion

In conclusion, while cryptocurrencies offer the potential for a new and innovative form of investment and digital currency, they also come with a number of dangers. The lack of regulation, association with illegal activities, environmental impact, and lack of acceptance by businesses and merchants all pose significant risks for individuals who invest in or use cryptocurrencies. It is important for individuals to be aware of these risks and to carefully consider the potential benefits and drawbacks before investing in or using cryptocurrencies.

Cybersecurity in 2023

Welcome to the year 2023.

Cybersecurity is an ever-growing and will continue being a concern for individuals and organisations alike. In light of the continuous advancements in technology, it is important to remain aware of potential risks associated with cyber threats.

The following are some of the most common cybersecurity threats that individuals and organisations will continue to face:

1) Phishing scams: These scams are designed to steal personal information such as passwords, credit card numbers, and other sensitive data. They often take the form of emails or messages that appear to be from a legitimate source but are actually from a hacker.

2) Malware: This type of malware can infect your computer by installing itself on your device without your knowledge or consent. It can then steal data or spy on you without you knowing it's happening.

3) Ransomware: This type of malware locks down your computer until you pay a ransom fee to unlock it again. It can also encrypt all your files so that they cannot be accessed until you pay. .

4) Spyware: This type of malware has the ability to gather a variety of data from your computer and transmit it back to the hackers who created it or someone else who paid for access. It can also delete or destroy your files, record keystrokes, track passwords, monitor clipboard content, log websites visited, and capture screenshots.

How can you avoid getting infected with malware?

If you are using a public computer or network, always be careful about the things you do online. If the site is suspicious, your best bet would be to close it out or leave it entirely. Keep your passwords secure by changing them often and not sharing them with anyone else. Always use caution when downloading software from the internet in order to make sure that it is legitimate and that there are no viruses or malware embedded in it. If you downloaded a software package that has a virus, do not open or run it. Instead, delete the software and make sure that you never download it again.

As well, click here for the top 10 cybersecurity predictions for 2023 by 60+ experts.

1 2