How the APK scam in fake social media ads works and how to spot it

Ads on social media platforms such as Facebook for senior activities, water fitness classes and recycling drives have a catch. Since April, at least 62 cases have been reported, with losses of at least S$989,000, from an APK scam that starts with ads like these, the Singapore Police Force (SPF) says. The ad gets you to install an app file on your Android phone. Then a caller posing as a government official or bank officer does the rest. If your parents sign up for activities online, this is worth showing them.

How does the scam work, step by step?

Here's the order of events the SPF describes. We've also covered the fake active ageing centre scam, which starts with a similar ad.

• You see an ad on social media, such as Facebook, for a senior activity, a water-based fitness class or a recycling programme.
• To sign up or book the service, you're told to download an Android Application Package (APK) file, not an app from the app store.
• After it's installed, you get a call from someone who says they're a government official or from your bank. They claim your phone or bank account has been compromised, or that you're linked to a crime.
• They press you to transfer money, give your banking details or personal information, or hand over valuables for an "investigation".
• In some cases, the scammers use the malware on your phone to make bank transactions you never approved. Many victims only find out when they see these payments.

What are the warning signs?

The SPF says Singapore government officials will never ask you to do any of the first four things below.

• You're asked to transfer or hand over money or valuables, such as gold, luxury watches or cryptocurrency.
• You're asked for your banking login details.
• You're asked to install an app from outside the official app stores.
• The caller offers to transfer your call to the police or another agency.
• An ad wants you to download a file to register, instead of linking to an app store.
• Someone you can't verify tells you to change your phone's settings.
• You're told to leave money or valuables somewhere for a person to collect.

What should you do if a call or ad seems off?

The SPF's advice comes in three steps: add, check and tell. Fake ads on Facebook push other scams too, like the fake investment guru ads on Facebook.

• Add the ScamShield app, which blocks scam calls and filters suspicious SMSes. Turn on your bank's security features, such as transaction limits, two-factor authentication and Money Lock.
• Check with the ScamShield Helpline on 1799, open 24/7. Check an ad or organisation through its official channels, and never share your bank or card details or OTPs.
• Tell your family and friends about the scam. If you think you've been scammed, call your bank straight away and make a police report.

What if the app is already on the phone?

The SPF's June advisory lists what to do if a suspicious app was installed. Our guide to protecting yourself from ID theft covers what to do if your personal details got out too.

• Turn on flight mode and keep Wi-Fi off.
• Run an antivirus scan or a Google Play Protect scan.
• From another device, check your bank, Singpass and CPF accounts for transactions you didn't make.
• Don't factory reset the phone before you report to the police. It can get in the way of their investigation.
• After you've reported it, factory reset the phone and change your important passwords.

Who loses the most per person to scams in Singapore?

People aged 65 and above lose the most per victim on average. In the SPF's mid-year figures, they made up 14.4% of scam victims, but lost S$42,347 each on average, the highest of any age group. Most of them fell for government official impersonation or investment scams, The Straits Times reported.

Scams as a whole are down this year. Singapore lost S$410.6 million to scams in the first half of 2026, against S$500.2 million in the same months of 2025. Since 2019, the total is more than S$4 billion.

Frequently asked questions

What is an APK file?

An APK is an Android app file. The SPF says to install apps only from official app stores, and never from unknown sources or from links sent by people you don't know.

Will a government officer ever ask me to transfer money?

No. The SPF says Singapore government officials will never ask you to transfer or hand over money or valuables, give your banking login details, or install apps from unofficial app stores.

What number do I call to check if something is a scam?

Call the ScamShield Helpline on 1799. It's open 24/7. If you think you've already been scammed, call your bank straight away and make a police report.

How much has been lost to this scam?

At least S$989,000 across at least 62 reported cases since April 2026, the SPF said on 20 October. The ads offered senior activities, water-based fitness classes and recycling programmes.

Sources

• The Straits Times: Nearly $1 million lost through impersonation scams linked to fake social media ads
• Singapore Police Force: Police advisory on malware from social media advertisements (20 October 2026)
• Singapore Police Force: Police advisory on malware-enabled scams on Android devices targeting senior citizens (18 June 2026)
• ScamShield

Keep exploring

• How the fake active ageing centre scam works and how to spot it
• How the fake investment guru scam on Facebook works and how to spot it
• What is ID theft? A 2026 Singapore guide to protecting yourself
• Personal finance calculator (1/3 rule)

This is general financial information for Singapore, not personal financial advice. Figures change, so verify current rates against the official sources above before acting. See our full disclaimer.