1. Personal
  2. eServices
  3. UOB TMRW
  4. Security

Security

  • securitysecurity

    Protect yourself from scams

Scam Alert

Scammers may create phishing websites with similar URLs to trick you into thinking that you are accessing an official UOB website. Be wary of the subtle differences and always check the URL carefully. Call our dedicated hotline at 6255 0160 (24-hour) if you have fallen victim to a scam. You can also follow our UOB Facebook page for the latest updates and advice on scams.

 

Additional measures to protect you from scams

Your online banking security remains our top priority, and we are committed to protecting you from phishing scams. You can call our dedicated 24/7 Fraud Hotline at 6255 0160 to assist you with potential fraud cases on a priority basis.

Additionally, we have implemented extra security measures to safeguard your online banking experience. They include:

 

12-hour cooling period on fund transfers to all new payees

12-hour cooling period transfers to all new payees
 
 
 

 

This measure prevents scammers from adding new payees and performing funds transfers immediately. You will be notified via SMS when adding new payees.

 

 

Default limit for funds transfers is now S$5,000

Default limit for funds transfers is now S$5,000
 
 
 

 

Limit is customisable via UOB Personal Internet Banking or the UOB TMRW app.

 

 

One time fund transfer limit reinstated to S$5,000

One time fund transfer limit reinstated to S$5,000
 
 

 

Transfers above S$1,000 require an additional transaction signing. Amounts above S$5,000 require registration as a payee.

 

 

Additional transaction signing required for transfers above $5,000 to new payees

 

This measure caps the amount that a scammer may pilfer without phishing for your transaction signing code.

 

 

Removal of all clickable links in our SMSes and emails

Removal of all clickable links in our SMSes and emails
 
 

 

Any SMS claiming to be from UOB that contains a link will likely be a scammer. Do not click.

 

 

Anti scam reminder upon logging into UOB Personal Internet Banking and UOB TMRW app

 

To ensure you are up to date on our latest security measures, please acknowledge the message.

 

 

Default transaction notification set at S$100

Default transaction notification set at S$100
 
 

 

You may still customise your transaction notification threshold via UOB Personal Internet Banking.

 

 

12-hour cooling period on activation of new Digital Token

12-hour cooling period on activation of new Digital Token
 
 

 

If you are alerted to an unauthorised token activation, please call our Fraud Hotline immediately.

 

 

Receive 'New Device Login' alerts

Receive 'New Device Login' alerts
 
 

 

Alerts are sent via email when signing in from a different device or browser for the first time. If you detect any unauthorised logins, please contact the Fraud Hotline immediately.

 

 

Receive SMS notifications when requesting changes to contact details

 

The SMS will be sent to your mobile number registered with UOB. No one should be able to change your contact details without your knowledge.

 

 
 
 
 
phone icon

HOW TO CONTACT US

If you suspect that your account has been compromised,
please change your password and contact us immediately by calling
6255 0160 (24-hour hotline)

Latest Online Threats

Online threats come in various forms and are constantly evolving. With a better understanding of the latest threats, you can stay well informed on how to keep your finances safe.

Impersonation Scams by Local and China Officials

Phone impersonation scams involve claims that the scammers are local and/or foreign government officials or police officers or individuals who are professionals such as recruiters. Victims are accused of being involved in crime and are persuaded to divulge confidential information on fraudulent websites. The scammers will transfer funds out from the victims’ accounts once they have received them.

Show moreShow less

Phishing Scams

Recently, customers of Singapore banks have been targeted by a series of phishing scams. Through email and SMS messages that appear to be sent officially by the bank, these scams trick users into accessing fake websites to provide sensitive personal information.

Show moreShow less

What can you do to protect yourself?

  • No foreign law enforcement or authority can investigate offences here in Singapore.
  • No public authority can require you to open bank account or request for you to include digital banking to your account.
  • Never reveal your bank account numbers, one-time passwords (OTPs) or 3-digit credit card security code. No government officials or those who are involved in the contact tracing exercise will ask for such banking information or require remote access to your computer.
  • Never grant remote access of your computer to anyone.
  • Never download any application or software directed by the caller.
  • Never login into any website directed by the caller.
  • If you receive such calls asking for banking information such as OTPs, you should hang up and call UOB or the police immediately.
  • Visit scamalert.sg or call Anti-Scam Centre at 1800 722 6688 for more information on scams.
Show less

What can you do to protect yourself?

  • Do not click on dubious links and always examine the links when presented in an email or SMS.
  • Hover over links to check the destination of the URL. Check for any typos or misspelt words in the URL. When verifying links using mobile phones, press and hold the link to display the actual URL.
  • Always visit the legitimate website bookmarked in your browser or found via a Google search.
  • Ensure that you do not overlook the spelling mistakes when inspecting the website URL.
  • UOB will never send an SMS to inform customers about account closures or being locked out of their account, or to reactivate accounts.
  • Do not share banking login credentials or OTP on suspicious SMS.
  • If you are in doubt about the authenticity of any SMSes received, please contact UOB at 6255 0160 or Anti-Scam Centre at 1800 722 6688.
Show less

'Fake Friends' Scams

This is a variant of the typical Impersonation Scams. With these 'Fake Friends' scams, victims receive unsolicited calls from scammers who do not identify themselves but instead ask victims to guess their identity. The scammers then assume the identity of whoever the victims have guessed and make small talk. A follow-up call will then be made to the victims within the next couple of days, and scammers will thereafter make up excuses to ask for urgent loans from the victims, citing emergencies or urgent needs. Once victims make the transfer, the scammers will stop contacting them.

Show moreShow less

Smishing Scams (Fixed Deposit Promotions)

Received SMS messages on Fixed Deposit promotions that might seem too good to be true? Think twice! Stay vigilant and look out for the tell-tale signs of a smishing scam.


"Smishing" is a common scam attack that involves text messages impersonating a bank or an organisation. These scammers will try different means to capture your attention and acquire your personal information. Some will even go to the extent of spoofing the sender’s name, phone number or both to trick you. For example, a recent scam involves SMS messages sent from the sender name “TMRW” and “UOBTRMW”, which resembles the UOB TMRW app name, informing recipients about unusual activity in their accounts. That link will lead you to a scam website.


Remember, UOB does not send SMSes with clickable links.

Show moreShow less

What can you do to protect yourself?

  • Avoid answering calls from unknown numbers. When this is not possible, ascertain the identity of the person calling. You may do so by asking specific questions that only you and the purported person know (for example, how you met, who your mutual friends are and when the last time you met was);
  • Verify the call by contacting the actual person whom the scammer claimed to be. You should use known contact details of that person after the unsolicited call to verify if he/she indeed made the call.
  • If funds were transferred, quickly report this to the Police and the Bank.
  • Do not divulge personal and banking information to anyone.
Show less

What can you do to protect yourself?

  • UOB will never send you an SMS message that requires you to call a phone number to get details for a promotion. Stay vigilant and do not call the number stated on the SMS.
  • Do not click on dubious links and always examine the links when presented in an email or SMS.
  • Hover over links to check the destination of the URL. Check for any typos or misspelt words in the URL. When verifying links using mobile phones, press and hold the link to display the actual URL.
  • Always visit the legitimate website bookmarked in your browser or found via a Google search.
  • Ensure that you do not overlook the spelling mistakes when inspecting the website URL.
  • UOB will never send an SMS to inform customers about account closures or being locked out of their account, or to reactivate accounts.
  • Do not share banking login credentials or OTP on suspicious SMS.
  • If you are in doubt about the authenticity of any SMS messages you have received, please contact UOB at 6255 0160 or Anti-Scam Centre at 1800 722 6688.
  • Do not transfer funds to any account directed by anyone who claims to be the Bank’s staff.
Show less

Loan Scams

Scammers send messages via SMS, WhatsApp, Facebook and other social media platforms offering loans services, claiming to be licensed moneylenders. Victims are instructed to transfer money as a deposit before the loan can be disbursed. After making the transfer, the scammers will no longer be contactable.

Show moreShow less

Online Purchase Scams

These scams involve seemingly attractive online shopping deals, listed by scammers pretending to be legitimate vendors on e-commerce platforms. The scammers often offer discounts if a buyer pays through a direct bank transfer, rather than the official platform. The buyer does not receive the purchased item after the payment is made.

Show moreShow less

Example of a Loan Scam SMS:

 

 

What can you do to protect yourself?

  • Do ignore these spoofed loan advertisements and messages. Please block and report the number as spam on WhatsApp or through third-party applications.
  • Only engage the services of licensed moneylenders listed on the Ministry of Law's Registry of Moneylenders website . It is illegal for licensed moneylenders to advertise via SMS or WhatsApp.
  • Never reveal your personal information like NRIC or contact numbers, SingPass, bank details and account numbers.
  • Do seek financial help from authorised financial institutions if necessary.
  • Visit scamalert.sg or call Anti-Scam Centre at 1800 722 6688 for more information on scams.
Show less

What can you do to protect yourself?

  • Be wary of popular products priced suspiciously below the market rate.
  • Review the seller’s past transactions and user ratings, and check that the listing has clear terms and conditions.
  • Only pay through the platform’s secure payment option.
  • Check that all costs are stated clearly.
  • When in doubt, do not make payments and seek advice from the Police, or check out www.scamalert.sg.
Show less

Job-related Scams

Job openings are often posted to lure hopeful applicants into providing their bank information and even login details to scammers. One such scam involves asking for applicants’ details to help the "company" test how well its software synchronises between its "clients" and local banks, with a promise of a small fee for each test transaction.

l Other similar scams involve fraudsters offering jobs that require victims to buy advertised items on e-commerce platforms, with the promise that they will receive a refund on the purchase price plus additional commissions. They are however required to make payments to designated bank accounts instead of the e-commerce portals, and they subsequently do not receive the refund or commission.

Show moreShow less

Parcel Delivery Phishing Scam

Waiting for an update on the status of your online purchases? Keep a look out for scammers who may target unsuspecting victims with spoofed messages or emails claiming to be arranging for a delivery. These messages may lead to websites that try to lure victims into divulging their credit or debit card information to make fraudulent transactions.

Show moreShow less

What can you do to protect yourself?

  • Do not click on links shared on unsolicited emails or SMS messages.
  • Verify the link from the message by cross-checking with the vendor.
  • Verify the merchant details indicated in the OTP message and do not share your OTP if you are not making the transaction.
  • Never disclose your personal or Internet banking details to anyone.
Show less

WhatsApp Scams

Carried out via WhatsApp or Viber, victims receive anonymous calls from scammers who claim to be personnel from banks or official organisations. Victims might be requested to perform transactions remotely, or to share confidential and personal information. Examples include internet banking username, PIN code, one-time password (OTP) and credit card details.

Show moreShow less

Contact Tracing Impersonation Scam

Scammers pose as government officials, claiming that they are conducting contact tracing for COVID-19 in order to retrieve personal and financial details. Verify the authenticity of a contact tracing call in Singapore by calling the Ministry of Health's general hotline at +65 6325 9220.

Show moreShow less

What can you do to protect yourself?

  • To validate the call, hang up and dial the organisation’s official number.
  • Please block and report the number as spam on WhatsApp or through third-party applications.
  • Never reveal your bank account numbers, one-time passwords (OTPs) or 3-digit credit card security code to anyone.
  • Visit scamalert.sg or call the Anti-Scam Centre at 1800 722 6688 for more information on scams.
Show less

What can you do to protect yourself?

  • Never reveal your bank account numbers, one-time passwords (OTPs) or 3-digit credit card security code to anyone.
  • Never grant remote access of your computer to anyone. No government officials or those who are involved in the contact tracing exercise will ask for such banking information or require remote access to your computer.
  • If you receive such calls asking for banking information such as OTPs, you should hang up and call UOB or the police immediately.
  • Visit scamalert.sg or call the Anti-Scam Centre at 1800 722 6688 for more information on scams.
Show less

Covid-19 Vaccine/Test Kit Scam

Scammers are exploiting Covid-19 vaccination/test kit to scam victim in giving away personal and financial details for ‘registration purpose’. Claiming that they are from an approved pharmaceutical company to provide Covid-19 Vaccine, such as Moderna, they sent text messages and asked recipients to click on a link or make a phone call to schedule appointments for vaccination. They will then ask for personal and banking information for ‘registration’. Another related scam includes scam calls or text messages to falsely inform the victim that they had been in close contact to someone who had tested positive for Covid-19. These messages also request for personal or financial information in return for a test kit and test reports.

Show moreShow less

Investment Scams

This is a new type of scam targeting victims via Whatsapp, Telegram, Facebook and other social media platforms. Scammers persuade victims to invest in financial products with lucrative returns, convincing them to transfer large amounts of money to cover various fees and taxes. Once the scammers have secured the funds, they cut off contact with the victims.

Show moreShow less

What can you do to protect yourself?

  • Never reveal your bank account numbers, one-time passwords (OTPs) or 3-digit credit card security code to anyone. No government officials or those who are involved in the Covid-19 vaccination programme will ask for banking information or personal particulars over the phone.
  • Stay vigilant when receiving unexpected international or unknown number calls. Reject those with spoof local numbers.
  • Always check on the URL link received in the SMS. Make sure it ends with “.gov.sg” for official government website.
  • Verify the authenticity of such messages by calling the Ministry of Health's general hotline at 1800-333-9999 for more information on the Covid-19 vaccination exercise.
Show less

What can you do to protect yourself?

  • Be cautious when befriending strangers on social media platforms.
  • Understand that investments with high returns come with high risks.
  • Always check with a licensed financial advisor before making any investment.
  • Check if an entity is blacklisted on the Monetary Authority of Singapore (MAS) Investor Alert List. Deal with companies that are licensed and regulated by MAS.
  • Ask as many questions as you need to fully understand the investment opportunity.
  • Do a thorough check on the company and its representatives using resources such as the financial institution's directory, register or representatives, and investor alert list, which can be found on the MAS website.
  • Never provide your name, identification number, passport details, contact details, bank account or credit card details to anyone you do not know well.
  • Be careful when dealing with unregulated entities as you will have little recourse if things go wrong. If an entity is based outside of Singapore, check if it is regulated with the respective overseas authority.
  • Before committing to an investment, always Ask, Check and Confirm.
  • More information on investment scams can be found at MoneySense: How to spot investment scams.
  • Visit scamalert.sg or call Anti-Scam Centre at 1800 722 6688 for more information on scams.
Show less
Technical Support Scams

Technical Support Scams

Scammers call victims, usually from numbers with the +65 prefix, claiming to be technicians from established companies such as Singtel and Microsoft, convincing them that their internet connection has 'technical' issues. Victims are then told to download remote control software such as TeamViewer and pcAnywhere. Scammers abuse this administrative access to the victim's computer to install malware or access sensitive information, used for identity theft or transfer of funds.

Show moreShow less
Singapore Bicentennial Note Phishing Scam

Singapore Bicentennial Note Phishing Scam

Recently, phishing SMSes have been sent inviting recipients to click on a link to claim a S$20 Singapore Bicentennial Note for free. Some of these SMSes direct recipients to a fake UOB website and prompt them to divulge sensitive personal information or bank account details.

Show moreShow less

What can you do to protect yourself?

  • Never reveal your bank account numbers, one-time passwords (OTPs) or 3-digit credit card security code.
  • If you receive such calls asking for banking information such as OTPs, you should hang up and call UOB or the police immediately.
  • Visit scamalert.sg or call Anti-Scam Centre at 1800 722 6688 for more information on scams.
Show less

What can you do to protect yourself?

  • Do not click on dubious links and always examine the links when presented in an email or SMS.
  • Hover over links to check the destination of the URL. Check for any typos or misspelt words in the URL. When verifying links using mobile phones, press and hold the link to display the actual URL.
  • Do not provide your personal information or bank account details on suspicious websites that you are unfamiliar with.
  • If you suspect that you have been scammed, please inform UOB at 6255 0160 or make a Police report immediately.
Show less

 

Please do not fall prey to such scams. Do not transfer money to people you do not know. When in doubt, confirm the request through official sources such as government agency hotlines. If you suspect your account has been compromised, please change your password and contact the bank immediately at 6255 0160 (24-hour hotline).

Top Security Tips

The protection and security of your financial information is a top priority to us. When it comes to keeping your information secure, it helps to stay vigilant and be updated on ways to protect yourself. Together, we can proactively safeguard your financial information so you can enjoy a peace of mind when you transact online.

Keep your password confidential at all times and do not divulge it to anyone. UOB and our partners will never request for your password. Always keep your Personal Internet Banking (PIB) username, password, One-Time Password (OTP), Credit/Debit Card and banking account details confidential at all times.

Do not use personal information such as your telephone number, birth date or the like as your password as these will not make strong passwords.

Change your password regularly.

Change your password immediately if you suspect your account has been compromised.

Always log out after an online banking session.

Do not grant remote access of your computer to anyone or download any remote control software as instructed over the phone.

Online and Mobile Security

Enjoy the full convenience of secure online banking transactions and peace of mind from our multi-layered security programme. Learn more about how we keep your transactions safe.

 

WHAT WE DO TO PROTECT YOU ONLINE

New Device Login Alerts

New Device Login Alerts

Bringing you an enhanced secured banking experience for your digital banking needs. As a form of security measure to safeguard our customers, you will receive email notifications with the subject header “New device login alert” when you login to your UOB TMRW or UOB Personal Internet Banking account from a different device or browser for the first time. We will keep track of up to 10 different devices or browsers in the bank records.

Find out more
Replace or block your card

Replace or block your card

No more waiting on hold. You can now report a lost card, request for a replacement card or temporarily block your card for fraudulent transactions and unblock your card easily on UOB TMRW. Click here for the step-by-step guide.

mobile

Digital Token

No more OTPs. Digital Token enables you to log into both UOB Personal Internet Banking and UOB TMRW seamlessly. It can only be set up on one mobile device and only you have access to it.

Find out more
UniAlerts

UniAlerts

Keeps you informed of your transactions

Avoid late payment of your UOB Credit Card bills and get instant updates of your account activities via UniAlerts.

Login to UOB Personal Internet Banking here and click on Account Services > Manage Alerts to register – make sure your contact details are updated.

Find out more
Unique Login Credentials

Unique Login Credentials

Access your Internet Banking account with a unique Username and Password that cannot be used by anyone else.

Automatic Logout Feature

Automatic Logout Feature

Inactive Internet Banking sessions will be detected by our system and you will automatically be logged out to ensure your account details are not compromised.

Manage transaction limits

Manage transaction limits

Manage payment or transfer limits with ease on UOB TMRW. You can set lower limits to safeguard your banking transactions. Click here for the step-by-step guide.