The investigation revealed that victims searched for “Simba top-up” services on Google and clicked on fraudulent links that appeared among the top sponsored results. These sites were not organic search results but were promoted through paid search advertisements. Upon accessing these fake platforms, users were prompted to enter sensitive personal and banking details, including mobile numbers, bank card information, and digital token approvals or one-time passwords (OTPs). Victims typically only realized they had been defrauded after discovering unauthorised transactions on their accounts.
The police emphasized that high visibility in search engine results or the presence of a “sponsored” label does not guarantee a website’s legitimacy. Criminals are specifically leveraging the credibility of popular brand names to trick users into bypassing security checks. A key technical indicator of these phishing sites is their domain structure; unlike Simba’s legitimate top-up domain, https://topup.simba.sg, the fraudulent sites use distinct and often unusual domain extensions. Identified fake domains include simba-sg.asia, simba.sg-fastrecharge.shop, simba.sg-topup.icu, simba.sg-recharge.life, simba.sg-recharge.cfd, and simba.sg-recharge.cyou.
To mitigate the risk, authorities advise the public to avoid relying solely on search engine results for accessing critical financial services. Instead, users should use previously saved bookmarks or manually type the known, verified address directly into their browser. The police also highlighted that scams remain the dominant type of crime in Singapore, noting that total scam losses in the first six months of 2026 reached $410.6 million, a figure slightly lower than the $500.2 million recorded in the same period of 2025.
Members of the public who suspect they may have visited a phishing site or require assistance are advised to contact the 24/7 ScamShield Helpline at 1799. Further resources on scam prevention are available through the official government portal at www.scamshield.gov.sg. The police continue to monitor these activities and will issue further updates as the investigation progresses.



