LTA Phishing Scam: Travellers to Malaysia Warned of Fake Toll SMSes

Singapore Travelers Targeted in Toll Scam Impersonating LTA

Singaporean travelers to Malaysia are being warned about a sophisticated phishing scam involving SMS messages that falsely claim to be from the Land Transport Authority (LTA). The scam, which has already resulted in at least $24,000 in reported losses, preys on individuals after their mobile phones connect to Malaysian telecommunications networks for roaming.

According to a police statement issued on Tuesday, February 10, 2026, victims receive text messages alleging unpaid vehicle tolls. These messages are sent using a sender ID that previously belonged to the LTA, but was decommissioned in July 2024. Despite being officially retired, scammers are able to spoof the “LTA” sender ID from overseas, misleading recipients into believing the messages are legitimate.

The fraudulent SMS directs victims to click on a link to settle the purported toll fees. This link leads to a phishing website designed to steal their banking details. Once submitted, the scammers use this information to make unauthorized transactions, leaving victims unaware until they notice the fraudulent charges on their cards.

At least 10 cases have been reported since January 27, 2026, with losses totaling at least S$24,000 (approximately US$19,000). The police are urging the public to exercise extreme caution when receiving such messages.

Radio DJ Gao Yixin shared a near-miss experience on Facebook on February 9, detailing how she almost fell victim to the scam. After clicking a link in a text claiming to be from the LTA, she was prompted to pay a small fee of around $3.50, but was instead charged $23,000 on her credit card. She was able to halt the transaction and cancel her card before incurring the full loss.

The LTA has advised that official messages are now sent from the “gov.sg” sender ID and will never contain links requesting payment. They also noted that some phones may group scam messages with older, genuine LTA messages using the decommissioned sender ID, potentially adding to the confusion.

Authorities are advising phone users to avoid clicking on any links or attachments in SMS messages from unknown or suspicious senders, and to refrain from sharing personal information. They also recommend blocking any messages received from the decommissioned “LTA” sender ID.

The police emphasized that individuals should never disclose sensitive information such as banking or credit/debit card details, or one-time passwords, to anyone. They also suggest utilizing the ScamShield app to block scam calls and filter out scam SMS messages. A 24/7 ScamShield helpline is available at 1799 for assistance.

This scam is occurring alongside warnings about phishing attempts impersonating the Royal Malaysia Police, indicating a broader effort to target travelers between Singapore and Malaysia.