Newsroom

A new type of online scam is gaining attention in Singapore, one that relies not on technical tricks, but on the art of conversation and building trust. Global law enforcement agencies like Interpol have highlighted these sophisticated frauds, where scammers invest weeks or even months creating a genuine-seeming relationship before revealing their intentions. For the dedicated owners and teams of Singapore’s Small and Medium Enterprises (SMEs), this threat requires a different kind of awareness because it bypasses firewalls and targets our natural instinct to connect and trust.

A “pig-butchering” scam is a long-term online fraud where scammers carefully build trust before making their move. Instead of quick tricks, they act like genuine contacts often on platforms like LinkedIn, sharing insights and building rapport over weeks or months. The name comes from the idea of “fattening the pig” with trust before the “butchering,” or financial exploitation.

Imagine this familiar scenario: a business owner receives a connection request on LinkedIn from a “consultant” with a polished profile. Over several weeks, they build a friendly rapport, discussing industry trends and sharing insights. The consultant appears knowledgeable and supportive. Then, they casually introduce a seemingly unique and promising investment opportunity.

Because of the trust established, it feels natural to consider the proposal. A fund transfer is made, only for the new contact and the money to quietly disappear.

Understanding the Approach

This type of scam is a form of long-term social engineering. Scammers patiently build a relationship of trust before introducing a fraudulent financial opportunity. This patient approach can be effective for a few reasons that are tied to the very strengths of SMEs: Collaborative Networks: SMEs thrive on personal connections and networking. Business owners are naturally open to building relationships on platforms like LinkedIn with those they perceive as industry peers.

• Ambition and Opportunity: SME owners are ambitious and always looking for the next growth opportunity. Scammers misuse this positive trait by posing as successful entrepreneurs or investors.
• Focus on the Core Business: With a primary focus on customers and daily operations, it can be challenging for busy teams to dedicate resources to training on these newer, more psychological scams.

As cybersecurity experts often say, your team is your best line of defense. Empowering your employees with knowledge is one of the most powerful steps you can take.

A Blueprint for Building Resilience

To protect your business from these psychological scams, foster awareness and create clear, and simple internal safeguards. Here is a supportive blueprint for action.

1. Empower Your Team with Awareness

Help your team understand that some online threats are built on patient manipulation. The Cyber Security Agency of Singapore (CSA) provides dedicated resources, like the Cybersecurity Toolkit for SME Owners.

• Share Knowledge: Hold informal team discussions about relationship-based scams. Use general examples to illustrate how scammers patiently build trust before making a financial request.
• Foster a Culture of “Trust, But Verify”: Create an environment where it is safe and normal to be cautious. Encourage team members to pause and double-check any unsolicited financial proposal, no matter how friendly the source may seem.
• Encourage Clear Boundaries: Advise your team to maintain a professional distance and use official company channels for business discussions with new contacts.

2. Strengthen Your Financial Safeguards

Every financial transaction, especially one stemming from a new relationship, can be protected with simple, clear procedures. The Singapore Police Force regularly issues advisories on investment scams that can help you and your team identify red flags. Introduce a “Two-Person Review”: For significant fund transfers to new vendors or for new investment opportunities, consider implementing a simple review process involving a second person.

• Create a Habit of Independent Verification: Before acting on any major financial request, take a moment to independently verify the person and the opportunity through official channels (like a company’s main phone line or official business registries).
• Recognise and Pause on Pressure Tactics: A genuine opportunity will withstand scrutiny. Encourage your team to slow down and follow your established safeguards. When in doubt, you can use national resources like the ScamShield website to check for known scam signs.

In an increasingly digital world, the lines between professional networking and personal connection are blurring, creating new avenues for sophisticated scams. The greatest vulnerability for Singapore’s SMEs is not necessarily in their technology, but in the human instinct to build trust, the very quality that helps them thrive.

Ultimately, defending against these psychological threats is not about shutting down networks but about building smarter, more resilient ones. By fostering a culture of informed caution and implementing simple, and clear financial safeguards, you empower your team to be the first and most effective line of defense.

This bulletin is brought to you by Evvo Labs Pte Ltd, a CISO-as-a-Service Consultant onboarded by the Cyber Security Agency of Singapore (CSA). For personalized cybersecurity guidance and services, please reach out to Evvo Labs at sales.vn@evvolabs.com.