Singapore Police Report Surge in Crypto Account Breaches via Email

Singapore police report a significant increase in unauthorized access to cryptocurrency accounts since mid-August. The breaches stem from compromised email inboxes. Law enforcement data indicates a direct link between email security failures and crypto asset theft.

Investigators found that many victims had previously suffered data breaches on other platforms. This suggests their credentials were already compromised. Attackers likely used this data to gain entry to crypto exchanges.

Attackers exploit reused passwords and email rules

Perpetrators leverage users who employ identical passwords across different services. They review email content to identify specific crypto platforms. This allows them to target the correct login portals.

Criminals create automated email rules to archive or delete messages from exchanges. They intercept password reset links and one-time codes. This prevents victims from receiving security alerts.

Police urge stronger authentication and monitoring

Authorities recommend using unique, strong passwords for every account. Users must enable multi-factor authentication. An authenticator app is preferred over SMS verification. SMS messages are more vulnerable to interception.

Account holders should review email security settings regularly. They must check forwarding rules and suspicious login activity. Users should enable transaction alerts on their crypto exchanges.

Immediate steps for suspected compromise

If unauthorized access is suspected, users must contact their email provider immediately. They should also notify their crypto exchange to secure the account. Passwords used elsewhere must be changed.

Prompt action limits potential financial loss. Delays allow attackers to move funds. GN markets/crypto (en-US) highlights the critical need for proactive security measures.