Circular – “Spoofing” Scam Perpetrated Against NEXCOMM ASIA PTE LTD

Dear valued customers,

“SPOOFING” SCAM PERPETRATED AGAINST NEXCOMM ASIA PTE LTD

1. 1. It has come to our attention that in or around March 2020, we were the target of a “spoofing” scam. In brief, this is an online scam where a fraudulent party intercepts communication between two parties, impersonates the identity of one or both parties, and defrauds the other party using the identity of one party.
   2. Accordingly, we are issuing this circular to inform of the method used by the scammer to defraud us and a former client, Omega Global Technologies, Inc. (“Omega”). The purpose of this circular is also to inform you of the steps we have taken to prevent similar incidents in future.
   3. The material facts are as follows:
      • In or around March 2020, we were engaged by Omega to supply integrated circuits. The sale was to take place in three (3) batches
      • Payment for the first batch of integrated circuits was duly received, and the first batch was duly shipped to Omega
      • On 28 April 2020, we were informed by Omega that they had made a further payment to us
      • We did not receive the further payment from Omega or from any other person or entity whatsoever. Our investigations revealed that on 29 March 2020, the email correspondence between Omega and us had been compromised by the “spoofing” scammer. The scammer had impersonated Omega’s staff by sending an email to us using the following domain name.
        “***********@omegagit.com” (emphasis added)
        For completeness, the actual domain name for Omega’s email accounts is:-
        “***********@omegagti.com” (emphasis added)
      • Separately, we understand that the scammer had also impersonated our staff by sending an email to Omega on 31 March 2020 using the following domain name:-
        “***********@nexcom-asia.com” (emphasis added)
        For completeness, the actual domain name for our email accounts is:-
        “***********@nexcomm-asia.com” (emphasis added)
   4. Once we are aware of the above, we have disabled web access for all our email accounts. We have also added the following rider to all our emails (in English and Chinese)
      1. “Nexcomm’s bank a/c remains unchanged over the last 15 years. We appreciate that you would verify with us via email, fax and video call immediately if you hear otherwise
         我司的收款账户固定不变，如有收到要求支付不同账户，请立即致电,传真及视频 通话与我司确认，谢谢。”
   5. We have also made a report to the Singapore Police Force in respect of the above fraud and sought legal advice.
   6. Moving forward, please be mindful to only correspond with email accounts ending with @nexcomm-asia.com.
   7. To this end, it leaves us to thank you for your continued support.