Singapore's police and the Cyber Security Agency of Singapore said cryptocurrency scams disguised as job offers have caused about $11.8 million (S$15.1 million) in losses, with victims lured from social-media ads or recruiter outreach into buying tokens, surrendering login credentials or a seed phrase, or running malicious coding tests that can expose their employers' systems. In one case already detailed by the agencies, a spoofed recruiting process led a target to install malware on a company-issued device, allowing attackers to steal a session token, bypass multi-factor authentication, enter a Bitbucket account and gather credentials used to alter software systems and move funds. The warning comes as Singapore steps up exchange-backed anti-scam operations in 2026, blocking around S$2.86 million from March 16 to April 15, more than S$4.2 million from April 16 to May 31, and over S$2.9 million in June, while urging the public to verify job listings, enable two-factor authentication and use the ScamShield app.