A ransomware crew on the verge of encrypting a Singapore company’s servers was stopped not by glacial bureaucracy, but by a WhatsApp message and decisive boots-on-the-ground action. That single, rapid chain of contact — German investigators to Singapore officers — turned a near-disaster into a disruption, arrests and the takedown of 27 servers tied to the criminal network. This episode should be ringing in everyone’s ears: speed, clarity and cross-border trust matter more than procedure when damage is about to happen.
Why speed beats protocol
Formal mutual legal assistance treaties and diplomatic lines exist for a reason. They also take time. Time is the enemy when ransomware begins encryption or when scam syndicates spin up payment funnels across jurisdictions. The Bavarian team’s choice to text colleagues directly, and the Singapore response within 15 minutes, delivered prevention rather than post-facto regret. It was pragmatic, messy, human — and profoundly effective.
“Information and intel sharing sounds highly sophisticated but in many instances, it’s very easy,” said Thomas Goger — and bluntness like that should be the default operating posture.
Numbers that demand action
Global losses to scams now dwarf small economies: roughly US$442 billion across 42 countries, according to the Global Anti-Scam Alliance. Locally, losses since 2019 exceed S$4 billion, with almost $914 million lost in 2025 alone. The first half of 2026 showed some improvement — $410.6 million lost versus $500.2 million the same period in 2025 — but these are far from comforting figures. Behind every number is a person: elderly victims losing life savings, families shaken, trust in institutions eroded.
Hard-won lessons from the front lines
Experience on the ground pulls no punches. The typical scam ecosystem is distributed: fraudulent ads and impersonating accounts on large platforms, mule networks, money laundering circuits that hop borders, and technical infrastructure hosted in permissive jurisdictions. Tackling one node in isolation is a temporary illusion of safety. That is the maddening truth.
Concrete wins come from coordination. In the first half of 2026, Singaporean authorities dismantled tens of thousands of scam-related lines and profiles — more than 47,000 mobile lines and 37,500 WhatsApp lines, for instance. Meta’s collaboration to remove 113,000 scam-linked accounts and pages shows industry can move at scale when the will is present. But will alone won’t close every gap.
Policy, law and accountability
Policy levers are catching up. Tougher treatments for young scam mules are on the table, following signals from senior ministers that leniency risks creating a pipeline of recruits. This is a hard, uncomfortable conversation. Rehabilitation matters, yes — but so does deterrence and accountability. Legal frameworks must balance rehabilitation with the reality that light sentences invite syndicates to weaponise youth.
Private sector: partner, not bystander
Social media and platform companies hold powerful levers. Proactive takedowns of fake profiles, rapid response to law enforcement notices, and cooperation on prevention campaigns are non-negotiable. The Meta partnership — orders to remove scam adverts and impersonating profiles — shows what can happen when regulators, police and platforms align. That alignment needs to be standard practice, not an occasional press release.
Operational recommendations that actually work
- Establish live, trusted channels between investigative teams across borders — secure messaging, not perfunctory email chains.
- Run frequent joint exercises that simulate real-time takedowns and live incident response across jurisdictions.
- Build playbooks that allow rapid action: take down command-and-control servers, freeze scam-linked accounts, notify affected institutions.
- Create legal fast-tracks for emergency disclosures while preserving privacy safeguards through limited-use agreements.
- Scale public awareness with targeted outreach to vulnerable groups — elderly populations need tailored, repeated messaging and trusted contact points.
Human costs and the moral imperative
There is moral urgency here. The elderly, targeted by government impersonation and fraudulent investments, suffer the worst personal losses. Families break apart. Trust dissolves. Prevention is not merely an efficiency problem; it is a protection imperative. That is why fast, cross-border disruption matters so much. It is prevention in its most visceral form.
An anecdote from the field: a tense midnight call, flashing lights across darkened car parks, technicians racing to isolate servers — relief when a ransom screen never fully rendered. Relief, yes. But also a bitter aftertaste: the system only held because people chose to move faster than rules allowed. That should be unacceptable as the exception. Make speed the rule.
Final word: act like the stakes are real
Complacency will be the tax societies pay if cooperation remains ornamental. This is a call to action for law enforcement agencies, industry partners and policymakers: standardise rapid information exchange, legislate smart emergency powers, and commit to sustained public education. When officers, investigators and platform teams can snap into a pre-agreed rhythm across borders, lives and livelihoods are saved. That is not optional. It is the measure of a system that values its people.
When the next alarm sounds, the choice will be blunt. Move fast, or explain why delay was acceptable. The answer should be obvious.