Published on 18 Jun 2019

​Ultra-low Gojek fares? They could be linked to scams, say experts

Just $8 for a Gojek ride from Woodlands to Bugis, $9 for a ride from Marsiling to Changi, and $10 for a direct ride from Dhoby Ghaut to Tampines on a Friday evening.

These prices, which could be up to 75 per cent lower than official fares set by ride-hailing company Gojek, are what many passengers across Singapore are believed to have been paying for their rides in the past two months.

But passengers could have been unwittingly benefiting from someone's stolen credit card, or even become part of a money laundering scheme, according to experts that The Straits Times spoke to.

A compromise of the Gojek app has also been mooted as a reason behind the unusually cheap rides. 

These scenarios could lead to jail time and fines for the middlemen, said a lawyer, who added that whether passengers could be criminally liable too is a grey area.

In an ST report last month, Gojek had referred to such discounted bookings as suspected scams as some passengers ended up paying more than what was advertised.

But further checks found that at least two dozen middlemen have been providing these Gojek bookings for possibly hundreds of passengers daily in the past month, judging by postings in the SG Hitch Telegram group. 

The online chat group was set up for drivers and passengers to list carpooling requests and now has some 18,000 members, with as many as 1,800 trip requests daily, mostly from passengers.

Posing as a passenger, this reporter posted 11 trip requests, which drew responses from 25 middlemen. The cost savings from such rides went as high as $30, such as the journey from Woodlands to Tampines, after surge pricing was taken into account.

Many of the middlemen, who used local mobile numbers, would become uncontactable soon after making the bookings, while some even deleted their accounts.

ST understands that the middlemen would handle the payments to Gojek through credit or debit cards.

Mr Alan Lim, Asia-Pacific practice leader at IBM Blockchain Labs, said these cases could involve credit card fraud.

But he added that ride-hailing providers had previously reported such schemes where unsanctioned middlemen used stolen credit card credentials to exploit the inability of these companies to verify the correct users of their platforms.

Nanyang Business School Adjunct Associate Professor Zafar Momin also flagged the bookings as possible credit card fraud. 

Security experts at Trustwave said money laundering could also be involved. The US-based security services company, which is owned by Singtel, had previously looked into a money laundering scheme using the
American ride-hailing app Uber. It said: "Knowing what we know about the underground, this could definitely be a money laundering scheme. 

"If the drivers are not involved in the case, the scheme could simply work such that the bad actor pays the ride fee with 'dirty money', but the fee they receive from the person ordering the ride is 'clean money'." Citing
the example of a ride from Woodlands to Bugis for which ST paid $8 instead of the $23 official fare, Trustwave said spending $23 of illicit money to get $8 of clean money was a "very reasonable conversion ratio" for a money launderer.

Ms Reshmi Khurana of Kroll, a firm that helps clients make risk management decisions, said fraudulent credit card transactions are usually quickly reported by card holders and addressed by credit card companies, which means that only a small number of transactions can be carried out by fraudsters before the card is blocked.

Ms Reshmi, the firm's managing director and head of business intelligence and investigations in South-east Asia, said it also could be that prices within the system are being manipulated by hackers. 

Noting that fast-growing firms would be attractive targets for various types of scams, she said: "Scamsters are always one step ahead of companies, which is why companies need to constantly evaluate things like not just cyber security, but also its people and processes."

In its reply to ST last month, a Gojek spokesman said it had made a police report and its fraud team was investigating in order to "swiftly resolve this matter".

Veteran lawyer Amolat Singh said if a crime is involved, the middlemen could face cheating, corruption or computer misuse charges depending on the nature of the fraud. But it would be a grey area as to whether passengers are breaking the law by taking the Gojek rides, even if they know that the rides are funded by ill-gotten means.

Mr Singh said this was because the Penal Code covers the offence of receiving stolen property but not services, which a Gojek ride would fall under.

He said: "The difficulty in charging a commuter is that he may genuinely believe that there is some sort of a promotion or reward if a payment was made by credit card directly to the driver. After all, the use of discounts or incentives is not uncommon."

Online middlemen have been providing cheap Gojek bookings for possibly hundreds of passengers daily in the past month.