Mall staff abused internal systems and AI tools to generate thousands of fake accounts
What began as a customer loyalty campaign at a major Singapore mall spiraled into a sophisticated internal fraud case, exposing how access privileges and emerging technology can be misused when safeguards fail.
Abuse Of Trust Inside A Major Mall
A customer relations officer at Marina Square exploited his workplace access to orchestrate a large-scale fraud, creating 2,172 fake membership accounts to siphon nearly $28,000 in e-vouchers. Aravindran Vallaban, 26, was sentenced on Jan 2 to one year and eight months in jail after pleading guilty to a cheating charge under Singapore law.
At the time of the offenses, Aravindran served as an assistant customer relations supervisor employed by Singapore Land Group, the real estate developer that runs Marina Square through its subsidiary MCH Holdings. His role placed him at the information counter, where he handled customer inquiries and supported promotional campaigns.
Referral Campaign Turned Exploitation
The fraud centered on a membership referral campaign launched in April 2024. Under the scheme, both the referrer and the new member would receive $5 e-vouchers upon successful registration. New members were required to verify their identities through a one-time password sent to their mobile phones.
Aravindran leveraged his access to the mall’s internal customer relationship management system, which allowed him to view member data and voucher issuance details. Critically, his supervisor had shared login credentials with him, enabling Aravindran to view OTPs generated for member verification, a decision later cited in court proceedings.
Use Of ChatGPT To Generate Fake Data
Between May 13, 2024, and April 3, 2025, Aravindran systematically created fraudulent accounts by generating fake phone numbers using ChatGPT. According to Deputy Public Prosecutor Ryan Lim, he populated the membership sign-up forms with these fabricated numbers, manually retrieved the OTPs, and completed registrations without real users.
This process was repeated more than 2,000 times, allowing Aravindran to accumulate referral e-vouchers, which he then used for personal spending within Marina Square. Prosecutors noted that the scheme bypassed built-in verification safeguards by exploiting both human trust and system access.
Detection And Internal Investigation
The fraud was uncovered when MCH’s deputy general manager of marketing noticed irregularities in voucher distribution, specifically accounts receiving unusually high numbers of referral rewards. Further checks revealed that many of the associated phone numbers were invalid.
A review of internal system logs ultimately linked the fraudulent accounts to a single device ID, which matched Aravindran’s own Marina Square membership account. He was subsequently arrested and cooperated with investigations.
Legal Outcome And Restitution
In court, it was confirmed that Aravindran had made full restitution of the amount gained from the scheme before sentencing. While this mitigated his punishment, the court emphasized the seriousness of abusing entrusted access and manipulating digital systems for personal gain.
Prosecutors highlighted the case as an example of how internal control lapses, combined with emerging technologies, can amplify financial risk if not properly managed.
Broader Implications For Digital Retail Systems
The case has raised concerns across Singapore’s retail and technology sectors about internal access controls, password-sharing practices, and the misuse of generative AI tools. Experts warn that as digital loyalty programs become more sophisticated, companies must strengthen audit trails and employee training to prevent similar incidents.
This case underscores a growing challenge in the digital economy: balancing innovation with accountability. For businesses in Singapore and Indonesia alike, it highlights the urgent need for stronger internal controls as AI tools become more accessible. For consumers, it serves as a reminder that trust in digital systems depends not only on technology, but on the people entrusted to operate them responsibly.
Sources: Straits Times (2026) , Asia One (2026)
Keywords: Marina Square Fraud, Singapore Court Case, Referral Scheme Abuse, ChatGPT Misuse, Retail Cybercrime
