One of my friend's grabpay also kena hack last month.
At first I thought he sohai gave out otp or what.
But now i believe grabpay is the problem...