The Cyber Security Agency of Singapore’s (CSA) Singapore Cyber Emergency Response Team (SingCERT) has issued an urgent warning on 27 December 2025, amid a surge in sophisticated scams in which fraudsters are impersonating government officials from key national agencies. The advisory, released on the CSA’s official website, highlights that members of the public are being targeted with fraudulent communications claiming to be part of criminal investigations related to cyber-infiltration and data seizure.
According to the alert, scammers have been posing as officers from the Cyber Security Agency of Singapore (CSA), the Singapore Police Force (SPF), and the Ministry of Home Affairs (MHA). Using fake criminal investigation notices, these actors seek to alarm citizens by alleging their involvement in alleged cybercrime activity. Victims are then pressured to “respond urgently” — often within 48 hours — under threat of supposed legal action.
How the Scam Works
The fraudulent notices are crafted to appear convincing, often mimicking official language and formats associated with government correspondence. Once contact is made, the scammers employ a range of psychological tactics to coerce victims into complying with their demands. These may include:
- Requests to transfer money into bank accounts or to mobile numbers linked to bank accounts.
- Demands for personal information, such as banking log-ins, SingPass credentials, or Central Provident Fund (CPF) details.
- Instructions to click on suspicious links leading to fake or compromised websites designed to steal authentication details.
- Prompting victims to install software or apps that are not from verified sources, which could lead to malware installation or further compromise of devices.
Official Government Communication Practices
The CSA and other Singapore government agencies have reiterated a clear guideline: official representatives will never ask individuals to transfer money, disclose sensitive account information, or install third-party software during an investigation. Such requests are immediate red flags and should be treated with suspicion.
Protecting Yourself and Reporting Suspicious Activity
Members of the public are strongly advised to remain vigilant and take the following precautions:
- Verify authenticity: Always confirm the legitimacy of any officer claiming to represent a government agency by reaching out through the official contact details listed on the agency’s recognised website.
- Do not comply with unusual demands: Avoid transferring money or divulging any personal or financial information in response to unsolicited communications.
- Use ScamShield and official reporting tools: If in doubt, contact the ScamShield helpline at 1799 or email SingCERT at [email protected] for verification. You can also report incidents through the official SingCERT reporting portal.
- Lodge police reports if victimised: Individuals who have lost money or have been otherwise affected by such scams should report the matter to the Singapore Police Force at their nearest neighbourhood police post, or via the online police reporting service.
A Rising Threat in a Digital Age
This warning comes at a time when digital communication continues to play an essential role in everyday life. As scammers adopt increasingly advanced techniques to deceive the public, authorities are urging all Singapore residents and businesses to stay informed and exercise caution when responding to unsolicited requests that claim to be from government entities.
