Singapore’s Government-Official Impersonation Scams More Than Doubled in 2025

1. Public information becomes a credibility kit

Scammers can use publicly available names, designations, work contact details and organisational information to make a false identity appear plausible. The Singapore Government Directory previously listed information such as public officers’ names, job titles, e-mail addresses and office numbers. Singapore has since pared back many officers’ contact details to reduce the material available for impersonation and social engineering.

Directory information is useful for making a story sound authentic, but it is not an identity check. Information copied before the change may still circulate, and other public or leaked information can help scammers fill in the gaps.

2. Urgency turns recognition into compliance

The caller may claim that the target is connected to money laundering, an investigation, an immigration or employment issue, or another official matter. A common pattern is to create fear of arrest, account suspension or legal consequences, then offer a supposed solution that requires immediate action.

Scammers may also transfer the victim between people posing as officers from different agencies, supervisors, police officers or banks. This staged organisational chain can make the interaction feel procedural even though every participant is part of the same deception. ScamShield has specifically warned about unsolicited phone calls and in-app calls, including WhatsApp video calls, allegedly from agencies such as the Singapore Police Force or the Monetary Authority of Singapore.

3. Visual and digital signals reinforce the story

A scammer may send a falsified official-looking document or a doctored staff pass after a call. In one advisory, the Ministry of Law described a variant in which a purported officer requested images of a victim’s NRIC and then used falsified documents and a doctored staff-pass image to increase credibility.

Other signals may include a spoofed caller ID, official branding, a familiar-looking profile name or image, and knowledge of how agencies work together. These are presentation techniques, not reliable authentication.

4. The final request extracts money, access or information

Once the victim accepts the false identity, the scammer may ask for identification details, banking information, SingPass or CPF-related information, social-media details or one-time passwords. Other requests can include transferring money to a supposed “safe account,” clicking a link, opening a file, installing software or handing over valuables.

The harm is not limited to an immediate financial transfer. A person who shares confidential work documents, credentials or internal correspondence may create a security incident even if no money is lost. The published scam statistics do not separately quantify document-exfiltration or corporate-espionage losses, so the scale of that risk cannot be inferred from the figures below.

The 2025 numbers show a sharp reversal of the national trend

Government-official impersonation scams were therefore an outlier in 2025: cases more than doubled and losses increased by more than half while the overall scam totals declined. The category recorded the second-highest losses among scam types that year.

What Singapore has changed

Fewer direct details in the government directory

From 1 July 2026, the Singapore Government Directory was streamlined, with contact information mainly retained for political office-holders, judicial appointment holders, senior management and selected direct contact points. The stated objective was to reduce the risk that publicly available officer details would be used in scams.

This reduces exposure; it does not retroactively remove copied information or authenticate every person who claims to be a public officer.

Blocking and labelling measures for phone calls

Singapore telcos have blocked commonly spoofed trusted local numbers, including government agencies and emergency hotlines, since 2019. Incoming international calls have carried a + prefix since April 2020, giving recipients a signal that a call is coming from overseas. Telcos also began blocking international calls that spoof local Singapore numbers in December 2022.

These controls can reduce some phone-based abuse, but a warning signal is not proof that an unflagged call is legitimate. Messaging-app calls and profiles do not necessarily pass through the same telephone-network controls.

ScamShield tools and a standard government SMS sender ID

ScamShield provides a 24/7 helpline at 1799, an app, a website and reporting or checking channels. Its tools can help users identify, filter and report suspicious calls, messages, websites and links, but users should not treat a clean result as a guarantee that a caller is genuine.

Government SMSes should use the gov.sg sender ID rather than an ordinary mobile number. That check is useful for SMS, but it does not authenticate a WhatsApp account, phone call or document received through another channel.

What protections still cannot solve

Messaging apps can bypass familiar phone cues

A WhatsApp profile can present a convincing name and image, and an in-app voice or video call can feel more personal than a text message. But the visual identity remains controlled by the account holder, not verified by the government agency. ScamShield includes in-app impersonation calls in its warnings.

A real organisational relationship can be fabricated

A scammer does not need to impersonate only one official. By claiming to transfer a call between agencies or departments, the scammer can manufacture the appearance of a coordinated investigation. That makes it especially important not to verify one unsolicited contact using another contact supplied by the same conversation.

Data reduction is not authentication

Removing directory entries lowers the amount of information available for targeting, but it cannot establish that a caller, profile or document is genuine. Identity must be checked through a separate channel controlled by the agency.

A safer verification procedure

Use this sequence whenever an unsolicited contact claims to be from a government agency:

1. Stop the conversation. Do not allow urgency, threats or a claimed transfer to dictate your next action.
2. Do not disclose secrets. Never provide banking credentials, one-time passwords, SingPass details or sensitive identification information to an unverified contact.
3. Do not move money or valuables. Government officers will not ask you to transfer money over a phone call, and police will not ask you to place money in a “safety account.”
4. Do not click, open or install. Treat unexpected links, files, apps and screen-sharing requests as untrusted until independently verified.
5. Find the agency yourself. Navigate to the agency’s official website or use a trusted published switchboard number. Do not use contact details provided in the suspicious message.
6. Check with ScamShield. Call the 24/7 helpline at 1799 or use the ScamShield app and website to check suspicious messages, numbers and links.

For agencies and employers, the same principle should apply to document requests: use authenticated portals or access-controlled channels for sensitive files, and require a second-person check for unusual requests from an unfamiliar or unexpected contact.

The practical takeaway

Singapore’s directory changes and telco controls reduce opportunities for impersonation, but they cannot make a caller’s appearance, title or profile trustworthy by default. The durable defence is procedural: pause, refuse requests for money or secrets, and verify independently through an official channel.

If the contact is genuine, an agency can survive a callback. If it is a scam, the callback breaks the staged chain of trust.