Anti-scam efforts by MDDI

1. Strengthening trust in Government calls​

• MDDI works with Government agencies to develop measures and strengthen safeguards against Government Officials Impersonation Scams. To help members of the public more readily recognise legitimate phone calls from the Government and answer these calls, Government agencies will make calls using numbers that start with a common Government prefix, and these calls will display a recognisable Government caller name. The Singapore Police Force will pilot the use of the common prefix from 2 November 2026 before we roll out these measures across Government. ​

1. Tightening of SIM card registration​

• IMDA, in consultation with SPF, has further limited the number of postpaid SIM cards each person can register, to a maximum of 10 across all telcos, with effect from 28 February 2026. This aims to minimise illicit SIM card use and purchases, whilst catering to the needs of legitimate users. This follows earlier tightening of SIM card limits:​

  • In April 2014, the maximum number of prepaid SIM cards for which a person could register was reduced from 10 across all the telcos to three.​

  • In April 2024, the maximum number of postpaid SIM cards for which a person could register was first set at 10 per telco. ​​

2. Self-help postpaid SIM card checker​

• IMDA, in collaboration with GovTech, launched a self-help postpaid SIM card checker for the public to check their registered SIM cards included within the postpaid SIM card limit. A beta version was launched on 26 February 2026 at SIMCardHowMany (opens in new tab).​

​3. Blocking of commonly spoofed local numbers, robocalls, scam SMSes and scam-related links via SMS​

• IMDA has partnered with telcos to implement a suite of anti-scam measures against scams coming through the telecommunication networks. ​

  • Since 2019, telcos have been blocking commonly spoofed local trusted numbers, such as emergency hotlines and government agencies. In addition, telcos have been blocking reported SMSes and scam links sent via SMS to Singapore users.​

  • Since 2020, telcos have been blocking robocalls using pattern recognition technology.​

4. Offering subscribers the features to block all incoming international calls and SMSes​

• As many of these scam calls/SMSes come from overseas, IMDA has worked with all telcos to offer subscribers the features to block all incoming calls and/or SMSes from international numbers on mobile and residential fixed lines.​​

• To date, over 1.3 million subscribers have activated the feature to block overseas calls and over 250,000 subscribers have activated the feature to block overseas SMSes. Subscribers are encouraged to activate the features if they do not expect to receive any overseas calls or SMSes.​

5. Proactive detection and blocking of local scam numbers​

• To further protect the public against scam calls, IMDA has worked with telcos to enhance detection capabilities against suspected misuse of local mobile numbers. This led to the disruption of over 180,000 mobile lines since mid-2024.​

Visit IMDA's website (opens in new tab) for details on their anti-scam measures.​

1. Strengthening digital defence through the National Simulated Scams Exercise (NSSE)​

• CSA, in partnership with the Ministry of Home Affairs, conducted a pilot run of the NSSE from 1 March to 31 August 2026, as part of Exercise SG Ready 2026 for Total Defence Day.​

• The NSSE is part of the Government's public education effort to combat scams, focusing on Government Officials Impersonation Scams, a key scam type of concern. ​

• Through the use of a robocaller simulating the calls, participants experienced how such scams typically work and learnt practical steps to protect themselves, in a safe and controlled environment. 5,000 individuals participated in the exercise. ​

2. Supporting scam investigations through malware analysis​

• CSA supports SPF by providing specialised technical malware analysis of scam campaigns. In 2026, CSA analysed two malicious Android Application Package (APK) samples associated with a scam campaign impersonating a local business. The analysis found that the malware was likely distributed through a malware-as-a-service model, allowing threat actors to make minor customisations to readily available malware kits before deployment. CSA shared its findings with SPF to provide insights into the malware’s behaviour.​

3. Cybersecurity education and public awareness efforts​

• The sixth National Cybersecurity Campaign, “Stop and Check” was launched on 13 September 2025. Fronting the campaign is the new national mascot - Jaga, the Cybersecurity Hedgehog. Jaga urges members of public to pause, stop and check with official sources, family and friends before acting on unsolicited messages and requests. ​

• The campaign also highlights the importance of cybersecurity practices, i.e. installing anti-virus apps and updating software promptly, and is supported through roadshows, corporate partnerships and multi-channel media platforms.​

• In 2026, CSA also continued to engage members of the public with interactive activities at roadshows and event pop-ups in the Central Business District and heartlands. ​

• Through the SG Cyber Safe Students Programme, CSA engaged more than 79,500 students this year. CSA rolled out the fourth edition of the Be Cyber Safe Drama Skit and launched Cyber Quest, a roving scavenger hunt in schools. CSA also collaborated with Microsoft to conduct a cybersecurity hackathon in March and will organise Minecraft bootcamps in November, where students can apply their learning in a team hackathon challenge. Registration details are available on CSA’s website (opens in new tab).​

• Since January 2026, the SG Cyber Safe Seniors Programme reached more than 125,000 seniors through on-ground engagements and partnerships across the public, private and community sectors. ​

4. Enhanced Fraud Protection with Google ​

• In February 2024, CSA partnered Google on a pilot for Enhanced Fraud Protection (EFP) within Google Play Protect in Singapore. This feature automatically blocks the installation of potentially malicious apps that use sensitive runtime permissions. As of August 2026, the EFP feature has successfully blocked 3.34 million installation attempts of potentially malicious applications across 774,000 devices. This prevented more than 68,000 unique apps from potentially being misused for financial fraud and scams. This feature is now being rolled out in other countries by Google, protecting citizens beyond Singapore.​

Visit CSA's website (opens in new tab) for details on their anti-scam measures.​

1. SATIS suite of scam detection tools to support SPF’s investigations​

• Co-developed with the Singapore Police Force (SPF) and the Home Team Science and Technology Agency (HTX), the Scam Analytics and Tactical Intervention System (SATIS) leverages artificial intelligence and machine learning – including GovTech Singapore’s in-house recursive Machine-learning Scam Evaluation (rMSE) classifier – to help SPF prioritise, evaluate, and disrupt scam sites. SATIS enables the authorities to analyse over 600,000 websites daily and to disrupt more than 20,000 malicious websites monthly. These disruptions prevent millions of attempted visits to scam sites every month. ​

• SATIS also finds more scam websites based on previously blocked sites. The detection and disruption of this subset of sites are completely automated, relying on AI and ML to identify the malicious sites which are then sent to Google Web Risk for disruption.​

• Additional capabilities have been added to the SATIS suite to strengthen SPF’s investigative work against other scam enablers. These include tools to evaluate and disrupt scam-related online monikers (e.g., accounts on Facebook, WhatsApp, Telegram, Carousell), payment channels such as bank accounts, and phone numbers.​

2. Partnering with the Global Signal Exchange to strengthen scam disruption worldwide​

• GovTech Singapore is the first government agency to join the Global Signal Exchange (GSE), a platform that allows member organisations to rapidly share information for scam disruption. In partnership with the SPF, GovTech Singapore sends scam signals, including scam-tainted websites, through the GSE to strengthen overall scam detection and disruption efforts.​​

• Since joining, GovTech Singapore has shared over 180,000 high confidence scam signals through the GSE. These signals have enabled GSE partners to find and remove over 80,000 new scam enablers, including 30,800 entities and pages associated with fraud and scams from Facebook and Instagram. ​

3. Safer Logins with Singpass Passkey ​

• From 1 July 2026, GovTech Singapore introduced passkeys as a new, password-free login method for Singpass, to strengthen protection against phishing scams. Passkeys allow users to verify their identity using biometrics (fingerprint or facial recognition) or their six-digit Singpass app passcode. ​

• Passkeys work only on the legitimate Singpass login domain and cannot be used on fake websites. Since the private key never leaves the device and no login credentials such as passwords and OTPs are entered or transmitted during login, there is nothing for scammers to steal. ​

• Passkeys are available on iPhone (iOS) and Android, and users can create their passkey in the Singpass app. Existing login methods such as QR login, Face Verification, and SMS One-Time Passwords remain available.​

4. Strengthening Trust and Safety across the Singpass Ecosystem ​

• GovTech Singapore continues to strengthen Singpass’ Trust and Safety capabilities to detect threats early, prevent the misuse of digital identities, and preserve trust in the digital ecosystem. This includes using advanced analytics and machine learning to identify suspicious activity, alongside investigations, intelligence-sharing and targeted interventions. ​

• Building on the deployment of an advanced machine learning model in 2025, Singpass introduced a second-generation model in 2026, which incorporates new risk signals and analyses around three million transactions daily to identify potentially compromised or misused accounts, including those linked to money mule operations and illicit account creation. These capabilities enable Singpass to detect emerging patterns of abuse, intervene earlier, and prevent high-risk accounts from being used to access digital services.​

• Singpass works closely with the Police to share relevant intelligence and disrupt scam operations. Intelligence developed through Singpass’ analytics contributed to the detection of a job scam syndicate that had misused Singpass accounts, leading to investigations into 20 user accounts and the arrest of five suspects.​

5. Using AI to strengthen detection of scam transactions​

• GovTech Singapore is working with the Monetary Authority of Singapore (MAS), the Police and participating banks on a proof-of-value to test whether artificial intelligence models trained on cross-bank and public-private data can improve the overall detection of scam transactions.

6. Analytics on SIM registration data ​

• In collaboration with the Infocomm Media Development Authority (IMDA), GovTech Singapore developed the tech stack to support the 10 postpaid SIM card limit, including SimCardHowMany (https://go.gov.sg/simcardhowmany (opens in new tab)), which allows members of the public to easily check the number of postpaid SIM cards registered under their names. The Government applies analytics to SIM card registration data from the telcos, within strict legal safeguards, to more proactively detect and disrupt potential scam activities. ​

Visit GovTech's website (opens in new tab)for details on their anti-scam measures.​

1. Single SMS Sender ID gov.sg (opens in new tab) for all government agencies​

• Since 1 July 2024, the Singapore Government has implemented a single SMS Sender ID, 'gov.sg (opens in new tab)', for all government agencies. The change aims to help the public easily identify genuine government SMS communications and protect against Government Officials Impersonation Scams. To date, 391 million SMSes have been sent out and 84% of the public recognise the gov.sg (opens in new tab) SMS channel. The platform is used by 30,973 agency users, with a satisfaction score of 4.33/5 among them. Since its implementation, there have been zero scam SMSes sent from the gov.sg (opens in new tab) Sender ID.​

2. ScamShield app​

• The Government has continued to expand the capabilities of the ScamShield app. In August 2025, push notifications were introduced to close the feedback loop for users. When a number reported by a user is verified as a scam by the authorities, they will receive a push notification from ScamShield if notifications are enabled, which strengthens trust in the reporting process and lets them know their report has been acted on. In September 2025, ScamShield started allowing users to report suspicious emails in the app. In September 2026, an option was added for users to submit reports through a web form instead of the app. ​

• Since the launch of the enhanced ScamShield app in August 2024, it has recorded 1.61 million installations, up from 944,000. In Q3 of 2026, ScamShield blocked, filtered or flagged 4.4 million scam calls and messages. On average, the app received reports from 42,000 users. Users gave the app an average in-app satisfaction rating of 4.73 out of 5. ​

3. ‘Unpacked’ mobile immersive scam simulation​

• OGP created ‘Unpacked (opens in new tab)’, an immersive, mobile-first simulation that lets users experience a scam firsthand to better understand how it unfolds. Built during OGP's Hack for Public Good 2025, ‘Unpacked’ walks users through a realistic Government Officials Impersonation Scam, beginning with a phone call from someone claiming to be the police. In the last 12 months, it received 8,792 visitors and 27,512 page views. ​

4. Community Roadshows​

• OGP participated in several community roadshows to raise awareness of ScamShield and encourage members of the public to set up the app and use it to report scams. In November 2025, OGP took part in the Digital for Life Festival (opens in new tab), jointly organised by MDDI and IMDA, which saw at least 200 new app downloads and at least 400 new users setting up their call blocking and SMS filtering permissions. OGP also participated in the We Can Act Against Scams Roadshow (opens in new tab), organised by MHA and WOG agencies, which saw at least 400 new app downloads.​

• In May 2026, OGP participated in the Mountbatten Seniors' Festival, organised by the People's Association, where officers helped seniors download ScamShield, set up call blocking and SMS filtering, and learn how to recognise genuine gov.sg (opens in new tab) SMSes. With Google Developer Group Singapore, OGP's Build for Good community also ran free digital skills workshops for seniors at Hillview CC and Pek Kio CC, including a ScamShield session on checking suspicious calls and messages.​

Visit OGP’s website (opens in new tab)for details on their anti-scam measures.​