Use independent checks to stop impersonation, fake support and payment-redirection scams. Singapore’s ScamShield and police resources explain local reporting options, while banking-industry guidance addresses malware that can expose financial accounts.
Use ScamShield as a checking resource
The ScamShield service page describes its app, website, alert channels and 1799 checking service. It is a useful route for assessing suspicious calls, websites or messages. A checking report is not the same thing as a bank restriction or a formal police report. If money has moved, contact the affected provider promptly through a known channel. Do not continue transferring money while waiting for someone online to pronounce a message safe. A familiar-looking sender can still be impersonated, and an account used by a friend can be compromised.
Treat remote control and unofficial apps as warning signs
The Singapore Police Force advisory warns that government officials do not request money transfers or bank login details over a phone call. ABS’s mobile-malware guidance provides another relevant layer of protection for banking customers. When someone claiming to be support asks you to install software, stop and independently contact the institution. A screen-sharing session can expose account information even without a password being spoken aloud. If access is compromised, focus on containment and verified support rather than trying to negotiate with the caller.
Comparison of evidence and checks
| Question | What the evidence supports | What to verify |
|---|---|---|
| Unexpected official-sounding call | Independently verify the organisation | No transfer or login disclosure to caller |
| Message from a known contact | Account may be compromised | Confirm through another established route |
| Unknown app installation | Possible device compromise | Stop financial use and contact provider safely |
| Money already lost | Checking alone is insufficient | Provider restriction and official reporting |
A practical situation to work through
A caller says a suspicious transfer can be cancelled only if you move your remaining money to a safe account. The proposed action itself creates a new transfer. End the call and contact your bank using its app or a number from an established bank document. Do not use a number supplied by the caller. If you already approved a payment, provide its real reference and the sequence of events without embarrassment or speculation. If the caller knew your name or address, record that fact but do not regard it as proof of authority. Ask the bank what protective steps are available, preserve the messages and use the appropriate police route. Someone who subsequently offers guaranteed recovery for a fee is another reason to stop and verify.
Test the identity through an independent channel
A Singapore caller may claim to be from a bank, police unit or government department and cite your personal details. End the unexpected interaction before checking. Open the organisation’s established website or app yourself and contact it through that route. Do not accept a transferred call as independent verification when the original caller controls the connection. If a friend requests an urgent PayNow transfer, use another known contact method to confirm. A compromised messaging account can produce a familiar profile photograph and conversation history without the real person making the request.
Containment checklist for a Singapore account
- Contact the affected financial institution promptly to report the incident and request appropriate access restrictions. If a mobile number was taken over, notify the telecom provider through a trusted route.
- Use a clean device if the original phone was used to install suspicious software. Preserve URLs, call details, messages and transaction references.
- Use the police reporting route for the incident and ScamShield for the relevant checking or reporting functions, understanding that these are separate from a bank complaint. Keep each acknowledgement; do not mistake a message received by an agency for money already recovered.
Avoid a second incident during recovery
After a scam, unsolicited messages offering guaranteed recovery can exploit the urgency of the first loss. Do not pay an advance fee or hand over credentials to someone who claims special access to a bank or police database. Record only outcomes confirmed by your institution, such as access restricted or a transfer trace initiated. Once the immediate risk is contained, review saved payees, logged-in devices, email forwarding rules and reused passwords. Ask the provider about any remaining account restrictions before resuming routine payments. Recovering access and resolving liability are related but separate outcomes.
Frequently asked questions
Does knowing my name prove a caller is legitimate?
No. End the unexpected interaction and verify through an established independent channel before sharing information or approving a payment.
What if an unfamiliar app was installed?
Stop using that device for financial activity and contact the affected provider from a trusted device. Preserve the installation and transaction details for support.
Can a private recovery agent guarantee my money back?
Treat that promise as unverified. Do not pay an advance fee or disclose credentials; rely on outcomes confirmed by the relevant institution.
Sources and verification
- ScamShield tools and checking — Singapore Government / ScamShield — 2026-10-23
- Scam prevention advisory — Singapore Police Force — 2026-10-23
- Mobile malware and banking customers — Association of Banks in Singapore — 2026-10-23