Advisory: Be Wary of Phishing Scams Impersonating IRAS

irasz.com

The Singapore Police Force has observed a trend of phishing scams where scammers impersonate the Inland Revenue Authority of Singapore (IRAS). These scams often involve fake websites designed to look like official IRAS portals, tricking victims into revealing personal and banking details.

How to recognise these scams:

• Check the URL carefully. Scammers use website addresses that are very similar to the official IRAS website (iras.gov.sg), but with slight spelling variations or extra characters (e.g., irasz.com). Always ensure you are on the legitimate IRAS website before entering any information.
• Be suspicious of unsolicited messages (SMS, email) claiming to be from IRAS that ask you to click on a link to update personal information, claim a refund, or resolve an outstanding payment. IRAS will typically not request sensitive information or direct you to non-official links via unsolicited messages.

If you have provided your personal or banking details on a suspicious website:

1. Contact your bank immediately to secure your accounts and monitor for any unauthorised transactions.
2. Change passwords for any other online accounts that use the same credentials.
3. Report the incident to the police.

Remember,

• Add security features: Enable Two-Factor Authentication (2FA) and set transaction limits.
• Check for scam signs: Always verify website URLs and the authenticity of messages with official sources.
• Tell authorities: Report any suspicious websites or messages to the police.

Unsure if something is a scam? Check by calling the 24/7 ScamShield Helpline at 1799.