The Singapore Police Force has observed a recent trend of phishing websites impersonating Singpass. These fraudulent sites aim to trick you into revealing your Singpass login credentials.
Here's how to recognise such scams:
- Always check the website address carefully. Official Singpass services are hosted on domains ending with
.gov.sg (e.g., singpass.gov.sg, mylife.gov.sg). Any other domain, like carolineporcellane.it, is fake.
- Be wary of unsolicited messages (SMS, email) or pop-ups that direct you to a link and ask for your Singpass login details. Singpass will never send you unsolicited links asking for your credentials.
If you have entered your Singpass ID and password on a suspicious website:
- Immediately change your Singpass password via the official Singpass website or app.
- Report the incident to the Police.
- Inform your family and friends about this scam to help them stay vigilant.
- Strengthen your Singpass security by enabling Singpass Face Verification and Two-Factor Authentication (2FA) if you haven't already.
Unsure if something is a scam? Check by calling the 24/7 ScamShield Helpline at 1799.