Will the police or my bank ask me to transfer money to a “safe” account?

No. SPF, banks, and CPF Board never ask you over WhatsApp, phone, or chat to move money, share OTP/Singpass passwords, install sideloaded apps, or hand over cash/jewellery for an “investigation.” Hang up and call ScamShield 1799 or the number on your bank card/app.

What should new EP holders install in week one against scams?

Install ScamShield and grant call/SMS filter permissions, learn that genuine agency SMS consolidates under the gov.sg sender ID, harden Singpass with a unique password and careful face-verification habits, and set bank transaction limits or Money Lock-style controls if your bank offers them.

I already shared OTP or clicked a Singpass link — what now?

Stop the chat immediately. Call 1799 and your bank’s official hotline, reset Singpass via the official security flow, review devices and recent transactions, and file an SPF i-Witness / Police e-services report with numbers, links, and account details. Speed beats embarrassment.

Is a job ad asking for EP front/back photos plus a selfie safe?

Treat it as high risk. Passport/EP photo packs on Telegram or “easy side jobs” that pay you to receive and forward money are classic mule intake. Real HR uses company domains and never needs you to open accounts for overseas clients.

Does ScamShield replace calling the bank after a phishing hit?

No. ScamShield filters and the 1799 helpline help you verify threats; account freezes, OTP resets, and recovery still go through your bank’s official channels and, when needed, a police report.

Life

Scams and Singpass phishing for newcomers in Singapore

Banks, police and CPF never ask you to move money or share an OTP. How new EP holders get targeted, what to set up in week one and when to call 1799.

Arriving & Living4 min readReviewed 15 Sep 2026Updated 19 Sep 2026

On this page

Short answer: Government, banks and CPF will never ask you to transfer money, share an OTP or Singpass password, or install a sideloaded app. Install ScamShield, learn what the gov.sg SMS sender looks like, and call 1799 when something feels off. Then call your bank on the number from your card or app, not the one in the message.

New EP holders are unusually good targets, and it isn't bad luck. Your FIN card is fresh, your Singpass is new, you don't yet know what your bank's normal looks like, and recruiters are already asking you for passport scans as a matter of routine, so one more request for documents doesn't stand out. The recurring r/askSingapore pattern barely varies: a WhatsApp message about bank fraud, or a fake police officer, or a job ad that wants photos of your NRIC or EP, and then a Singpass login that drains the accounts.

The list worth memorising

Government officials, banks and CPF Board will never ask you, over a call or a chat, to:

Transfer money to a "safe" account
Share a bank login, an OTP, or your Singpass password
Install an app from outside the official stores
Hand over cash, gold or jewellery for an "investigation"
Approve a Singpass transaction you didn't start

There is no genuine version of any of those. If one of them is being asked for, you already know what you're dealing with, and you can stop reading the message. SPF's own banner points at the 24/7 ScamShield Helpline on 1799, and it exists precisely for the moment you're not certain.

What to set up in your first week

What to do	Why it helps
Install ScamShield and grant the call and SMS filter permissions	Blocks numbers SPF has flagged, and filters suspicious SMS from unknown or overseas senders
Learn what the gov.sg SMS sender ID looks like	Agency SMS consolidates under the government sender, so anything outside it deserves a second look — sms.gov.sg
Give Singpass a strong unique password, and be deliberate about face verification	A compromised Singpass unlocks banks, CPF and IRAS in one go
Set transaction limits in your bank app, plus Money Lock or similar if your bank offers it	Limits the blast radius if an OTP does get phished
Never send front and back of your EP plus a selfie holding your FIN to "HR on Telegram"	Classic mule and loan-shark intake

If you've already clicked or shared

Hang up, or stop the chat. Don't "cooperate to clear your name" — that line is part of the script.
Call 1799 and your bank's official hotline, using the number on your card or in the app rather than one from the SMS.
Reset Singpass through the official helpdesk or security flow, then review your registered devices and recent transactions.
File an SPF i-Witness or Police e-services report with the numbers, links and account details you still have.
If a cracked APK was installed, factory-reset the phone once your accounts are secured.

Photos of an EP on their own usually aren't enough to empty a bank account overnight. Combined with OTP phishing or a Singpass device transfer, they are. Move fast; the time you spend being embarrassed is the time that actually mattered.

Money-mule and "easy side job" traps

Ads that pay you to receive and forward money, register companies, or open accounts for "overseas clients" are how foreigners end up as the arrested middle layer rather than the victim anyone feels sorry for. Side income on a work pass already has MOM limits worth understanding, which is what the side income guide covers, and mule activity isn't a grey-area gig. It's criminal.

Pair this with your day-one admin

Singpass and banking setup belong alongside apps that matter and opening a bank account, and the emergency numbers sit in 995 / 999 / embassies. Scam hygiene is the layer that usually goes missing between those three.

One for families: report-card portal SMS threads are prime phishing bait. Open school links from the saved portal bookmark, never from a WhatsApp forward you're skimming between meetings.

Questions, answered

Will the police or my bank ask me to transfer money to a “safe” account?: No. SPF, banks, and CPF Board never ask you over WhatsApp, phone, or chat to move money, share OTP/Singpass passwords, install sideloaded apps, or hand over cash/jewellery for an “investigation.” Hang up and call ScamShield 1799 or the number on your bank card/app.
What should new EP holders install in week one against scams?: Install ScamShield and grant call/SMS filter permissions, learn that genuine agency SMS consolidates under the gov.sg sender ID, harden Singpass with a unique password and careful face-verification habits, and set bank transaction limits or Money Lock-style controls if your bank offers them.
I already shared OTP or clicked a Singpass link — what now?: Stop the chat immediately. Call 1799 and your bank’s official hotline, reset Singpass via the official security flow, review devices and recent transactions, and file an SPF i-Witness / Police e-services report with numbers, links, and account details. Speed beats embarrassment.
Is a job ad asking for EP front/back photos plus a selfie safe?: Treat it as high risk. Passport/EP photo packs on Telegram or “easy side jobs” that pay you to receive and forward money are classic mule intake. Real HR uses company domains and never needs you to open accounts for overseas clients.
Does ScamShield replace calling the bank after a phishing hit?: No. ScamShield filters and the 1799 helpline help you verify threats; account freezes, OTP resets, and recovery still go through your bank’s official channels and, when needed, a police report.

Sources & citations

Admin and policy details change. Prefer the official page when making decisions; we cite primary sources for Singapore government and statutory guidance.