With strong digital infrastructure and a highly tech-savvy population, Singapore ranks second globally in the Network Readiness Index. However, this high level of digital readiness and adoption also exposes Singapore to increasing risks, particularly in the form of sophisticated online scams and fraud.

In recent years, scam activity in Singapore has grown significantly in both volume and sophistication. In 2023, financial losses due to scams surpassed USD 504 million, with tens of thousands of cases reported. From phishing and e-commerce fraud to impersonation and investment scams, cybercriminals are employing targeted tactics, many powered by artificial intelligence and social engineering to exploit vulnerabilities of the digital society.

Despite ongoing public education efforts and notable strides in scam detection, stakeholders note areas of improvement. Cultivating digital resilience in Singapore needs a comprehensive strategy and a “whole-of-society” approach, which includes practical training to bridge the confidence to skills gap, empowering communities to support the vulnerable, equipping citizens with clear toolkits, and holistic response plans for enhanced readiness. In addition, there are existing initiatives to improve cyber readiness across SMEs, recognising evolving speed and sophistication of scam tactics.

Scams in Singapore have evolved from isolated incidents to systemic challenges that affect various sectors, platforms, and demographics. Particularly concerning is the use of deepfake technologies that make malicious activity harder to detect through traditional systems. Despite high levels of digital literacy, many individuals find it difficult to verify the authenticity of digital communications. Even younger, technologically savvy individuals are increasingly vulnerable to sophisticated scams. This has placed increasing pressure on institutions to adopt more proactive, real time solutions and to foster a more coordinated response across all layers of society.

As part of a regional study on strengthening scam resilience, the Tech for Good Institute, in partnership with Bamboo Builders and the Global Anti Scam Alliance Singapore Chapter, convened a multi-stakeholder roundtable discussion. The session brought together voices from across the public sector, industry, and civil society to examine the key vulnerabilities in Singapore’s digital landscape and explore collaborative strategies for a safer, more resilient digital future.

Participants

1. Jansen Tham, Deputy Director, Resource Planning, Ministry of Home Affairs (MHA)
2. Andre Ng, Assistant Director, GovTech Singapore
3. Raymond Lum, Group Chief Executive, Rajah & Tann Technologies
4. Royston Soon, Executive Director, Head Anti-Fraud Risk & Oversight, OCBC Bank
5. Julian Gorman, Head of APAC, GSMA
6. Hazel Low, Head of Strategy Plans and Digital Systems, ST Engineering
7. Caryn Leong, Treasurer, Regional Anti-Money Laundering Director, APAC, ACAMS
8. Robert Harris, Head of Product Marketing, Feedzai
9. Andri Kusumo, APAC Engagement Lead, Trust & Safety Global Engagement, Google
10. Norman Ng, Head, Trust & Safety Global Engagements (APAC), Google
11. Shze Min Yah, Manager, Customer Trust, International Public Policy, Amazon
12. Pamela Teo, Hong Leong Finance
13. Gabriel Tan, Founder, Bamboo Builders
14. Dr. Chi Chi Hung, Senior Principal Research Scientist, NTU Digital Trust Centre (DTC)
15. Reuben Ng, Assistant Professor, Lee Kuan Yew School of Public Policy
16. Helena Huang Yixin, Associate Research Fellow, RSIS

Key Takeaways:

1. Emerging scam techniques demand innovative, scalable solutions

Singapore faces a rapidly evolving scam landscape where emerging technologies such as artificial intelligence, deepfakes, and device-targeted phishing tactics are being weaponised. Scam websites now employ cloaking techniques which can display malicious content only on certain devices (e.g. scam baits designed for and visible only on mobile phones) making detection by traditional systems increasingly difficult.

These advancements call for a corresponding evolution in anti-scam tools. Technology teams across the public and private sectors are working to build scalable digital defences to detect, deter, and disrupt scams in real time. One example is to combat scams that impersonate authority figures in social engineering operations. There were discussions to introduce a call verification registry, modelled after the existing SMS Sender ID registry, to help citizens authenticate incoming calls from government agencies and financial institutions. While promising, such infrastructure would require collaborative implementation and regulatory oversight.

2. Bridging the confidence-skills gap through public education

While Singapore boasts a digitally-savvy population, a significant gap exists between perceived and actual scam awareness. While 84% of Singaporeans are confident in their ability to identify scams, only two in five can accurately spot phishing emails when tested. This overconfidence is especially evident among teenagers, with 98% believing they can detect scams despite their limited exposure to such threats. This overconfidence exposes individuals to sophisticated scams. Public education efforts are increasingly incorporating interactive learning methods, such as gamified digital experiences and immersive outreach programmes, to engage both youth and senior citizens.

Initiatives such as SGScamWISE (Well-Informed, Secured, and Empowered), a national education programme supported by Google.org, emphasise not only self-protection but also how individuals can act as first responders for their families and communities when scams occur. The focus is shifting from information sharing to behaviour change, such as developing digital resilience, encouraging scepticism toward  unsolicited messages, and reinforcing that anyone, regardless of their level of tech literacy, can become a victim. Reducing the stigma associated with being scammed is also critical. Encouraging victims to report incidents without shame enables faster collective responses and builds a culture of openness.

However, awareness alone does not translate into action. One of the key challenges identified was the low adoption of existing scam prevention tools and initiatives. As such, awareness campaigns must now shift towards encouraging active use of these safeguards, helping individuals to move beyond mere recognition and towards consistent, protective behaviour.

3. Strengthening supply chains resilience through a whole-of-society approach

Singapore’s commitment to a “whole-of-society” approach is evident in the growing alignment between government, industry, and civil society. However, gaps remain in organisational awareness especially among small and medium enterprises (SMEs), which often lack dedicated cybersecurity teams or resources.

Larger firms are increasingly implementing transaction verification protocols, multi layered approval processes, and data breach safeguards. In contrast, some SMEs take a reactive posture only investing in security after falling victim to an attack. This is especially concerning given their role as third party suppliers to major corporations, where a vulnerability in one link can expose the entire supply chain.

To address this, stakeholders proposed setting baseline cybersecurity standards for vendor participation in procurement processes. Education and training for SMEs, coupled with accessible scam prevention technologies, could significantly improve the resilience of digital economy stakeholders.

4. Regional collaboration is key to combatting borderless scams

Scams in Southeast Asia are increasingly orchestrated across borders, with perpetrators and victims located in different jurisdictions. This borderless nature underscores the need for cross country collaboration and intelligence sharing.

Singapore is well positioned to lead regional coordination efforts through its participation in multilateral forums and its proactive role in establishing alliances against scams. Stakeholders highlighted the need for ASEAN-wide threat intelligence sharing to enhance collective vigilance. They also recommended the standardisation of scam data collection across member states to support more targeted and informed interventions. Building on existing platforms, suggestions included conducting regional simulation drills to test cross border response mechanisms and enhance operational readiness. Further priorities involved developing common protocols for scam detection, strengthening recovery and enforcement agreements, and facilitating the regular exchange of best practices throughout the region.