Tech

Recognising Impersonation and Authority Scams

A practical guide to spotting impersonation scams in Singapore, why real banks and agencies never ask for your OTP or Singpass, and how to verify and report safely.

Recognising Impersonation and Authority Scams

Few scams feel as convincing as one that pretends to come from someone you already trust. Impersonation scams in Singapore work by borrowing the authority of a bank, a government agency, the police, a delivery company, or even a friend or family member, then using that borrowed trust to pressure you into acting fast. The caller sounds official, the message looks familiar, and the story is urgent. Once you understand the pattern behind these scams, they become much easier to catch before any money or personal data leaves your hands.

How authority and impersonation scams actually work

The core trick is simple. A scammer claims to be an organisation or a person you would not normally question, then creates a reason you must respond immediately. That reason is almost always fear or urgency. You are told your bank account has been compromised, that a parcel is stuck at customs, that you have an unpaid fine, that your Singpass has been misused, or that a loved one is in trouble and needs money now.

The pressure is deliberate. When you feel rushed, you stop checking details and start following instructions. Scammers may spoof a caller ID so a call appears to come from a real hotline or a familiar number. They may send an SMS that slots neatly into an existing thread of genuine messages. Some now use recorded voice messages, and increasingly, AI generated voices that mimic a real person or a company greeting. If you want to understand how convincing synthetic audio has become, it is worth reading about spotting deepfakes and AI scams so you know what is possible.

Common variations you may meet in Singapore include callers claiming to be from a bank’s fraud team, someone posing as a police officer investigating you for money laundering, a fake government officer threatening penalties, a “friend” on a messaging app asking you to help pay for something, or a boss requesting an urgent transfer. The story changes, but the goal never does. They want your money, your one-time passwords, your banking login, or your Singpass details.

The golden rules that never change

Here is the single most useful thing to remember. Banks, government agencies, and the police in Singapore will never ask you to hand over your OTP, your passwords, your full banking login, or your Singpass credentials, and they will never ask you to transfer money to a “safe account” to protect it. No genuine officer will demand that you stay on the line while you move funds, install an app, or read out codes.

If any caller or message asks for these things, that alone tells you it is a scam, no matter how real the caller ID or the logo looks. A one-time password exists precisely so that only you can approve a transaction. The moment you read it out, you have approved a transfer you cannot see.

A few more rules worth committing to memory:

  • Never let anyone you did not expect remotely access your device or “verify” your identity over a phone call.
  • Never click a link in an unexpected SMS or email to log in or “confirm” details. Type the official web address yourself or use the official app.
  • Never rush. Real organisations allow you time. Urgency is the scammer’s tool, not a sign of legitimacy.
  • Be doubly careful with anyone who insists on secrecy, tells you not to speak to family, or warns you not to visit a branch.

If a message pretends to be from a company you deal with, treat the request itself as the warning sign, not just the sender. Learning how to recognise phishing emails and SMS will help you read the small details that give these messages away.

How to verify before you act

The safest response to any “urgent” contact is to stop and verify through a channel you already trust. Hang up the call. Do not call back the number the caller gave you, because that number is part of the trap. Instead, find the official contact details yourself, on the back of your bank card, in the official app, or on the organisation’s own website that you navigate to directly.

Take a moment to breathe. Tell the caller you will call the organisation back through its published line. A genuine officer will have no problem with this. A scammer will try to stop you, raise the pressure, or warn you of consequences. That resistance is your confirmation.

If the message claims to come from a friend, family member, or colleague, contact that person directly using a number you already have saved, not the one in the suspicious message. Voice and messaging accounts can be hacked or faked, and a quick call to the real person clears things up in seconds.

Reporting and getting help

If you receive a suspicious call or message, you can use ScamShield, Singapore’s anti-scam app and helpline, to help check and block scam contacts, and you can report the incident to the Police. Acting quickly matters, especially if you have already shared details or transferred money, because fast reporting gives the best chance of limiting the damage. For a fuller walkthrough of the local tools available, see the guide on using ScamShield and Singapore’s anti-scam tools, and for the broader picture, the overview of avoiding scams in Singapore.

Keep any evidence you have, such as screenshots, phone numbers, and transaction records, as these help investigators. If you shared a banking password or OTP, contact your bank straight away through its official line to secure your accounts.

A calm, practical wrap-up

Impersonation scams rely on two things: borrowed authority and manufactured urgency. Strip those away and the scam falls apart. Remember that no real bank, agency, or police officer will ever ask for your OTP, passwords, or Singpass, or demand a transfer to keep your money safe. When something feels urgent, slow down, hang up, and verify through a channel you already trust. Talk about these tactics with older parents and less confident family members too, because a shared awareness is the strongest protection any household can have.