The Singapore Police Force (SPF) and Government Technology Agency of Singapore (GovTech Singapore) would like to alert members of the public to remain vigilant against job scams involving the impersonation of representatives from legitimate recruitment agencies and the misuse of Singpass accounts. Since March 2026, there have been at least 20 cases which were uncovered through close collaboration between the Anti-Scam Centre (ASC) and the Singpass Trust and Safety team.
In this scam variant, scammers would impersonate representatives from legitimate recruitment agencies and put up “advertisements” on concert crew positions via social media platforms such as Telegram or Carousell. Victims who were interested in the job opportunity would respond to the “advertisement” through the contact details provided. The scammers would instruct the victims to provide their personal details (e.g., full name, NRIC, date of birth, etc) and sign “Personal Data Protection Act (PDPA)” agreements to apply for the job. In some cases, to lend credence to their deceit, the scammers would provide the licence number of the agency which they were impersonating, for the victims’ verification via the Employment Agencies Directory on Ministry of Manpower (MOM)’s website.
The scammers would instruct the victims to change the email addresses and mobile numbers registered in the victims’ Singpass accounts to those provided by the scammers, under the pretext of facilitating their application for a “Certificate of Clearance (COC)” or an “access pass” for the concerts. Once the contact details had been changed, the scammers would be able to reset and utilise the victims’ Singpass accounts to open accounts with financial institutions such as LiquidPay and YouTrip. The victims only realised they had been scammed when they were notified by the Police.
Security measures (e.g., face verification) are in place to prevent unauthorised Singpass logins and account updates. However, in this scam variant, the victims were socially engineered into changing their contact details in Singpass to those provided by the scammers, inadvertently enabling the scammers to receive their One-Time Passwords and take over their accounts. Members of the public are urged not to disclose their Singpass credentials to anyone, including recruitment agencies, and to avoid registering other persons’ contact details in their personal Singpass accounts. Do not assume that a person is from a legitimate recruitment agency, just because a valid recruitment agency’s licence number has been provided. COC is not required for local employment purposes.
Members of the public are strongly advised to adopt the following precautionary measures:
- ADD - ScamShield app to block out scam calls and filter out scam SMSes.
- CHECK - scam signs with official sources (e.g., ScamShield app or ScamShield website at www.scamshield.gov.sg).
- TELL - authorities, family, and friends if or when you encounter scams.
For more information on scams, members of the public can visit www.scamshield.gov.sg or call the 24/7
Annex A – Screenshots of Conversations Between Scammers and Victims



Annex B – “PDPA Agreement" Document


PUBLIC AFFAIRS DEPARTMENT
SINGAPORE POLICE FORCE
15 May 2026 @ 12:00 PM
