🏛️

Official website links end with .gov.sg

Singapore Government agencies use .gov.sg websites. Check the address before acting on important information.

🔒

Secure websites use HTTPS

Look for https:// and the browser lock icon before sharing any sensitive information.

🛡️ CYBER & PHYSICAL SAFETY

Blue River Secure

Simplified public cyber awareness, scam alerts, and SME safety actions — built for everyday Singaporeans.

Active scams (SG)

12 types

CVE this week

Cases reported

2.3k

SCDF response

8 min

Top scam threats in Singapore right now

📞

Government Official Impersonation

High

Scammers pose as MOM, IRAS, ICA, or police officers demanding payment or personal info via phone or SMS.

Action: Hang up. Verify by calling the agency directly via official numbers.

💬

WhatsApp / Telegram Job Scams

High

Fake "easy money" part-time tasks (likes, reviews, crypto) that demand upfront payment.

Action: Real jobs don't ask you to pay first. Report to ScamShield.

🏦

Phishing Bank SMS

Medium

Fake DBS/UOB/OCBC SMS with links asking you to "verify" or "unlock" your account.

Action: Banks NEVER send links via SMS. Use the bank app directly.

📦

Delivery Parcel Scams

Medium

Fake "missed delivery" SMS with payment or rescheduling links from SingPost / DHL.

Action: Track parcels only via official courier apps or websites.

5-minute cyber hygiene checklist

1
Enable 2FA on bank & SingPassUse the app-based authenticator, not SMS where possible.
2
Use unique passwordsUse a password manager (Bitwarden, 1Password) — never reuse passwords.
3
Install ScamShieldFree app from NCPC/SPF — blocks scam calls and SMS automatically.
4
Lock down social mediaSet Facebook, Instagram, LinkedIn to private. Scammers harvest details for impersonation.
5
Update your phone OS monthlyPatches fix critical security holes — go to Settings → Software Update.
6
Have a family code wordAgree a secret word to verify identity in voice-cloning emergency scams.

For SMEs — essential safety actions

🔐 Access control

Use unique logins per staff. Remove access immediately on resignation. Enable 2FA on email & finance tools.

💾 Backups (3-2-1 rule)

3 copies, 2 media types, 1 offsite. Test restore quarterly. Protect against ransomware.

📧 Email security

Enable SPF, DKIM, DMARC on your domain. Train staff on phishing (CEO fraud is rising in SG).

📋 PDPA compliance

Appoint a DPO, document data flows, get consent. Fines up to S$1M for breaches.

🛡️ Cyber insurance

Consider SME Cybersecurity Health Plan — government-supported under CSA's SG Cyber Safe initiative.

🚨 Incident playbook

Know the escalation path: use SingCERT Cyber Aid for cyber incidents, contact your bank immediately for fraud, and use official PDPC channels for personal-data breaches.

Emergency contacts (Singapore)

995SCDF · Fire / Ambulance 999Police 1799ScamShield Helpline 1771National mindline 6225 5632NEA Contact Centre 1800 2255 782PUB 24-hour Call Centre