Identity Theft: Protecting Your NRIC, Singpass and Personal Data
Identity theft happens when someone obtains and misuses your personal information — NRIC, Singpass, contact details or banking data — to impersonate you. With enough data, criminals can open accounts, apply for loans, or commit fraud in your name.
Protecting your identity means controlling who gets your data, securing your Singpass, and acting quickly at the first sign of misuse.
How the scam works
- 1Criminals collect your data through phishing, data leaks, lost documents, or oversharing on social media.
- 2They may trick you into approving Singpass logins or sharing NRIC images and OTPs.
- 3Using your identity, they open bank accounts, apply for credit, or register services.
- 4Your details may be sold or reused to target you and your contacts in further scams.
- 5Victims often discover the theft only when bills, accounts or loans they never opened appear.
Common warning signs
- Unexpected account statements, cards or loan notices in your name.
- Singpass or banking login alerts you did not initiate.
- Calls about debts or services you never signed up for.
- OTPs arriving when you are not logging in anywhere.
- Being locked out of an account after a credential change you did not make.
Real-life examples
The following scenarios are fictional and generalised for illustration only.
The approved Singpass login
A victim is guided over the phone to approve a Singpass login, told it is to verify a payout. The scammer uses the access to apply for a financial facility in the victim's name, which surfaces weeks later as an unexpected obligation.
The shared NRIC photo
To claim a prize, a user sends a photo of his NRIC and a selfie. The images are later used to attempt account openings, and he begins receiving verification messages for services he never requested.
How to protect yourself
- Never share Singpass credentials or approve logins you did not start.
- Avoid sending NRIC images or selfies unless absolutely necessary and to a verified party.
- Use strong, unique passwords and multi-factor authentication everywhere.
- Limit personal details shared publicly on social media.
- Shred documents with personal data and secure your mailbox.
- Review account and credit activity periodically for anything unfamiliar.
What to do if you become a victim
- 1Reset your Singpass password and review its transaction and login history.
- 2Contact affected banks and services to flag fraud and close fraudulent accounts.
- 3Lodge a police report and call 1799.
- 4Change passwords on key accounts and enable multi-factor authentication.
- 5Monitor for new accounts or loans opened in your name and dispute them promptly.
Frequently asked questions
Explore our financial education resources
Borrow smart and stay safe. Compare loan options through a trusted platform, and read our guides on responsible borrowing in Singapore.
Related articles
Phishing Scams: Fake Pages Built to Steal Your Logins
Phishing uses convincing fake emails, websites and login pages to capture passwords and OTPs. Learn to recognise and resist it.
ReadGovernment Impersonation Scams: When the Caller Claims to Be an Official
Scammers pose as the police, MOM, IRAS or ICA to frighten you into paying or sharing data. Learn how to respond calmly and safely.
ReadAI Voice & Deepfake Scams: When Seeing and Hearing Isn't Believing
Cloned voices and deepfake videos can impersonate people you trust. Learn how AI-enabled scams work and how to verify what is real.
Read