Singapore children may encounter scam language before they ever manage a bank account. A message on a shared family device claims that a parcel cannot be delivered unless someone clicks a link. Another says a relative urgently needs money. A third claims to be from a school and asks for a child’s identification details. Some are suspicious; others might be genuine ordinary communications. The crucial lesson is how to describe an unverified request without trusting it, circulating it or acting on it.
A family may explain the concern first in English, Mandarin, Malay, Tamil or another home language. A child may understand “someone is pretending to be another person” long before they can retrieve the English term impersonation. Words such as phishing, credential, verification, personal data, red flag, ScamShield and police report help the child express a concern to an adult clearly and protect private information.
This fifty-first Singapore Children Vocabulary article teaches first-language communication about scam attempts, personal-data boundaries and Singapore’s ScamShield help channels, mainly for children aged eight to twelve. It complements Trustworthy Online Messages, which focuses broadly on whether a claim is supported, and Intergenerational Digital Learning, which teaches respectful help on a family device. This guide deals specifically with requests that may manipulate someone into disclosing secrets, taking an unsafe action or transferring money.
Quick answer: pause, do not engage and ask a trusted adult
The child-level sequence is notice a suspicious request → do not click, respond or disclose → tell a trusted adult → use independently verified official channels if needed → let adults handle reporting and recovery. A child who recognises the word “scam” does not need to investigate the suspected sender or prove the fraud by interacting with it.
Singapore’s official ScamShield Check for Scams page, updated May 2026, describes the ScamShield app and a 24/7 helpline at 1799 to help people check suspicious calls, messages or links. Adults can use the service when uncertain. A child should not be tasked with calling alleged scammers, installing unknown apps or submitting sensitive evidence.
- Age-appropriate outcome: child can describe the message, say what information is requested and explain why an adult should verify it independently.
- First-language bridge: preserve exact distinctions—claimed identity versus verified identity, an urgent demand versus a genuine emergency.
- Privacy: no real passwords, one-time codes, identity numbers, phone numbers, school timetables or bank information may be used in lesson examples.
- Adult responsibility: use ScamShield and bank channels, protect accounts and decide whether an official police report or additional action is necessary.
What ScamShield actually does and does not do
ScamShield’s Check for Scams information says users can check a suspicious number, message or link through the app, or contact the ScamShield helpline for scam-related advice. The 1799 Helpline page, last updated 25 May 2026, confirms that the service is available around the clock. It can advise on scam queries and may direct eligible victims to their banks’ anti-scam support.
The helpline cannot itself make a police report. That detail matters. The Submit Scam Reports page, updated 21 May 2026, states that reports submitted through the ScamShield app are not official police reports. A scam report in an app can help improve detection and flag suspected numbers, while an official report through the Singapore Police Force is a distinct process.
For adults who have suffered financial loss or disclosed sensitive information, ScamShield’s I’ve Been Scammed guidance, last updated June 2026, advises contacting the bank immediately where accounts or cards are compromised, making a police report, securing relevant accounts and reporting the content to the appropriate platform. It specifies that a genuine emergency needing urgent police assistance uses the appropriate police emergency channel. This article does not ask children to manage those consequential responses.
ScamShield warns that scams are designed to deceive and can confuse vigilant adults as well as children. So the educational focus should be on protecting boundaries and obtaining help, not on mocking somebody who believed a fraudulent claim. Shame makes people less willing to seek assistance and may worsen a problem.
A final subtlety: a scam check or app flag is a useful risk signal but is not a promise that every unflagged message is safe. New scam formats appear. A responsible adult should verify a consequential request using independently obtained official contact details.
Personal data: what is safe to use in a child’s lesson?
The Personal Data Protection Commission’s Advisory Guidelines on Children’s Personal Data in the Digital Environment explain how relevant organisations should consider children’s ability to understand consent and collection purposes. Under the guidelines, for children below 13, organisations should obtain a parent or guardian’s consent under the described PDPA framework; context and applicable law matter.
For this article the practical rule is simpler: do not use real personal details for hypothetical messages. A child does not need to disclose their NRIC, passport, home address, exact school pickup route or a caregiver’s bank balance to learn the word personal data. A fictional identity such as “Example Pupil” is enough. If an actual organisation is requesting information, responsible adults should evaluate purpose, legitimacy and the applicable consent requirements.
Consent given for one purpose does not automatically authorise copying a child’s details into every classroom group, social network or app. The safest teaching approach is to avoid collecting personal data where the learning objective can be met without it.
This discussion is about children’s vocabulary and everyday privacy, not a legal opinion about every educational provider. PDPA obligations and exceptions depend on the organisation, activity and governing law.
Twenty child-friendly scam and privacy vocabulary words
These original English meanings are teaching prompts, not instructions for investigating accounts or fraud.
- 1. Scam: a dishonest scheme intended to deceive someone for gain or another harmful purpose. “We ask an adult about a suspected scam.”
- 2. Suspicious: giving a reasonable cause for doubt or caution. “This unexpected request is suspicious.”
- 3. Impersonation: pretending to be somebody else. “A sender may impersonate a delivery company.”
- 4. Phishing: an attempt to trick people into disclosing secrets or using unsafe links or services. “Phishing messages may imitate official notices.”
- 5. Sender: the person or account that appears to send a message. “The visible sender is not always the verified organisation.”
- 6. Link: an address or clickable connection to digital content. “Do not open a suspicious link.”
- 7. Attachment: a file sent with a message. “An unexpected attachment may require caution.”
- 8. Urgency: pressure suggesting something must be done immediately. “Scammers may use artificial urgency.”
- 9. Threat: a warning that harm will follow unless the recipient complies. “A threatening demand is a red flag.”
- 10. Red flag: a sign that closer checking is needed. “A request for a secret code is a red flag.”
- 11. Personal data: information that can identify a person in relevant contexts. “Do not share personal data for a school exercise.”
- 12. Credential: secret or controlled information used to access an account. “Keep login credentials private.”
- 13. One-time password: a temporary authentication code used under particular account systems. “Never tell a suspicious caller your one-time password.”
- 14. Verification: checking whether information or an identity is genuine. “Use an independently found official contact to verify the request.”
- 15. Official channel: a service or contact route confirmed to belong to the relevant organisation. “The adult uses the bank’s actual official channel.”
- 16. ScamShield: Singapore’s named public anti-scam assistance service and app. “ScamShield provides a way to seek checking and advice.”
- 17. Block: restrict contact or access from a number or account. “An adult may block a suspicious sender.”
- 18. Report: submit information about a concern through an appropriate channel. “An app report is not necessarily a police report.”
- 19. Compromised: no longer securely controlled or protected. “A compromised account requires adult action.”
- 20. Recovery: measures taken to limit harm and restore secure access where possible. “Professionals and account holders manage recovery.”
The Fencing Method begins immediately: suspicious is not confirmed fraudulent; an app report is not an official police report; verification is not asking the suspicious sender if they are honest; and a one-time password is not a vocabulary token to copy into a worksheet.
Worked case one: the parcel message
A fictional text says, “Your delivery failed. Pay immediately using the link or the parcel is destroyed.” The child remembers that their family recently ordered something and wants to tap it.
Parent: “What does the message claim?”
Child: “That a parcel cannot be delivered unless we pay through its link.”
Parent: “Does our memory of an order verify this sender?”
Child: “No. The sender could be impersonating a delivery service.”
Parent: “Should we use the supplied link to check?”
Child: “No. We should pause and use an independently found legitimate delivery service channel.”
Parent: “Who handles the real account?”
Child: “You do.”
This case is a fictional illustration, not a copy of a real scam. The child learns that a plausible event in family life does not make every related incoming message genuine. Real delivery status belongs to a trusted account or independently verified provider, not a shortcut in an unexpected message.
It is also a lesson in artificial urgency. “Pay in two minutes” can make people feel frightened or rushed. A caregiver can explain that pressure is a warning sign, while still assessing any genuine service deadline through the proper channel.
Worked case two: a caller claims to be a teacher
Someone calling an imaginary family says, “I’m from your child’s school. Tell me the child’s full home address and parent account password.” The child knows their school’s name and believes the caller.
Parent: “What does the caller claim?”
Child: “That they work for my school.”
Parent: “Has that identity been independently checked?”
Child: “No.”
Parent: “Is asking for our password an ordinary classroom task?”
Child: “No. Credentials must remain private.”
Parent: “How can we check?”
Child: “Use the school’s verified contact method that you already know, not the suspicious caller’s directions.”
This teaches the difference between recognising a school name and verifying the person using it. A child should not read out a parent’s password or school portal one-time code just because a caller sounds confident.
In a real conversation, the parent handles contact and consent. The child can practise the safe sentence “I’ll ask my parent to check” without being required to challenge the caller personally.
Worked case three: the one-time code in a family message
A child sees a temporary authentication code arrive on a shared device. A second message says a “support agent” needs the code to cancel an account problem. The child interprets the code as a six-digit answer to a quiz.
Caregiver: “What is this code used for?”
Child: “Authentication.”
Caregiver: “Is it a harmless practice number?”
Child: “No. It may help someone access or change an account.”
Caregiver: “Should you share it with the second sender?”
Child: “No. Tell you and keep the actual code private.”
The child can study the expression one-time password using an invented string such as “XXXXXX” that cannot unlock anything. There is no need to display the genuine code, discuss bank balances or hand the device to the child to test login.
The response also protects the child from being blamed for a consequential action beyond their experience. An adult manages actual account security, including checking the legitimate service.
Worked case four: a ScamShield app submission versus a police report
A responsible adult submits a suspicious message to the ScamShield app for review. A child announces that the police have now formally opened an investigation about the family.
Parent: “What did I actually submit?”
Child: “A report through the ScamShield app.”
Parent: “Does ScamShield say that it is an official police report?”
Child: “No.”
Parent: “What might the app report help with?”
Child: “Flagging suspicious messages or supporting scam detection.”
Parent: “Who decides whether an official police report is required?”
Child: “A responsible adult following the current instructions.”
The ScamShield reporting guidance explicitly draws this line. A report of suspected scam content can contribute to detection without automatically making the reporter a complainant in a formal criminal proceeding.
The child should not invent the name or status of a police case. No one should be instructed to make false reports for a lesson.
Worked case five: is 1799 the police emergency number?
A child hears the scam assistance number 1799 and assumes it serves the same purpose as a police emergency call. The parent asks what each route is designed for.
Parent: “What does the 1799 service help people with?”
Child: “Checking scam-related concerns and getting advice.”
Parent: “Can it make a police report for someone?”
Child: “No.”
Parent: “Who should handle an actual loss or compromised account?”
Child: “You should contact the appropriate bank and police reporting channel under the official guidance.”
A single system does not perform every task. ScamShield’s help line is available 24/7, but it is not an emergency dispatch service or a bank account operator. A child should not be asked to telephone the service for a mock assignment.
The family can memorise a simple distinction: help with checking, urgent bank action and official police reporting are not synonyms. The relevant adult selects the appropriate channel based on what has actually happened.
Worked case six: the suspicious message looks genuine
A fictional screenshot includes a company logo, professional layout and familiar Singapore English. The child says that good grammar and the right colours prove the sender is genuine.
Teacher: “What does the appearance tell you?”
Child: “It resembles an official message.”
Teacher: “Can an impersonator copy a logo or formal wording?”
Child: “Yes.”
Teacher: “What information is still missing?”
Child: “Reliable verification of the sender and the requested action.”
Teacher: “What is the safe next step?”
Child: “Do not engage; tell a trusted adult to check independently.”
This is the scam-specific version of source literacy. A polished format is not authentication. Conversely, a poorly worded message is not automatically criminal. The child should identify red flags without turning language quality into an absolute test.
A teacher can use a completely invented logo and address to practise the concept without replicating a real company’s login form or producing a believable fraudulent message.
Worked case seven: a family member has already clicked
In a fictional conversation an older sibling says they clicked an unsafe link and entered account details. Another child wants to scold them for being careless.
Parent: “What is our priority now?”
Child: “Getting appropriate adult help to limit further harm.”
Parent: “Should we shame the person?”
Child: “No. We should describe what happened accurately.”
Parent: “What does the official ScamShield advice say for affected accounts?”
Child: “Adults should contact the bank immediately where relevant, make a police report and secure their accounts.”
Parent: “Do you have to handle the recovery?”
Child: “No. I can tell you the concern, and you manage the next steps.”
ScamShield’s victim guidance prioritises prompt response when funds or personal information may be compromised. A child-level lesson should promote disclosure to trusted adults, not silence caused by embarrassment.
Do not ask children to store scam screenshots containing another person’s bank information, names or phone numbers in a class worksheet. Adults preserve any necessary evidence appropriately.
The Fencing Method: five neighbouring terms that must not collapse
Fence one — suspicion versus proof. A message can have warning signs without the child possessing definitive evidence of criminal conduct. It is appropriate to pause and seek help even while uncertainty remains.
Fence two — visible identity versus verified identity. A profile photo, logo, caller ID or sender name can be imitated. Verification requires a channel independently established as genuine.
Fence three — checking versus engagement. Checking a claim through trusted sources or ScamShield is different from clicking the suspect link, replying or installing a recommended file.
Fence four — app report versus police report. ScamShield’s own documentation explicitly distinguishes the two. A child should never say one completed the other automatically.
Fence five — adult recovery versus child assistance. A child can describe an incident and ask for help. Banks, authorised account holders, police and appropriate professionals handle consequential financial, legal and technical actions.
This mirrors the diagnostic, first-principles progression of the immutable Clementi tutorial: identify the mistaken mental move, repair its exact meaning, practise a safe example and check that the learner can transfer the distinction. Here the safety boundary is non-negotiable.
A ten-minute paper ScamShield vocabulary activity
Prepare five fictional message cards on paper. Do not use clickable links, working QR codes, real sender numbers or the identity of a real pupil. Mark each one “FICTIONAL PRACTICE” so it cannot be forwarded as an actual public warning.
First, present a parcel card demanding a payment through an unfamiliar link. Ask what it requests and which information would help verify the claim. The child should not open or reproduce a functioning link.
Second, show a mock call from someone claiming to be school staff. Ask which words describe the difference between claimed identity and independent confirmation. The child says “impersonation may be possible” rather than treating every unknown school call as proven fraud.
Third, provide a card marked “Enter one-time password.” The learner identifies it as a credential boundary and explains why a child should stop. No actual authentication code is needed.
Fourth, introduce the ScamShield app report and the police report as separate cards. Ask which helps report suspicious content to ScamShield and which constitutes an official police report under current procedures.
Fifth, add a fictional card saying “Adult bank account compromised.” Ask what an adult should consult—the official bank and ScamShield victim guidance—and what the child should do: disclose promptly, avoid shame and not take over.
Finish by asking each child for three short sentences: “I saw…,” “I have not verified…,” and “I will ask a trusted adult…”. Those frames reward accuracy over a dramatic accusation.
Three differentiated pathways for scam vocabulary
Repair pathway: a child knows “stranger” but assumes every familiar logo is safe. Teach suspicious, sender, impersonation, link and verification. Ask whether appearance or a claim proves identity.
Stabilisation pathway: the learner recognises a suspicious request but wants to check by responding to it. Teach phishing, credential, one-time password, official channel and red flag. Practise the safe stopping rule on paper.
Extension pathway: the child can ask for help and is ready to distinguish ScamShield, report, compromised, recovery and personal data. Explain which organisation has which responsibility, without managing real cases.
Children who understand a suspicious request in their home language but struggle to say “impersonation” in English can use a natural phrase first. A fluent speaker who confuses a ScamShield report with a police case needs a factual correction, not longer vocabulary.
A four-week Singapore child scam-awareness plan
- Week 1 — identify a questionable request: scam, suspicious, sender, impersonation and red flag. Describe a fictional message without declaring it definitely fraudulent.
- Week 2 — protect private information: personal data, credential, one-time password, link and attachment. Practise stopping at a request for secrets.
- Week 3 — verify safely: verification, official channel, ScamShield, block and report. Distinguish an app check from adult reporting procedures.
- Week 4 — get appropriate help: threat, urgency, phishing, compromised and recovery. Explain why adults handle bank, police and account actions.
Revisit earlier words in new fictional cases. No child should have to take a screenshot of a genuine scam, enter information into a test form or contact strangers for homework. One supervised family conversation each week is enough to develop the language.
A suitable progress record contains What was requested, What is unverified, What not to disclose and Which trusted adult can help. A good answer recognises a safe next action and preserves privacy.
Common mistakes and corrective explanations
“The logo looks correct, so the sender is genuine.” A logo and formal wording can be imitated.
“To check a suspicious link, I should click it.” No. Adults use independently verified legitimate channels or the appropriate ScamShield service.
“A temporary code is harmless to share.” One-time authentication codes can allow account access and must be protected.
“ScamShield 1799 makes a police report for me.” No. Its official helpline says it cannot file police reports.
“Submitting a ScamShield app report means the police investigation is confirmed.” The app itself states that its scam reports are not official police reports.
“A message without a ScamShield warning is guaranteed safe.” No. Not every new scam is necessarily identified by one check.
“A family member who fell for a scam should be mocked.” No. Prompt, accurate disclosure can help adults seek recovery and protect others.
“A school exercise requires real passwords and identification details.” It does not. Fictional placeholders teach the concepts without exposing anybody.
Frequently asked questions
What is ScamShield in Singapore?
What is Singapore’s ScamShield helpline number?
Can the ScamShield helpline file a police report?
Is a report submitted through the ScamShield app an official police report?
What should a child do with an unexpected request for a password or code?
If money was lost to a scam, who should act?
Do children’s personal details need to be used for a classroom scam example?
Can the family explain scam terms in another first language before English?
Nation building through safer, more trustworthy communication
Scams can affect household security, public trust and digital services. Singapore’s anti-scam system therefore involves the Police, ScamShield, banks, technology platforms and people making careful decisions about messages. The framework does not expect children to become investigators or handle financial emergencies. It gives families a shared vocabulary for recognising a risk and finding the responsible help.
Official sources include ScamShield Check for Scams, the 1799 helpline, App scam reporting, and victim guidance. The PDPC children’s personal-data guidelines provide separate data-protection context.
A child who says “This message asks for a secret; I have not verified the sender, and I will tell my parent without clicking” demonstrates a useful first-language-to-English skill. Accuracy, adult support and privacy—not clever tricks to defeat a criminal—are the lessons.
Continue the Singapore Children Vocabulary learning system
For broader source checking see Trustworthy Online Messages. For device guidance with older relatives see Intergenerational Digital Learning. The longer existing reference Singapore Vocabulary: Scam Prevention and First Languages gives adults a wider topic overview, while this child article focuses on age-appropriate stopping rules and the distinction among official channels.
Read the companion articles School-Zone Pedestrian Safety, E-Waste Collection and Public Budgets and Trade-offs when those pages are available. For all topics consult the Singapore Children Vocabulary hub and Vocabulary Learning Hub.
One five-minute family practice
Write an imaginary text demanding an account password. Ask your child to identify the unverified identity, what secret is being requested and what they should do instead of clicking or responding. Let them give the first answer in a home language and then one accurate English sentence. No live scam message, link, code or account is necessary.
Prepared on 28 October 2026 using ScamShield and PDPC official guidance. All dialogues and messages are fictional educational cases, not actual scam reports, banking advice or police case information.