VIEW THIS AS

Auto mode follows the Route Engine until you choose a viewpoint.

YOU ARE HERE

ROUTE CHECK

CONNECTED TO

WHAT NEXT

Use the canonical route for this room, or HELP if you are unsure.

How We Can Be Scammed | How a Fake Immigration Visa and Work Permit Scam Works

Three learners review open books together at a classroom table, with stacks of textbooks, stationery and a whiteboard in the bright room.

A supposed immigration agent, recruiter or government representative says a visa, work permit or residency application has been approved, but payment or identity verification is needed immediately. The story can sound convincing because genuine immigration processes involve documents, fees and deadlines. A message alone does not establish that the sender has authority.

Verify the exact application and payment process using the relevant government’s official website and published contacts. In Singapore, use ICA for immigration matters and MOM for work passes, according to the service involved. Do not transfer money to an unknown agent or send passport copies without verifying the purpose and recipient.

  • Stop before transferring money or granting access.
  • Verify the identity through a separate trusted channel.
  • Check the actual recipient and the purpose of any approval.
  • Contact the bank immediately if financial information was exposed.
  • Preserve evidence and use official reporting services.

How the scam unfolds

The target’s real need

The applicant may be planning study, employment, travel or family relocation. A scammer uses this context to send a message that appears connected to a genuine application or an attractive job opportunity.

The borrowed authority

The message may display government logos, official-looking letters, application numbers or a supposed officer’s name. These can be copied or invented. An application number in an unverified email is not proof that an official agency issued it.

The fee demand

The sender claims that a processing charge, security deposit, medical fee or expedited approval payment must be sent to a specified account. Genuine fees can exist, but they must be confirmed through the actual agency’s published process.

The document request

The contact may ask for a passport, identity card, photograph, employment history or authentication details. Such information can be misused. Disclose only what is required through a verified official or legitimate employer channel.

The escalating story

After a transfer, the applicant may be told a further clearance is necessary or that an earlier payment was insufficient. Repeated unverified demands are a reason to stop, not proof that approval is close.

A realistic worked example

An overseas student receives a message claiming their Singapore immigration clearance is complete but that a new transfer is required to release the approval letter. The student checks the application through the appropriate official service and contacts the institution using its published details. This is a fictional example.

How to verify the claim

Use the relevant official government domain, independently typed or saved, and the application’s actual reference details. For Singapore, distinguish ICA immigration services from MOM work-pass processes. A private agent’s claimed affiliation must be verified separately; an official agency’s existence does not validate every person using its name.

Warning signs worth noticing

Requests for payment to personal accounts, guarantees of visa approval, threats of immediate deportation in an unsolicited message, pressure to conceal the contact from an employer, and demands for login credentials all require independent checks.

If you have already responded

If documents were disclosed, seek guidance from the relevant issuing authority and monitor for misuse. If money was transferred, contact the bank immediately and preserve payment records. Report impersonation to the genuine agency and appropriate law enforcement.

How families can prevent this

Families preparing international moves should keep a single list of official application portals, trusted employer contacts and genuine fees. A shared record reduces confusion when multiple agencies or recruiters are involved.

Why the first contact can feel plausible

The attacker chooses a topic the recipient already cares about. The person may be working, seeking financial help, arranging a move or following an online community. A plausible topic reduces suspicion but does not establish the sender’s identity. Before responding, separate the real need from the proposed action and check whether the person asking has authority.

A professional-looking message is not authentication

Official-looking design, realistic documents, recognisable names and even accurate personal details can appear in fraudulent communications. An HTTPS address indicates an encrypted connection but does not guarantee that the site is operated by the institution whose logo appears on it. Identity must be established through an independent trusted route.

How urgency changes decisions

A deadline can make ordinary verification feel inconvenient. Fraudsters may say that funds, employment, approval or access will be lost if the recipient delays. Yet a claim of urgency is not evidence that a payment or approval is legitimate. The more consequential the request, the more important it is to verify before acting.

The trust-boundary test

Ask what would leave your control: money, personal documents, passwords, one-time codes, device access or financial permissions. Then ask who would gain that control and what evidence confirms their identity. The safe decision depends on the actual recipient and authorisation, not on the story attached to the request.

The independent verification routine

Stop interacting with the suspicious contact. Open a genuine application or known website independently, or call a previously verified number. Confirm the exact transaction, recipient and reason for the request. Do not rely on another number, profile or webpage introduced by the same unknown person.

What a small successful transaction proves

A small real payment or convincing demonstration can build confidence, but it proves only that the limited event occurred. It does not establish the legitimacy of future promises, the existence of a larger balance or the safety of subsequent transfers. Treat every new request as a separate decision requiring evidence.

How to preserve useful evidence

Save dates, amounts, transaction references, messages and account names as displayed. Distinguish confirmed transfers from claimed balances or future payments. Do not revisit a suspicious site just to collect screenshots. A concise chronological account helps banks and official investigators understand what happened.

What to do in the first minutes after a suspected loss

Stop sending money or approving requests. Contact the bank or relevant service through its official emergency channel. Explain exactly what information was entered, what permissions were given and which transactions occurred. Follow the institution’s account-security guidance and report suspected fraud through the appropriate authorities. Recovery cannot be guaranteed.

A short exercise for families

Use a fictional message and ask four questions: What does it claim? What does it want me to do? What could be lost? How can I verify without using the sender’s contact details? Practise the same questions across different examples until the routine becomes familiar.

What employers and educators can improve

Create clear rules for payments, document sharing and unusual approvals. Staff should know where to escalate suspicious instructions, and students should be taught that familiar digital interfaces do not automatically establish trust. Good procedures make independent checking normal rather than leaving people to improvise under pressure.

Frequently asked questions

Does a familiar logo prove the sender is genuine?

No. Branding can be copied. Confirm the actual person or institution through a separate trusted channel.

What if the caller knows private details?

Correct personal information is not proof of authority. Do not disclose more information or approve requests on that basis alone.

Can a small payment still be a scam?

Yes. A small amount may be bait for credentials, permissions or a larger subsequent transfer.

Is HTTPS proof that the website is legitimate?

No. It indicates an encrypted connection to the site, not that the site belongs to the named organisation.

What if I only clicked a suspicious link?

A click alone does not prove a loss. Assess whether you entered credentials, installed software or approved a transaction and respond to the actual exposure.

Should I pay a fee to recover my money?

Do not trust an unverified recovery service or send more money to a suspicious contact. Consult your bank and official reporting channels.

What records should I keep?

Save messages, relevant dates, transaction references, claimed identities and a factual timeline of what you did.

Where can Singapore readers get help?

Use your bank’s official emergency route for financial exposure and ScamShield or its 1799 helpline for scam-related guidance.

Read more on eduKate

Sources and editorial scope

Consult the relevant official guidance, ScamShield and your financial institution’s verified support channels. Worked examples are fictional. This article is general scam-prevention education, not a guarantee of recovery or personalised legal or financial advice. Procedures vary by jurisdiction.