Unsure whether a call, WhatsApp message, SMS, QR code or website is a scam? Stop interacting and check independently. In Singapore, the ScamShield Helpline is available 24 hours a day at 1799 to help assess suspicious situations. If money or bank access may already be compromised, call your bank’s genuine fraud hotline immediately; do not wait for a scam assessment. If you need urgent police assistance, call 999.
Common searches such as ScamShield 1799, phishing meaning, scammer knows my NRIC, fake government SMS, bank kill switch, what to do after transferring money to scammer usually reflect one central problem: a person needs to act before a persuasive message becomes a real loss. Understanding words like impersonation, spoofing, malware, remote access and authorised transfer makes the right next step easier to recognise.
Quick summary: Do not click or call back using contact details inside an unverified message. Visit the organisation’s official site or app yourself. Never share your banking password, OTP or digital-token approvals. If a transfer, card or account is compromised, call the bank directly, use its relevant protective controls, preserve records and make a police report. Use the official ScamShield guidance for the updated sequence.
Suspected scam versus confirmed financial loss: which action comes first?
The same vocabulary can describe different risk levels. Identify what has already happened so that you do not lose time on the wrong response.
| Situation | First practical action | Follow-up |
|---|---|---|
| Unexpected suspicious call or SMS, no action taken | Stop and verify using ScamShield 1799 or a trusted official channel | Block or report suspicious contact as appropriate |
| You entered banking credentials on a fake page | Contact your bank immediately through a verified number | Follow instructions to secure accounts and report |
| You authorised a payment to a scammer | Call your bank’s fraud hotline immediately | Keep evidence and file a police report |
| Someone asks you to install a remote-control app | Decline and end the interaction | Check device safety with trusted support |
| You receive a supposed government request to transfer funds | Do not transfer | Check the agency independently and use ScamShield |
| A friend appears to ask for urgent money | Contact that friend through a different known channel | Do not rely on a copied profile photo or voice |
56 essential anti-scam and digital-safety vocabulary terms
These terms help readers describe what happened to a bank, police officer, relative or official helpline. The definitions are intentionally practical, not a diagnosis that any particular person is guilty of fraud.
| Term | Meaning in plain English | What it means for your next action |
|---|---|---|
| Scam | Deceptive scheme to obtain money, information or other benefit | Verify claims independently before acting |
| ScamShield | Singapore anti-scam app, helpline and information service | Use official website or 1799 for scam checks |
| 1799 Helpline | ScamShield number available 24/7 for scam-related enquiries | Call when uncertain whether a request is genuine |
| Fraud | Deception that causes or seeks unlawful advantage | Contact bank promptly if finances are affected |
| Phishing | Fraudulent attempt to obtain information through deceptive messages or pages | Do not enter account details through unsolicited links |
| Smishing | SMS-based phishing | Inspect suspicious text messages independently |
| Vishing | Voice-call phishing | Hang up and call an official published number |
| Spear phishing | Message tailored to a specific person’s details | Personalisation does not establish authenticity |
| Impersonation | Pretending to be a trusted person or organisation | Verify through a separate known channel |
| Spoofing | Manipulating how a caller ID, sender or website appears | A familiar displayed name may be fake |
| Government impersonation | Scammer posing as an official or agency | Government officials do not demand money transfers over calls |
| Bank impersonation | Scammer posing as bank staff | Use the genuine bank app or published hotline |
| Police impersonation | Scammer falsely claiming law-enforcement authority | Do not disclose credentials or send money to ‘safe accounts’ |
| Fake safe account | Scammer’s destination described as a secure holding account | Refuse transfer and report the contact |
| OTP | One-time password | Never read a code to someone who contacted you |
| Digital token | Bank authentication method | Reject approvals you did not initiate |
| Push notification | App prompt requesting attention or approval | Verify what transaction the prompt actually authorises |
| Singpass | Singapore digital identity access system | Do not share login credentials or approve unknown requests |
| Credentials | Usernames, passwords and authentication secrets | Change compromised passwords using genuine services |
| Identity theft | Misuse of personal details to impersonate someone | Monitor affected accounts and report suspicious activity |
| NRIC | National Registration Identity Card identification number | Knowing your NRIC does not make a caller legitimate |
| FIN | Foreigner Identification Number | Treat unexpected requests to disclose identifiers cautiously |
| Personal data | Information that identifies a person | Share only when necessary through verified channels |
| Malware | Software designed to harm or compromise a device | Do not install unknown apps from links or files |
| Remote access | Ability to view or control a device from elsewhere | Never grant it to an unsolicited ‘support’ caller |
| Screen sharing | Showing a device screen to another person | Avoid revealing passwords or authentication prompts |
| App sideloading | Installing an app outside the usual official store workflow | Treat unsolicited installation instructions as high risk |
| Suspicious link | URL that may lead to a fake page or malware | Visit known official addresses directly instead |
| Lookalike domain | Website address crafted to resemble a trusted site | Check spelling and the actual domain, not only logo |
| QR-code scam | Deception using a machine-readable code | Check the payment destination and who provided the code |
| Fake investment | Fraud posing as a profitable financial product | Independently verify the firm and claims |
| Guaranteed return | Claim of risk-free or certain investment profit | Treat unusually certain promises as a warning sign |
| Job scam | Fake employment or task requiring advance payment | Verify employers and refuse requests to pay to earn |
| Task scam | Fraud using small ‘jobs’ to demand escalating deposits | Stop when told to top up funds to unlock wages |
| Marketplace scam | Fraud during an online sale or purchase | Keep payments and communication within verified channels |
| Love scam | Manipulation of an emotional relationship for money | Independently seek help before transferring funds |
| Deepfake | Synthetic media imitating voice, face or events | Verify urgent requests through another known route |
| Urgency tactic | Pressure to act before checking facts | Slow the interaction and verify |
| Authority pressure | Using a claimed rank or official status to force compliance | Ask for independent verification |
| Social engineering | Manipulating trust or fear to bypass normal judgement | Recognise when someone is steering your behaviour |
| Account takeover | Unauthorised person gains control of an account | Inform service provider and secure related access |
| Compromised account | Account no longer reliably controlled by its rightful owner | Contact bank or platform immediately |
| Bank kill switch | Bank security mechanism to limit account use or transactions in an emergency | Use via verified bank channels, following provider instructions |
| Fraud hotline | Direct support line for suspected financial fraud | Use bank’s official website or app, not a suspicious SMS |
| Transaction reference | Identifier for a bank transfer or payment | Keep when reporting a loss |
| Police report | Formal submission of information about an incident | File when scammed and retain acknowledgement |
| Evidence trail | Messages, URLs, receipts and transaction details | Preserve records without engaging further with scammer |
| Recovery scam | Second fraud promising to recover lost money for a fee | Do not pay strangers claiming they can get funds back |
| Money mule | Person whose account is used to move criminal proceeds | Do not rent, lend or transfer control of bank accounts |
| Freeze | Temporary restriction placed on certain account functions | Ask the relevant provider what is blocked and what remains possible |
| Unauthorised transaction | Transaction conducted without the account holder’s approval | Tell bank precisely what you did and did not authorise |
| Authorised scam transfer | Victim knowingly presses transfer after deception | Still report immediately; legal treatment can differ |
| Shared Responsibility Framework | Singapore framework allocating duties in qualifying phishing cases | Do not assume every scam or transfer qualifies for compensation |
| Verification | Independent check that a claim or sender is genuine | Use the institution’s published channels |
| Report in ScamShield app | Submission of suspicious communication via the official app | Helps report content; does not replace a police report |
| Case status | Progress of an official investigation or complaint | Use police and bank case channels, not helpline 1799 for status |
First five minutes: when you think money is being stolen
Contact your bank immediately through the fraud number listed on its official website or inside its authentic app. Tell the bank whether you transferred money yourself after deception, entered a password into a suspicious site, shared an OTP, approved a digital-token prompt or installed a remote-access application. These details matter because the bank will prioritise appropriate containment measures.
Use any relevant emergency security mechanism, such as a bank kill switch, according to the bank’s instructions. Then preserve the transaction reference, amount, date, account details presented, message screenshots and URLs. Make a police report. Do not wait to assemble a perfect narrative before making the first urgent call.
- Stop communicating with the suspicious party.
- Call your bank’s independently verified fraud hotline immediately if bank access or funds are at risk.
- Follow protective instructions and secure related accounts and devices.
- Preserve the transaction trail and file a police report.
- Tell close contacts if your messaging or social account may be sending fraudulent requests.
What 1799 can and cannot do
The 1799 ScamShield Helpline is a Singapore anti-scam assistance channel available 24/7. It can help people check suspicious situations, explain protective actions and direct victims to participating banks. It is not a replacement for the bank’s urgent fraud response and cannot itself make a police report.
ScamShield states that case updates should be sought through the police investigation channels; updates about frozen bank accounts should come from the relevant authorities and banks. If you have not yet suffered a loss and are merely unsure about a message, 1799 is a useful place to check rather than continuing a risky conversation.
Why a displayed name, genuine photo or private detail proves very little
Caller IDs, profile pictures, email display names and even detailed personal information can be manipulated or obtained from other sources. A message that appears to come from a government official or a close relative is not automatically genuine. Deepfake audio and video may make a request feel more convincing without making its financial instruction reliable.
The useful rule is separation. One channel carries the claim; a different, pre-existing channel checks it. For example, call your family member at the number already in your contacts, or open your bank’s app directly. Do not verify a suspicious message by clicking the phone number or website that the message itself provides.
Example: A message appears to be from your child’s school and says the payment account changed this morning. Call the school’s existing main number before sending anything.
How phishing works without technical jargon
Phishing usually creates a believable reason to visit a fake page or disclose an authentication secret. The lure may be a parcel delivery, unpaid fine, tax refund, bank account warning or account closure. A page can copy a real logo and still have no legitimate relationship with the institution.
If you receive an unexpected message, do not follow its URL. Visit the genuine agency or provider yourself, log in through the official app and check whether the same notice exists there. A familiar colour scheme, a padlock symbol or a sender with official-sounding language is not an identity check.
Differentiate the scam categories before reporting
A phishing incident may involve stolen passwords; a marketplace scam may involve payment for goods that never arrive; an investment scam may involve invented returns; a remote-access scam may involve a device takeover. Correctly identifying the sequence helps bank and police investigators understand the risk.
Describe what happened in chronological terms rather than using vague labels alone. ‘I clicked an SMS link, entered my bank login and approved a token at 2:10 pm’ is more actionable than ‘I think my phone is hacked’. If you do not know whether a device was compromised, say so plainly and seek appropriate technical support.
What if someone claims to be from MAS, police or another government agency?
The Monetary Authority of Singapore warns that its officials do not ask people over the phone to transfer funds, disclose bank login details, install mobile apps from unofficial stores or transfer calls to police. A supposed ‘investigation’ that requires moving savings to a secure holding account should be treated as a severe warning sign.
Government SMS sender conventions and genuine agency services are helpful signals, but a single symbol or sender label should never override suspicious content. When in doubt, terminate the contact and navigate to the actual government domain independently or ask 1799 for scam-related guidance.
Protecting parents, students and less confident digital users
Agree on an easy family verification routine before an emergency occurs: no transfer under pressure, no credential sharing, and one trusted phone number to call when a story seems urgent. Practise what to say when a caller refuses to allow the person to hang up. Keep official bank fraud contacts available without requiring a web search during a crisis.
The language matters. Instead of saying ‘don’t be gullible’, ask whether the person noticed a payment request, remote-access demand or unexpected authentication prompt. Those are observable events. A calm and specific conversation helps another person report a problem before it escalates.
After reporting: handling fear, misinformation and false recovery offers
Victims may receive new messages from people offering to recover money for a fee, unlock a frozen account or influence an investigation. These can be follow-up scams. Do not pay an unofficial ‘recovery agent’. Use your bank’s and the police’s documented case-management channels.
There is no universal refund promise. Singapore’s Shared Responsibility Framework relates to qualifying phishing situations and has defined roles and tests; it is not a blanket reimbursement programme. Keep accurate records and ask the bank how your actual case will be assessed. Avoid sharing private case documents publicly.
Questions people search for: practical FAQ
Is 1799 open at night?
Yes. ScamShield describes the 1799 Helpline as available 24 hours a day, seven days a week, for scam-related enquiries.
Should I call 1799 or my bank first if I transferred money?
Call your bank immediately to contain possible losses. ScamShield can assist with guidance, but speed matters when financial accounts may be compromised.
Can 1799 file a police report?
No. ScamShield says the helpline cannot file a police report for you. Use the official police reporting service or an appropriate police facility.
Someone knows my NRIC and home address. Must they be genuine?
No. Possession of personal details does not establish identity. Stop and verify through the genuine institution.
What is a bank kill switch?
It is a bank-provided emergency protection control. Features vary across banks, so follow your own bank’s official instructions.
Is a government SMS from gov.sg always safe to act on?
Check the content and official agency independently. A sender convention is not a substitute for verifying an unexpected request, especially any payment or credential demand.
Are all scam losses covered by a shared responsibility framework?
No. Scope and conditions matter. Report to your bank and police, then ask about the assessment relevant to the particular event.
What should I keep as evidence?
Keep timestamps, messages, sender identifiers, URLs, transfer receipts, account names and case numbers. Avoid sending documents to anyone who contacts you claiming to recover funds.
I installed a suspicious remote-control app. What should I do?
Disconnect from the suspicious party, call the bank urgently if financial data was exposed, and seek trusted assistance to check the device and secure accounts.
Related Singapore Vocabulary guides
- Singapore Vocabulary: Singpass and Myinfo
- Learning Vocabulary for Phishing Scams
- How to Recognise and Avoid Phishing
- Vocabulary Articles and Knowledge Hub
Official sources and next steps
- ScamShield: call the 1799 helpline — scope and 24/7 availability
- ScamShield: I have been scammed — immediate action, bank and police reporting
- ScamShield: bank anti-scam hotline list — independently verified bank contact numbers
- ScamShield: what is ScamShield? — app and reporting channels
- MAS: combatting scams — Shared Responsibility Framework information
- MAS: impersonation scam warning — what officials will not ask people to do
Editorial verification: 3 November 2026. This is a plain-English vocabulary and action guide. The relevant bank, government agency or healthcare provider determines actual eligibility, processes and deadlines; check the linked live services before acting.