Singapore Online Laws Explained: What POFMA, POHA, FICA and the Online Safety Codes Do

The most common mistake is treating all Singapore online speech laws as the same thing. A correction direction under POFMA is not a takedown under the Broadcasting Act, and neither is a Protection Order from the Protection from Harassment Court. They share no enforcement body, no appeal process, and no definition of harm. This guide routes you to the right statute based on what you are trying to do, and it names the jurisdiction, Singapore, for every legal claim. Each law is explained from its own text and official guidance, with attributed criticism presented separately. The site takes no position of its own.

• POFMA (Protection from Online Falsehoods and Manipulation Act 2019): Governs correction and removal of false statements of fact communicated in Singapore. Administered by MDDI. Appeals to the High Court.
• POHA (Protection from Harassment Act 2014): Criminalises harassment, stalking, doxxing, and false statements of fact related to doxxing. Administered by the Singapore Police Force. Civil remedies via Protection from Harassment Court.
• FICA (Foreign Interference Countermeasures Act 2021): Targets hostile information campaigns originating from foreign actors. Administered by the Ministry of Home Affairs. Politically significant persons must disclose online activity.
• Online Safety Code (IMDA): Code of Practice for Online Safety issued July 2023. Designated social media services must minimise exposure to harmful material. Enforceable by IMDA.

Read the direction first. It names the statute: POFMA, the Protection from Online Falsehoods and Manipulation Act 2019 (Act 18 of 2019), which commenced on 2 October 2019. The administering ministry is the Ministry of Digital Development and Information (MDDI).

POFMA Part 3 allows the Minister to issue a Correction Direction for a false statement of fact communicated in Singapore. Part 3 also covers Stop Communication Directions. Part 4 lets the Minister issue Targeted Correction Directions to internet intermediaries and Disabling Directions to block access to the statement. Part 5 covers General Correction Directions to prescribed intermediaries, broadcast licensees, and newspaper permit holders. Part 5A provides for Access Blocking Orders to block entire online locations. Part 5B allows Account Restriction Directions to restrict accounts spreading falsehoods. Part 5C gives the Minister power to issue Transparency Directions requiring intermediaries to disclose information about communicators of falsehoods.

Non-compliance for an individual carries a fine up to SGD 20,000 or imprisonment up to 12 months or both. For a non-individual, the fine is up to SGD 500,000. Malicious falsehood carries higher penalties: up to SGD 50,000 or 5 years imprisonment for an individual, and up to SGD 1,000,000 for a non-individual.

What To Do With A POFMA Direction

The direction will specify what you must do, the timeline, and the statement it applies to. You have a defined legal path to challenge it: appeals against Part 3, 4, and 5 directions are heard by the High Court. The official government fact-checking portal is Factually (gov.sg/factually), operated by MDDI, which publishes clarifications on false claims. Factually was first published in 2012 and was rebranded under the POFMA framework in 2019. POFMA also allows Codes of Practice to be issued to prescribed digital advertising intermediaries and internet intermediaries.

What POFMA Is Not

POFMA is a legal mechanism that can compel correction or removal. It is not fact-checking, which is a journalistic or civic practice that publishes a verdict. A POFMA direction is not a fact-check article, though both address falsehoods. Independent fact-checking organisations in Singapore include Black Dot Research, an independent non-partisan organisation. The Straits Times runs the CheckMate column, and CNA has the Sure Anot segment. These publish verdicts with evidence; they do not issue legally binding directions.

If someone is harassing, stalking, or doxxing you online, the statute is the Protection from Harassment Act 2014 (POHA), which commenced on 15 November 2014. Go to the Singapore Police Force. They enforce the criminal offences. The Protection from Harassment Court handles civil remedies.

POHA Section 3 makes it an offence to intentionally cause harassment, alarm, or distress. Section 4 covers the same without requiring intent. Section 5 covers fear or provocation of violence. Section 7 makes unlawful stalking an offence. Doxxing, publishing personal information to cause harassment, is an offence under Section 10. Doxxing with intent to cause fear of violence falls under Section 11. False statements of fact related to doxxing are covered by Section 12. Enhanced penalties apply for doxxing against public servants.

Civil Remedies Under POHA

The Protection from Harassment Court can issue a Protection Order requiring the person to stop the harassing behaviour. Ask for an Expedited Protection Order in urgent cases. These are court orders with legal enforceability; breaching them is a separate offence.

POHA And Platform Reporting: Not The Same Thing

Reporting material to a platform flags it for removal under the platform's terms of service. That is moderation, not legal action. Making a police report under POHA initiates a legal process under Singapore law. They are different processes with different outcomes and different evidentiary requirements. A platform may refuse to remove material that violates no terms of service; a court can still order the harasser to stop under POHA.

The Foreign Interference (Countermeasures) Act 2021 (FICA) commenced on 7 July 2022. It targets hostile information campaigns originating from foreign actors. The administering body is the Ministry of Home Affairs (MHA). FICA designates individuals or organisations as politically significant persons, subjecting them to countermeasures including disclosure of online activity and funding. The Minister may issue directions to counter foreign-origin hostile information campaigns. FICA is not about domestic falsehoods; it is about foreign-origin interference designed to influence Singapore politics or public opinion.

FICA is one of several statutes in the online speech legal framework in Singapore. Others include the Elections (Integrity of Online Advertising) Act 2024, which mandates transparency disclosures for paid online election advertising, and the Maintenance of Religious Harmony Act 1990 (MRHA), which makes it an offence to urge violence against another religious group.

The Code of Practice for Online Safety was issued by IMDA on 18 July 2023. Designated social media services must minimise Singapore users' exposure to harmful material. The designated services as of the code's issue were Facebook, Instagram, TikTok, X (Twitter), YouTube, and HardwareZone. The code is enforceable by IMDA under the Broadcasting Act 1994, which already classifies Internet Content Providers under a Class Licence. The Broadcasting Act prohibits material objectionable on grounds of public interest, public order, national harmony, or good taste and decency.

The Online Safety Code is about what platforms must do as part of their systems and processes. It is not about individual user complaints, though users benefit from the systemic changes. If a platform fails to comply, IMDA can take enforcement action. This is distinct from reporting a specific piece of material to the platform for violating its terms of service.

Platform Content Moderation Versus Singapore Law

Moderation under platform terms of service is governed by a private contract between the user and the platform. Legal action under Singapore statutes is governed by public law enforced by state bodies. A platform may remove material that violates its rules even if the material is legal in Singapore. Conversely, material that violates Singapore law may remain on a platform if no one reports it and the platform's own systems do not detect it. Understanding the distinction between moderation (platform rules) and legal action (Singapore law) is essential for deciding which route to take.

Problem	Statute	Enforcement Body	Appeal Mechanism	Penalty For Non-Compliance
False statement of fact in circulation	POFMA Part 3	Minister (MDDI)	High Court	SGD 20,000 / 12 months (individual); SGD 500,000 (entity)
Malicious falsehood	POFMA	Minister (MDDI)	High Court	SGD 50,000 / 5 years (individual); SGD 1,000,000 (entity)
Harassment, alarm, distress	POHA Section 3-4	Singapore Police Force	Protection from Harassment Court	Fine and/or imprisonment
Unlawful stalking	POHA Section 7	Singapore Police Force	Protection from Harassment Court	Fine and/or imprisonment
Doxxing	POHA Section 10-11	Singapore Police Force	Protection from Harassment Court	Enhanced penalties for public servants
Foreign-origin hostile information campaign	FICA	Minister (MHA)	Defined under FICA	Varies by direction
Harmful material on platform	Online Safety Code (Broadcasting Act)	IMDA	Defined under code	IMDA enforcement action
Scam or malicious cyber activity	OCHA (Online Criminal Harms Act 2023)	MHA	Defined under OCHA	Varies by direction

Report the scam immediately. The Online Criminal Harms Act 2023 (OCHA) commenced on 1 February 2024, administered by MHA. It allows the government to issue directions to online service providers to disable access to scam or malicious cyber activity material. Codes of practice may be issued to designated online service providers on systems and processes to counter scams and malicious cyber activities.

The Computer Misuse Act 1993 covers unauthorised access to computer material (Section 3), unauthorised modification (Section 5), and supplying personal information obtained via unauthorised access (Section 8A). The Cybersecurity Act 2018, administered by the Cyber Security Agency of Singapore (CSA), designates critical information infrastructure sectors, 11 sectors including energy, water, banking, healthcare, media, and infocomm, and sets cybersecurity requirements.

The Personal Data Protection Act 2012 (PDPA) is administered by the Personal Data Protection Commission (PDPC). Its nine core obligations are consent, purpose limitation, notification, access and correction, safeguarding, retention limitation, transfer limitation, and accountability. Part 9 governs the Do Not Call registry for telemarketing. Data breach notification requires organisations to notify PDPC and affected individuals of breaches causing significant harm. The financial penalty cap is up to 10% of annual turnover in Singapore or SGD 1 million, whichever is higher.

The Penal Code 1871 also applies: Section 292 covers obscene material, Section 298A covers promoting enmity between groups on grounds of religion or race, Section 503 covers criminal intimidation, and Section 507 covers criminal intimidation by anonymous communication.

Reporting Scams In Practice

The ScamShield app blocks scam calls and SMS using a known-scam database. It is operated by the police and GovTech, launched in 2020. The ScamShield hotline is 1799, available 24/7. The ScamShield Bot on WhatsApp allows scam checks. The Singapore Police Force Anti-Scam Centre was established in 2019. The SPF scam reporting platform is at police.gov.sg/i-witness. The National Crime Prevention Council runs the Scam Alert website at scamalert.sg.

According to the SPF Annual Scams and Cybercrime Brief 2024, total scam cases reported in 2024 were 46,563, with total losses of SGD 651.8 million. For January to June 2025, the Mid-Year Brief reported 26,587 cases and losses of SGD 385.6 million. The most reported scam typology in 2025 was job scams; the highest financial loss came from investment scams. These figures are published by the SPF and updated periodically.

The everyday Singaporean who receives alarming forwarded messages and wants to know which law applies to which problem will find the map useful. The parent or educator who sees children navigating algorithm-driven feeds and needs concrete conversation starters about legal consequences will use the route to POHA and the Online Safety Code. The small-business owner targeted by impersonation scams needs the scam reporting section and the OCHA explanation. The community leader running digital literacy talks needs a neutral reference for POFMA, POHA, FICA, and the Online Safety Code.

A reader looking for political commentary, party endorsements, or activist calls to action should go to advocacy organisations or political news sites. A reader who wants official government communications, legal advice, or to report a crime should go directly to the Singapore Police Force, the POFMA Office, or the Personal Data Protection Commission. A reader outside Singapore seeking general media literacy theory without Singapore-specific laws should use a global resource such as the News Literacy Project or First Draft.