The Immediate Steps to Take After Being Scammed in Singapore, from Bank Contact to Police Report

The confirmation message glows on your phone and the bank app shows the money has left your account. Then the thread goes quiet. You have just realised the official who called, the one who spoke in perfect English and referenced your NRIC, the one who said a parcel under your name was linked to a money laundering case, was not from the government at all. This is the moment everything stops. What follows is a protocol. Follow it in order.

Your Bank Is the First Call, Not the Police

Open your banking app and call the hotline on the back of your card, not the number in the message. The Anti-Scam Command runs a 24/7 joint operations centre with DBS, OCBC, UOB, Citibank, Maybank, Standard Chartered, and HSBC. Make this call while you are still on the phone with the fraudster. Every minute matters when a transfer is being processed. Tell the officer your accounts are compromised. They will freeze your accounts and flag the destination account for a reciprocal freeze. In 2024, the Anti-Scam Command froze over 22,000 bank accounts and recovered over SGD 180 million through this mechanism. Have your NRIC, phone number, and the transaction reference number ready. If you transferred to a PayNow number, give them that too; it is the fastest way to trace the digital footprint of the fraud. If malware has compromised your banking app, do not log in again from that phone. Use a different device or call the hotline. Logging in on an infected device hands the attacker your new credentials. The bank will also ask if you received a spoofed SMS. Report it. The telco duty under the Shared Responsibility Framework mandates blocking scam SMS from unregistered sender IDs, and your report helps them tune the filter.

• Call the bank's 24/7 hotline; do not use the number in the scam message.
• Freeze all accounts, not just the one used for the scam.
• Get the bank's internal fraud case number.
• Ask if the bank can issue a recall request for the transfer.

File the Police Report Within the Day

If you have already lost the money, get the police report done within the day. The Singapore Police Force Anti-Scam Command runs a dedicated online portal at eservices.police.gov.sg for non-urgent reports, and I-Witness at police.gov.sg/i-witness for general reports. For a scam, you must file an official police report. The report number you receive is your key to unlocking every other recovery channel. When you file, they will ask about the scam typology. Know which one it is: job scam, phishing scam, e-commerce scam, investment scam, impersonation scam, or love scam. In 2024, e-commerce scams led the count at 14,030 cases, but investment scams took the most money at SGD 318.9 million, and job scams took SGD 157.1 million across 9,030 cases. Do not self-diagnose if you are unsure. Describe what happened and let the officer classify it. The Anti-Scam Command assigns a dedicated investigation officer to every case, and the classification affects how the case is handled. The police are the only ones who can compel the bank to reverse a transfer; the bank cannot act on your word alone. This is the distinction between platform reporting and legal action: a platform report flags content for removal under their terms, a police report initiates a process under Singapore law.

Install ScamShield and Report the Number

Immediately after the police report, download the ScamShield app. This is the official Singapore tool that blocks scam calls and SMS and lets you report suspicious messages and numbers. It is not a general antivirus; it uses a known-scam database to filter calls and messages on your phone. ScamShield scam reporting Singapore is the way to flag the fraudster's number, the spoofed SMS you received, and any malicious links they sent you. The app's reporting function builds the database that protects the next person. When you report, include the exact wording of the message, the phone number it came from, and a screenshot of any conversation. The app will also check if a number has been reported by others. Run the fraudster's number through it before you block it. If you have already shared personal information, the Personal Data Protection Commission (PDPC) administers the Personal Data Protection Act, and you can report a data breach or a concern to them. Their role is not to recover your money. Their role is to investigate whether an organisation collected your data improperly. Use ScamShield for the criminal act and the PDPC only if a legitimate company exposed your data.

Coordinate the Three-Way Recovery Effort

Bank fraud recovery steps in Singapore are a three-way effort between you, the bank, and the police. The bank investigates the transfer, the police investigate the crime, and the Anti-Scam Command's joint operations centre coordinates the rapid freezing of accounts. You must file the police report before any recovery can begin. The bank needs the police report number to trigger the recall process, and the police need the bank's fraud case number to attach to their investigation. The Shared Responsibility Framework, which fully commenced on 16 December 2024, puts a duty on telcos to block scam SMS, but the banks' duty under the framework is still being phased in. You cannot rely on the framework to save you; you must act. If the bank rejects your claim, ask for their internal complaint process, then escalate to the Financial Industry Disputes Resolution Centre (FIDReC) if they have not resolved it within 30 days. In 2024, the Anti-Scam Command was freezing over 22,000 accounts. That is accounts, not cases; yours will be one among many. Keep every piece of correspondence, write down the names of every person you speak to, and note the time and date of each call. A digital paper trail is the only thing that holds up when the case goes to court or to the receiving bank. A recalled transfer can be reversed only if the receiving bank freezes the account in time.

Use the Victim Support Channels

Singapore scam victim support channels are not just the police. The Victim Care Cadre is a volunteer-led programme run jointly by the Singapore Police Force and the Ministry of Social and Family Development. It provides emotional support to scam victims. This matters. The person who has been scammed loses more than money; they lose their confidence in every future digital interaction. The Anti-Scam Command assigns a dedicated investigation officer to each case, but they do not provide counselling. The emotional toll of a job scam that wiped out a small business's cash flow is real. The volunteers in the Victim Care Cadre have been trained to listen and to point you to community resources. They cannot give legal advice. If the scam involved the impersonation of a government official, report it to the police as a separate matter. The government does not ask for your bank details over the phone. You can also visit scamalert.sg, run by the National Crime Prevention Council, which lists current scam typologies. It gives you information, not support. Use the police for the investigation, the Victim Care Cadre for the emotional recovery, and ScamShield for the ongoing protection.

What to Do When the Bank Is Closed and It Is 1 a.m.

The bank's hotline is 24/7, but the manager you need is not. If you have been scammed at 1 a.m., your first action is still to call the bank. The joint operations centre of the Anti-Scam Command operates round the clock with DBS, OCBC, UOB, Citibank, Maybank, Standard Chartered, and HSBC. If your bank is not one of those, call anyway; the night shift can freeze your card and put a note on the account. Then file the police report using the online portal. The e-services portal accepts reports 24/7. Do not wait until the morning. A fraudster with access to your account knows the window is short. If the scam was a phishing link that stole your banking credentials, change your passwords from a different device and enable two-factor authentication on every account that offers it. If you have already given them your bank's one-time password, the money may be gone, but the report stops the bleeding. The police report number you get at 2 a.m. will be there when the bank opens at 9 a.m. It is the single most important document you will have all week.

The Failure Case: When the Normal Route Fails

The bank says the transfer is irreversible, and the police say the account has been closed. This is where the ScamShield app's report and the PDPC's complaint process differ. ScamShield is for the criminal; the PDPC is for the company that leaked your data. If you sent money because a fraudster spoofed a legitimate business's SMS, and that business did not have proper safeguards, the PDPC can investigate the business under the Personal Data Protection Act. The penalties can be significant. But this will not get your money back; it will get the business fined. The one thing that can get your money back, if anything can, is the Anti-Scam Command's ability to freeze the destination account before the criminal withdraws the funds. In 2024, they froze over 22,000 accounts and recovered over SGD 180 million. The system works when you report quickly, but the recovery rate is a fraction of the total losses, which reached SGD 318.9 million in investment scams alone. Some money is gone the moment it leaves your account. The recovery steps are about preventing the next transfer and holding someone accountable.

The Digital Shadow: What the Fraudster Now Knows

You have reported the scam, but the criminal has a digital shadow of you now. They have your name, your phone number, your NRIC, and possibly your bank account number. This data will be sold to other operators, and it puts you in the crosshairs for a second round of attacks. The next message you receive, the one that says your Singpass has been compromised, will be a phishing attempt, and the sender ID will be spoofed. This is why the ScamShield app is not a one-time action but a permanent installation. Do not respond to any follow-up messages, do not click any links, and do not call any numbers they give you. The person on the other end of that call will be the same criminal with a new story. Change your passwords, enable two-factor authentication, and monitor your credit report. The Permanent Secretary of the government did not send you that WhatsApp message, and the neighbourhood police officer does not need your bank OTP to help you. These are the patterns of an impersonation scam. The only defence is to hang up, ignore, and report.

What This Subject Is Not For

If you are a traveller passing through Singapore who clicked a link in a phishing SMS and entered your credit card details, the steps above apply to you, but the recovery will be harder. You do not have a Singapore bank account and your bank is overseas. Call your bank's fraud line immediately, and file a police report anyway. The Singapore Police Force will still issue a case number that your bank may accept as proof of fraud. But if you are a Singapore permanent resident or citizen, you have the full protection of the Anti-Scam Command's joint operations centre, and the recovery process is designed for you. If you are a foreigner who has been scammed by an investment platform operating in Singapore, you will need the police report, but the jurisdiction may be complex if the operator is overseas. This subject suits the person who lives here, who has a local bank account, and who wants to know how the system actually works. It does not suit the casual traveller looking for general advice on avoiding scams while on holiday. The tools, the hotlines, and the recovery mechanisms are specific to Singapore residents.

Stop and Verify Before You Act

Before you make a call or click a button, run every unsolicited message through the same filter, whether it claims to be from the Singapore Police Force, DBS, or your own mother's hacked WhatsApp. The Singapore Police Force will never ask you to transfer money to a 'safe account'. No such account exists. The MOH will not ask for your bank details over the phone. A job offer that requires you to pay a fee upfront is a job scam, and the 9,030 job scam cases in 2024, with SGD 157.1 million lost, are proof enough. An e-commerce deal that demands PayNow payment to a personal account is an e-commerce scam, and the 14,030 cases in 2024 outnumber every other type. A love interest who asks for money to release a 'customs fee' is a love scam. These are not moral failings; they are psychological manipulation. The manipulation works because the criminal has studied the patterns of trust. The moment you stop and ask 'why would an official need me to do this?' you have already won the battle. The urge to act quickly is the weapon; the urge to verify is yours.

The recovery process in Singapore is fast, but only if you move at the speed of the criminal. The Anti-Scam Command has a joint operations centre with participating banks that works 24/7. They froze over 22,000 accounts in 2024, recovering over SGD 180 million. But the window of opportunity is measured in hours, not days. If you have been scammed, the sequence is not a list of suggestions; it is a countdown. Call the bank, file the police report, report to ScamShield, and if your personal data was compromised, notify the PDPC. Do not call the fraudster back to yell at them. That is another call to a premium number they control. Do not call the number on the spoofed SMS to 'cancel your parcel'. That is the same operator. Do not believe the person who says they can get your money back for a fee. That is a recovery scam, a second layer of the same fraud. Follow the protocol. The protocol will give you the best chance, but the chance is not a guarantee, and anyone who tells you otherwise is selling something.

The Other Kind of Scam: Misinformation and the Digital Footprint

Not every scam is financial. The forwarded WhatsApp message that says the government is issuing a 'COVID-19 Relief Payment' and asks you to click a link is a phishing scam. It is designed to harvest your personal data, not your money, though it may do both. This is where the distinction between a digital footprint and a digital shadow matters. Your digital footprint is the data you actively post and share; your digital shadow is the data collected about you without your active participation, like the browsing history that tells a criminal when you are most likely to answer a call. Every time you forward a suspicious message without verifying it, you are extending the fraudster's reach. If you have received a message that looks like it might be false or harmful, check it against the government's official websites. The real defence is the pause before the forward. Once your name is attached to it, your digital footprint is the vector, and the person who receives it from you is more likely to trust it.

The Malware-Enabled Scam: When Your Phone Is the Weapon

The e-commerce scam is the most common, but the malware-enabled scam is the most dangerous. The malware sits on your phone and intercepts your two-factor authentication codes. In 2024, there were 1,899 malware-enabled scam cases with SGD 34.1 million lost. These are the ones the Shared Responsibility Framework is designed to address, because the malware arrives through a fake app the operator told you to install. If you have installed an app from a link in a message, uninstall it immediately and run a security scan. If you have given remote access to your phone to a 'customer service agent' or a 'government official', you have handed them the keys. They can clear your bank account while you watch. The person you are talking to is not who they say they are, and the phone in your hand is now a listening device. Turn it off, go to a police station in person, and do not turn it back on until they tell you it is safe. The police will take your report, and the Anti-Scam Command will add your case to their statistics. But the phone is compromised, and no amount of reporting will un-hack it.

The Impersonation Scam: When the Caller Knows Your NRIC

The impersonation scam targets older adults, small business owners, and people who are just trying to help. In 2024, there were 1,504 cases of government officials impersonation. The perpetrators used the victim's name, NRIC, and address to sound legitimate. The call appears to come from the Singapore Police Force, and the caller ID is spoofed to show a real police station number. They tell you that your bank account is under investigation and you must transfer your money to a 'safe account' or face arrest. No police officer will ever do this. No government agency will ever ask you to pay a fine through a wire transfer. If you receive such a call, hang up and call the police station directly using the number from the official website, not the number on your caller ID. If you have already transferred the money, the money is likely gone, but the report is still necessary. The Anti-Scam Command tracks the patterns, and your report may help them identify the syndicate. The Victim Care Cadre is there for the aftermath. The shame of being scammed is a powerful emotion, and the volunteers are trained to tell you, without judgment, that it is not your fault.

The Investment Scam: Guaranteed Returns, Guaranteed Loss

The investment scam is the one that promises high returns. It is the top earner for the criminals, taking SGD 318.9 million in 2024. The platform is a fake website that shows you a profit, but the money has gone to the operator. The tell is the pressure: the promise of a bonus if you deposit more, the invitation to a 'VIP group' on Telegram, the WhatsApp message from a 'financial advisor' you have never met. If you have invested in a cryptocurrency scheme that is 'guaranteed' to return 10% a month, the only thing guaranteed is that you will lose your money. The police will take the report, but these scams are run from overseas, and the recovery rate is low. File the report, report the platform to ScamShield, and warn others. You did not find a secret investment the banks do not want you to know about. You found a criminal who knows exactly how to play on greed. The moment you hear 'guaranteed', you are talking to a fraudster, and the call is being recorded for their benefit, not yours.

The Love Scam: The Heartbreak Before the Bank Run

The love scam breaks your heart before it breaks your bank account. The operator spends weeks, sometimes months, building a relationship with you, and then they ask for money to buy a plane ticket to visit you, or to pay a fine, or to release a package held at customs. In 2024, the love scam was a significant typology, and the emotional damage is often worse than the financial damage. If you have sent money to someone you have never met in person, the police will take the report, but the criminal is likely a 'keyboard artist' who works for a syndicate. The photos they sent you are of someone else. The crime is not your fault. The Anti-Scam Command has a dedicated team for this typology. The Victim Care Cadre is especially important here, because the grief of a love scam is real, and you need support, not a lecture. Do not go back to the 'person' and ask for your money back. They will have a story, and they will try to get more. Block them, report them, and talk to a friend who will not say 'I told you so'.

The Job Scam: Desperation Is the Bait

The job scam targets the unemployed and the desperate. It is a growing problem, with 9,030 cases and SGD 157.1 million lost in 2024. The operator offers you a job as a 'customer service officer' or 'data entry assistant'. The job requires you to pay for training, or to buy a phone, or to open a bank account for 'processing salary'. The job does not exist. If you have opened a bank account for them, you are now a money mule, and your account will be frozen by the Anti-Scam Command. If you have already done this, do not wait for the police to knock on your door. Go to them first, and tell them what happened. You may not get your money back, but you will avoid a criminal record. The job scam feels the most unfair, because you were just trying to make a living, and the criminal read that desperation and used it against you. The Singapore Police Force publishes the current scams on their website. The substance of the job scam has not changed, but the language has. The operator's English is now fluent and the interviews are conducted over WhatsApp.

The window of opportunity to recover money from a Singapore bank transfer is measured in hours, not days. The 2024 Anti-Scam Command freezing of over 22,000 accounts and recovery of over SGD 180 million is the specific ceiling of what the system can do, not a promise that it will do it for you.