Setting Up ScamShield and Other Anti-Scam Tools to Block Scam Calls and SMS in Singapore

ScamShield is a two-part system, and the app is only half of it. The other half is a habit: reporting the scams that get through so the Singapore Police Force can block them for the next person. The app has filtered more than 50 million scam SMS and blocked over 100,000 scam calls as of September 2025, but those figures only grow if you use the in-app report button every single time a scam message lands in your junk folder. This guide walks you through setup on both iOS and Android, what to do the moment a scam call is in progress, and the real-world limits of every tool. No blocking app catches everything.

The Urgent Step: A Scam Call or SMS Is Happening Now

If a scam call or SMS is in progress right now, hang up or delete the message. Do not press any numbers. Do not reply. Do not click any link. If you have already given away money or banking details, call the ScamShield helpline at 1799 immediately. That is the National Crime Prevention Council anti-scam helpline, operated in partnership with the Singapore Police Force. If the scam involved a transfer from a Singapore bank, call your bank immediately as well; the SPF Anti-Scam Command protocol allows banks and the police to freeze accounts if they are alerted quickly. The Anti-Scam Command, formed in March 2022, recovered over S$100 million in scam losses in 2024 alone. That recovery rate drops sharply the longer you wait. After you have called the helpline, report the incident through the SPF online portal at police.gov.sg/i-witness, the official channel for non-urgent scam reporting. Do not rely on the app for urgent help; the app is for blocking and reporting, not for talking to a human.

ScamShield App Setup: iOS and Android Walkthrough

The app is free, developed by Open Government Products (OGP) under GovTech Singapore, and maintained by the SPF. Get it from the Apple App Store or Google Play Store. Search for “ScamShield” and download the app published by “Government Technology Agency”. Do not download any app with a similar name from a third-party source; copycats exist. After installation, open the app and allow the requested permissions: access to calls, SMS, and contacts. The app needs these to filter calls and SMS. It does not collect personal data; all call and SMS filtering happens on-device. No call audio or call data is ever sent to any server. The app's source code is open source on GitHub under Open Government Products, so security researchers can audit it. Almost no commercial anti-scam app can make that claim.

For scam call blocking, the app checks incoming calls against a blocklist maintained by the Singapore Police Force. If a call appears on that list, the app blocks it automatically. For SMS filtering, the app uses an on-device algorithm that moves SMS from non-contact senders into a junk folder rather than deleting them. This distinction matters: check the junk folder periodically. The algorithm may occasionally filter a legitimate message. To report a scam, open the app, tap the report button, select the call or message, and submit. The report goes directly to the Singapore Police Force, which uses the data to update the blocklist, often within days. This is the habit part: every time you report a new scam, you strengthen the blocklist that protects the next person.

ScamShield AI Upgrade: What It Detects and How It Works

In 2025, the ScamShield app received an AI upgrade. The new version uses an on-device AI model that analyses call audio in real-time to detect scam indicators without recording the conversation. It also provides proactive scam alerts based on the Singapore Police Force's scam reports and verified scam patterns. The AI upgrade expanded the types of scams it can detect: e-commerce scams, phishing scams, impersonation scams, investment scams, and job scams. The app now covers the full SPF scam typology framework, not just phone call scams. The upgrade also enables a real-time pop-up warning during a suspected scam call. The warning appears on the screen while the call is in progress, giving you a chance to hang up before you say anything sensitive. The AI model runs entirely on-device. There is no latency and no privacy risk; your conversation is never transmitted anywhere.

ScamShield vs Antivirus: What Each One Actually Does

A common confusion is thinking that ScamShield and security software are interchangeable. They are not. ScamShield blocks scam calls and SMS using the SPF's known-scam database and on-device filtering. Security software, like Symantec, McAfee, or the built-in Windows Defender, detects and removes malware, which is malicious software that may be installed on your device. ScamShield does not detect malware, and your security suite does not block scam calls. If a scammer calls you and convinces you to install a remote-access app, ScamShield will not stop it; the call is from a human, not a known scam number. Your security software will not stop the call either, though it might detect the remote-access app before you install it. Use both: ScamShield for calls and SMS, security software for malicious apps and websites. Do not assume one protects you from the other's category of threat.

Anti-Scam Tool Accuracy: What the Claimed Figures Actually Mean

The Singapore Police Force publishes impressive accuracy figures for its anti-scam tools, but you must understand what these numbers do and do not measure. As of September 2025, ScamShield has received more than 200,000 scam reports, blocked over 100,000 scam calls, and filtered over 50 million scam SMS. The SPF reports a true positive rate for scam detection of over 95% for calls and over 99% for SMS filtering. These are the claimed tool accuracy figures. The real-world limitation: these numbers describe the calls and SMS that the algorithm flagged and the user reported. They do not measure the scams that get through because scammers change tactics faster than the blocklist updates. A scammer can spoof a legitimate number not yet on the blocklist, or use a new variant the on-device AI model has not been trained on. The accuracy figure is a lower bound of the tool's true performance and an upper bound of what it can catch. Apply your own judgment to every unsolicited call and message, even if ScamShield lets it through.

ScamShield Bot on WhatsApp: The 24-Hour Alternative for Checking Messages

If you receive a suspicious message, link, or phone number and want to check it before clicking, the ScamShield Bot on WhatsApp is your fastest option. Save the number 8800-668-6688 in your contacts, open WhatsApp, and start a chat with that number. The bot is an official service by the National Crime Prevention Council and the SPF. Send a message and the bot tells you whether the content appears in the SPF's database of reported scams. This is a check-before-you-click tool, not a blocking tool. Use it for the common scenario where a friend forwards you a message that says “Your SingPass account has been compromised, click this link”. Instead of clicking, forward the message to the bot and wait for the response. The response is instant and tells you if the link or number has been reported as a scam. The bot is always available. It is the tool for the 1am failure case, when you are not sure if the message you just received is legitimate.

Scam Call Blocking: Other Options and the Do Not Call Registry

ScamShield is not the only tool for scam call blocking in Singapore, though it is the only one directly operated by the government. Most Singapore mobile carriers, including Singtel, StarHub, and M1, offer free network-level scam call blocking as a default feature. These carrier-based tools block calls before they reach your phone, using a combination of the SPF blocklist and their own analytics. Check your carrier's app or website to enable this feature. The Personal Data Protection Commission also maintains the Do Not Call (DNC) Registry. Registering your phone number stops telemarketing calls, SMS, and faxes. The DNC Registry does not block scam calls; it only stops legitimate telemarketers. Scammers do not respect the DNC Registry, but registering is still worthwhile. It reduces the number of legitimate marketing calls you receive, which makes it easier to spot the scam calls when they do arrive. The DNC registry is at dnc.pdpc.gov.sg and registration is free.

For business landlines or VoIP numbers, check whether your provider offers a scam call blocking feature. Some providers require you to opt in; others are opt-out. If you are an older adult or not technical, ask a younger family member or your mobile carrier's customer service to enable the feature for you. The tools are only useful if they are turned on.

Anti-Scam Tool Limitations: What the Tools Cannot Do

Every anti-scam tool has specific limits you must understand. First, ScamShield filters SMS only from non-contact senders. If you receive a scam message from a contact, meaning someone you have contacted before, the app will not filter it. It assumes you know that person. Second, ScamShield does not filter calls from numbers in your contacts. If a scammer spoofs a number that is in your contacts, the app will not block it. Third, the app requires the “contacts” permission to function. You must weigh the privacy cost of granting that access, even though the data stays on-device. Fourth, the SPF publishes new scam statistics and dollar losses annually. These figures change; the S$204.5 million investment scam loss figure for 2023 is the most recent complete-year figure. The 2024 or 2025 annual report may show different numbers. Fifth, the app's AI upgrade does not cover every scam type. It covers the six SPF typologies, but scammers invent new variants regularly.

If you receive a scam call while travelling overseas, the app may not recognise the number. The SPF blocklist is weighted toward Singapore numbers. In this case, use the ScamShield Bot to check the number, or do not answer calls from unknown numbers. If a scammer contacts you on WhatsApp or Telegram rather than by call or SMS, ScamShield will not filter it. Those platforms are encrypted and the app cannot see the message content. For those platforms, rely on the ScamShield Bot, or on the “report” function within WhatsApp or Telegram. That flags the account to the platform for terms-of-service violations, not to the police.

Phishing, Spoofed SMS, and Impersonation Scams: The Patterns to Recognise

The most common scam patterns in Singapore are phishing, spoofed SMS, and impersonation scams. Phishing is the broader category: any fraudulent attempt to harvest personal or banking information. It can arrive via SMS, email, WhatsApp, or a phone call. A spoofed SMS is one specific delivery mechanism where the sender ID is faked to appear as a legitimate organisation, such as “DBS” or “SingPass”. All spoofed SMS used for fraud is a form of phishing. Not all phishing is SMS. Impersonation scams are a third category, where the scammer pretends to be a government official, a bank officer, a police officer, or a family member in distress. The common indicators across all three: unsolicited contact, a request for personal or banking details, urgent or threatening language, an offer too good to be true, or a request to transfer money or install software. The Singapore Police Force publishes a scam typology framework listing job scams, phishing scams, e-commerce scams, investment scams, impersonation scams, and love scams as the main categories. Recognising the pattern is the most reliable defence. It works even when the specific message is new.

The “I Can ACT Against Scams” campaign by the National Crime Prevention Council teaches a simple approach: Add, Check, and Tell. Add the ScamShield app and the ScamShield Bot. Check if the message or number is a scam by using the bot or the SPF website. Tell the authorities and your family about the scam so it spreads less. This campaign is embedded in Singapore's school curriculum and public libraries. It does not depend on any specific technology, which means it remains effective even as tools change.

User Burden, Privacy Preservation, and Language Coverage: What to Expect

Every anti-scam tool imposes some level of user burden, the number of steps you must take to verify a claim or block a call. ScamShield's burden is low for blocking: set it up once and it works automatically. The burden is higher for reporting a new scam. You must open the app, tap the report button, and confirm. The ScamShield Bot has a higher burden; you must copy and paste the message or number into the chat. Security software can be demanding, with frequent update prompts and scan schedules, but it also runs automatically. The least burdensome tool is carrier-level call blocking. It requires no action from you at all.

Privacy preservation is the next consideration. ScamShield does not collect personal data. Call and SMS filtering happens entirely on-device. This is a privacy-preserving design rare among commercial anti-scam apps, many of which upload your call logs to their servers. However, ScamShield requires access to your contacts. That is a privacy trade-off, even if the data stays on your phone. The ScamShield Bot sends the message content to the chatbot server, so you are revealing the content of the message to a third party, though not your contacts. The language coverage of all these tools is limited. The ScamShield app and bot operate in English. The SPF website offers materials in all four official languages: English, Mandarin, Malay, Tamil. The bot responses are in English only. If you are an older adult more comfortable in another language, do not rely on the bot. Ask a bilingual family member to help you set up a family-wide code phrase for verifying callers.

Update Frequency and the Digital Footprint of Scam Reporting

The ScamShield app's update frequency is regular. The SPF updates the blocklist with new scam signatures and numbers as reports come in, sometimes daily. The app itself receives feature updates a few times a year, including the AI upgrade that rolled out in 2025. The SPF publishes scam statistics and dollar losses annually, typically in February for the previous year, and these figures are revised at the end of the following year. As of this writing, the 2023 figures are the most recent complete-year data, with investment scams leading at S$204.5 million in losses. The 2024 annual report, when released, may show different numbers.

When you report a scam through the ScamShield app, you leave a digital footprint: a record of the report tied to your phone number and potentially your IP address. This is a necessary trade-off for the police to follow up on the report. Know that the report is a permanent record. If you are reporting a scam you almost fell for but did not, the SPF will record it as an attempted scam, not a completed loss. The digital footprint you leave is a small price for the protection it buys the next person, but it is worth knowing it exists.

The Inter-Ministry Committee on Scams and Where to Go for Help

The ScamShield app and the SPF Anti-Scam Command sit inside a larger structure: the Inter-Ministry Committee on Scams (IMCS). This committee includes the Ministry of Home Affairs, the Ministry of Digital Development and Information, the Ministry of Social and Family Development, the Monetary Authority of Singapore, and the Singapore Police Force. It coordinates the national response to scams. The IMCS pushed for carrier-level call blocking to be default-on for all mobile lines, and it funds the ScamShield app's development and maintenance. Understanding this structure helps you know who to hold accountable. If you have feedback about ScamShield, contact the SPF. If you have feedback about telemarketing calls, contact the PDPC. If you have feedback about a bank's response to a scam, contact the MAS.

If you have lost money to a scam and the bank refuses to refund you, report it to the SPF Anti-Scam Command via the i-Witness portal, then escalate to the MAS if you believe the bank did not follow the dispute-resolution process. The SCAMShield helpline at 1799 is the first call, but it is not a replacement for the formal investigation process. The Anti-Scam Command's functions are scam investigation, intervention, enforcement, and public education, in that order of priority. The education piece is why they publish the annual scam typology and loss figures, and why they partner with the National Crime Prevention Council on campaigns like “I Can ACT Against Scams”.

What to Do When the Normal Route Is Closed: The 1am Failure Case

It is 1am. You have just received a message that appears to be from your bank, telling you your account has been locked due to suspicious activity. The message contains a link. The ScamShield app silently filtered it into your junk folder, but you only saw it because you happened to check. The ScamShield hotline at1799 is closed; it operates during business hours only. The ScamShield Bot on WhatsApp is available, but you are not sure if the message is a scam. Here is what to do. First, do not click the link. Second, send the message to the ScamShield Bot. If the bot says it is a scam, you are done. Report it through the app in the morning and go back to sleep. If the bot says it is not a scam, or if the bot is unresponsive, do not click the link. Instead, open your bank's official app or website by typing the URL directly into the browser. Do not use the link in the message, even if it looks legitimate. If you have the bank's app, log in there and check your account. If there is no issue, the message was almost certainly a phishing attempt. Call your bank's customer service line in the morning to report it. No legitimate bank, government agency, or police officer will ever ask you to install software, transfer money urgently, or provide a one-time password over the phone. That rule has never changed. Scammers cannot spoof it.

The Officialdom Halo Trap

A scammer can create a message that looks like it came from the Singapore Police Force, complete with the SPF logo, a .gov.sg-like email address, and formal language. This is the officialdom halo: the tendency to believe a message because it uses a government logo, official-sounding language, or a URL that mimics a government domain. The Singapore Police Force will never contact you by phone or SMS to ask for your banking details, to threaten arrest, or to request a transfer to a “police safe account”. No such account exists. If you receive such a call, hang up. To verify, call the SPF hotline at 1800-255-0000 or visit the police.gov.sg website directly by typing the address. Do not use the number or link in the message. The officialdom halo is why the SPF publishes the scam typology framework and why the National Crime Prevention Council runs the “I Can ACT Against Scams” campaign. The public learns to verify by checking the channel, not the logo.

General security software will not protect you from the officialdom halo. The scam is not a technical exploit; it is a social engineering exploit. The only defence is the habit of checking the channel. If a message is forwarded to you, the “forwarded as received” label on WhatsApp and similar indicators on other platforms are structural features that should trigger your suspicion, not your trust. A forwarded message from a friend is not a primary source. The friend may have received it from someone else, and so on. This is the verification bypass: sharing a claim with a comment like “is this true?” without waiting for an answer, thereby amplifying the claim before verification. Break this habit. If you are not going to verify it before forwarding, do not forward it at all.

Practical Costs and a Final Checklist

The ScamShield app costs nothing. The ScamShield Bot costs nothing. Carrier-level call blocking costs nothing. The DNC Registry costs nothing. The only cost is the time to set up the app, about10 minutes, and the ongoing habit of reporting scams. If you are travelling to Singapore, the same tools work, but you should also enable your home carrier's roaming call blocking. Do not rely on ScamShield to recognise overseas scam numbers. The app will filter SMS from non-contact senders regardless of the sender's country code, but the call blocklist is Singapore-centric. For a non-technical person, the most reliable defence is the ScamShield Bot. It works on WhatsApp, which most people already have installed, and it gives an instant verdict on any message, link, or number.

• Setup: Install ScamShield from the official app store, grant permissions, and enable carrier-level call blocking in your phone's settings.
• Verify: Save the ScamShield Bot number (8800-668-6688) and the SPF hotline (1800-255-0000) in your contacts.
• Report: After any scam call or SMS, report it through the ScamShield app or the ScamShield Bot within24 hours.
• Check: Before clicking any link or transferring money, run it past the ScamShield Bot.
• Teach: Share this habit with a family member or friend, especially an older relative.

This guide is for the traveller or resident who wants a specific, non-political explanation of how to set up and use Singapore's anti-scam tools. It is for the small-business owner who has been targeted by impersonation scams or phishing and wants to recognise the patterns before the next attempt. It is for the older adult who is comfortable with the basics but needs a step-by-step walkthrough. If you have lost money to a scam, call the1799 helpline immediately; if it is an emergency, call the police at999.

ScamShield requires the “contacts” permission to function. The privacy trade-off of granting that access is real, even though the data stays on-device. A more privacy-preserving approach is to use carrier-level call blocking, which requires no permission at all, but that will not filter your SMS.