At least 23 Work Permit holders in Singapore have reported that their Singpass accounts were locked after they were allegedly offered S$80 in exchange for access to them.
Three people, a 25-year-old man and two women aged 29 and 38, were arrested over their suspected involvement in obtaining the workers’ Singpass login credentials.
According to a police statement, the compromised Singpass accounts were subsequently used to register more than 30 accounts with cross-border payment app LiquidPay and more than 1,200 phone lines.
Some Workers Were Told Their Singpass Would Be Used for NDP Tickets
The cases have been reported since early August 2026.
Some of the Work Permit holders were allegedly told that their Singpass accounts would be used to purchase National Day Parade tickets at a discounted price of S$500.
There was one rather major problem with that explanation. NDP tickets are not sold.
After agreeing to the arrangement, the workers were allegedly instructed to meet people at locations such as MRT stations, HDB estates and construction sites.
Some met the perpetrators there, while others were driven to nearby locations.
The workers’ Work Permits were then allegedly scanned, and their Singpass passwords obtained.
More Than 1,200 Phone Lines Allegedly Registered
According to the police statement cited by ST, the Singpass credentials obtained through the scheme were used to register more than 30 LiquidPay accounts and over 1,200 phone lines without the affected workers’ knowledge.
Further investigations also identified another 136 foreign workers whose Singpass accounts were linked to the same activity.
The affected LiquidPay accounts have since been frozen, while the fraudulently registered phone lines have been terminated.
On 5 and 6 August, officers from the police Cyber Command and Clementi Police Division conducted an operation with support from GovTech’s Singpass Trust & Safety team.
The operation led to the arrests of the three suspects.
They were set to be charged in court on 8 August with offences relating to obtaining another person’s Singpass credentials.
Giving Someone Your Singpass Details Can Also Be an Offence
The investigation does not only involve those suspected of obtaining the credentials.
Police said investigations are also ongoing into Work Permit holders who voluntarily handed over their Singpass credentials.
Under the Computer Misuse Act, offences involving the disclosure of credentials for Singapore’s national digital identity service can carry a jail term of up to three years, a fine of up to S$10,000, or both.
This is because a Singpass account is not simply a convenient way to log in to government websites.
Police have previously warned that Singpass credentials can be abused to open bank accounts, e-wallets, cryptocurrency accounts and mobile phone lines, which can subsequently be used for scams and other illegal activities.
In a separate joint statement in April 2026, the police and Ministry of Manpower warned people against accepting offers of quick cash in exchange for Singpass accounts or credentials.
What to Do If Your Singpass Account Has Been Compromised
Singpass advises anyone who suspects that their account has been compromised to immediately reset their password and Singpass ID, review their transaction history for unfamiliar activity, and reinstall the Singpass app on their trusted device.
An account can also be suspended by calling the Singpass Helpdesk at +65 6335 3533 and following the self-suspension instructions, which remain available around the clock.
Those who have suffered a monetary loss should contact their bank immediately and file a police report.
Police have also advised people to check how many post-paid SIM cards are registered under their names through the SIMCardHowMany self-help service.
Anyone who notices phone lines they do not recognise should inform the relevant telco and the police.
