ID theft is when someone gets hold of your personal data, such as your NRIC number, Singpass login, or bank and card details, and uses it to pretend to be you. They drain accounts, take out loans, open new credit lines, or run scams in your name. In Singapore it usually shows up as fraud rather than the full life-takeover you see in American films. Scam victims here lost S$913.1 million in 2025 (per the Singapore Police Force), and phishing, which is the main delivery method for stolen identity data, sat in the top five scam types by loss. The good news is that most of the damage is preventable with a few specific moves: locking your Singpass, watching your credit file, and knowing the 24-hour numbers to call the moment something looks wrong.
Identity theft is the unauthorised collection and use of your personal data to impersonate you, almost always for financial gain. The thief does not need your physical wallet. They need the identifiers that prove you are you to a bank, a lender, a telco, or a government service: your full name and NRIC number, your date of birth, your Singpass credentials, your card numbers, or your one-time passwords (OTPs).
Once they have enough of those pieces, they can act as you. That is the difference between losing money and losing your identity. A one-off scam takes a single payment from you. Identity theft hands the criminal a key they can keep using, against banks and services that genuinely believe they are dealing with you.
Singapore makes this both easier and harder for thieves than other countries. Easier, because so much sits behind one login: your Singpass account can reach your CPF, tax records, HDB matters, and bank account opening. Harder, because that same centralisation means there are clear, fast ways to shut an attacker out, which most people never learn until they need them.
Pure identity theft is not reported as its own line in the national figures. It hides inside the scam and cybercrime numbers, because stolen identity data is the raw material for most of those crimes. The 2025 Annual Scam and Cybercrime Brief from the Singapore Police Force gives the clearest picture of the scale.
There were 41,974 scam cases in 2025, down 24.8 per cent from 2024. Total losses fell to S$913.1 million, from about S$1.1 billion the year before. Encouraging at the headline, but the median loss per case actually rose to S$1,644 from S$1,389, so the average victim lost more even as fewer people were hit. Government official impersonation scams, which run almost entirely on stolen or faked identity details, jumped 60.5 per cent to about S$242.9 million.
Phishing, the main way criminals harvest the login and card details behind identity theft, stayed in the top five scam types by loss. Seniors aged 65 and above made up around 15 per cent of cases but averaged S$37,053 lost per victim, far above the median, because account takeover hits hardest when someone has savings to drain.
| Measure | 2024 | 2025 | Change |
|---|---|---|---|
| Total scam cases | 55,810 | 41,974 | Down 24.8% |
| Total amount lost | ~S$1.1 billion | S$913.1 million | Down ~18% |
| Median loss per case | S$1,389 | S$1,644 | Up ~18% |
| Govt official impersonation losses | ~S$151 million | ~S$242.9 million | Up 60.5% |
Identity theft is rarely one dramatic break-in. It is a chain: the criminal collects a few data points, combines them, and then uses them where a single weak check lets them through. Knowing the collection methods tells you exactly where to put up walls.
Most of it starts online. Phishing sites and messages copy your bank, IRAS, or a courier and ask you to key in your login, card number, or OTP. Malware on an Android phone can read your SMS OTPs and screen. Public data breaches leak NRIC numbers and contact details that then get matched against you. Lower-tech routes still work too: a photo of your NRIC sent over chat, a discarded statement, or an over-shared social media profile that answers your security questions for free.
Not all identity theft looks the same, and the type decides how you spot it and how you fix it. These are the forms that show up most in Singapore.
The thief gets into an account you already own, usually a bank, e-wallet, or Singpass, by stealing your password and OTP through phishing or malware. Then they change your contact details so the alerts go to them, and move your money out. This is the fastest and most expensive form because the account is already funded.
Using your NRIC and personal details, the criminal opens new accounts, applies for credit cards, or takes out loans in your name. You only find out when a debt or rejection appears on your credit file. This is why watching your credit report matters, since it is often the first place a stranger's borrowing shows up.
Here the criminal blends real data, often a genuine NRIC number, with fake details to build a part-real, part-invented identity that passes some checks. It is harder to detect because no single real person is fully impersonated, and it is a growing problem as more verification moves online.
The thief poses as you to a telco or service to redirect your number, intercept OTPs, or convince a third party they are dealing with you. Government official impersonation scams, the fastest-growing loss category in 2025, lean on this by spoofing an authority and pressuring you to hand over the rest of your details.
Identity theft is quiet at first. The earlier you catch it, the less the thief can do, so treat any of these as a reason to check immediately rather than wait.
Prevention is mostly about cutting off the data supply and adding friction where it counts. None of this is expensive, and most of it is free. Treat it the same way you would an emergency fund, as basic financial hygiene you set up once. If you do not yet have a cash buffer for the day something goes wrong, our savings goal calculator is a sensible first stop.
The single most useful move is protecting your Singpass and your OTPs, because those two open almost everything else.
Your credit report is where new-account identity theft usually surfaces first, because every loan or credit card application in your name leaves a mark there. Credit Bureau Singapore (CBS) is the main consumer credit bureau, and the report is your cheapest monitoring tool.
You are entitled to a free credit report within 30 days of a credit application (whether approved or rejected) from a CBS member bank. Outside that window, you can self-check any time by logging in with Singpass and paying a small fee, listed by CBS at S$8.00 before GST as of June 2026. A loan or card you never applied for appearing on that report is one of the clearest signals that someone is borrowing as you. If you want to understand what the report shows and how the score works first, start with our Singapore credit score guide.
If you confirm fraud, CBS can place a credit freeze on your file. A freeze blocks lenders from pulling your report, which stops a thief opening new credit in your name. It is free, does not affect your credit score, and you lift it when you genuinely need to borrow.
Speed decides how much you lose. The moment you suspect identity theft, work down this list in order. The goal is to cut off access first, then create the paper trail you will need for the bank and the police.
Do not waste time being embarrassed. The faster you call, the more the Anti-Scam Command can sometimes freeze before it leaves the country. In 2025 the police recovered over S$117 million in non-cryptocurrency scam proceeds, and early reporting is what makes that possible.
Standalone identity-theft monitoring services and add-on insurance exist in Singapore, often bundled with cyber-insurance or sold by antivirus brands. Before paying, be clear on what they actually do, because most of the protective power is already free.
These products mainly monitor and alert. They watch for your data on breach lists or your credit file changing, and some bundle reimbursement for certain fraud losses or help with the clean-up paperwork. What they cannot do is stop a determined thief who already has your OTP, and they do not replace a bank's own fraud protection or your right to a free CBS credit freeze.
For most people the free stack does the heavy lifting: ScamShield, Singpass suspension, your bank's Money Lock and alerts, and periodic credit checks. Consider a paid service only if you have already had a breach, hold high-value assets that make you a target, or simply want the monitoring and reimbursement done for you. If you are weighing the cost against your overall plan, sanity-check it against your wider monthly budget rather than buying on fear.
A scam usually takes a single payment from you through deception. Identity theft goes further: the criminal steals the data that proves who you are, such as your NRIC number, Singpass login, or card details, then uses it repeatedly to impersonate you to banks and services. Identity theft is often how a scam starts, and it can keep causing damage long after the first loss.
Call your bank's 24-hour hotline first to freeze accounts, then lodge a police report through the Singapore Police Force e-Services online (or I-Witness if you have no Singpass). If you are unsure whether you have been scammed, call the 24/7 ScamShield Helpline on 1799. Also suspend your Singpass and contact Credit Bureau Singapore to freeze your credit file.
Your NRIC number alone is usually not enough, because banks require additional verification such as Singpass or Myinfo. But combined with your Singpass login or other stolen details, a criminal can open accounts or apply for loans in your name. The police flagged fraudulently modified identity cards being used to open accounts in late 2025, so guard both your NRIC and your Singpass closely.
No. A self-check with Credit Bureau Singapore is a soft enquiry and does not affect your score, unlike a lender's hard enquiry when you apply for credit. You get a free report within 30 days of a credit application from a member bank, or you can self-check any time via Singpass for S$8.00 before GST, as listed by CBS as of June 2026.
A credit freeze tells Credit Bureau Singapore to block lenders from pulling your credit report, which stops a thief opening new credit in your name. It is free, does not lower your credit score, and you can lift it when you genuinely need to borrow. Set one up if you have confirmed fraud or a data breach affecting you; otherwise regular monitoring is usually enough.
The Singapore Police Force reported 41,974 scam cases in 2025 with total losses of S$913.1 million, down from about S$1.1 billion in 2024, but the median loss per case rose to S$1,644. Impersonation and phishing, which run on stolen identity data, were among the largest loss categories, and government official impersonation losses alone rose 60.5 per cent to about S$242.9 million.
This is general financial information for Singapore, not personal financial advice. Figures change — verify current rates against the official sources above before acting. See our full disclaimer.