ICA and China Official Impersonation Scams: 72 Cases and S$6.1 Million Lost

Direct Answer

An ICA impersonation scam begins with an unsolicited caller claiming that your identity or phone number is linked to a crime. The caller then transfers you to a fake official from China who demands money for an “investigation” or “bail”; genuine Singapore government officers will not ask you to transfer money, surrender valuables or take out a loan.

Introduction

The Singapore Police Force (SPF) warned on 14 August 2026 of a surge in government official impersonation scams involving people posing as officers from the Immigration & Checkpoints Authority (ICA) and authorities in China. Since January 2026, at least 72 cases had been reported, with losses of at least S$6.1 million.

The script is designed to make an ordinary administrative issue sound like a criminal emergency. A caller may know your name, mobile number or other personal details. They claim those details were used to spread false rumours, send scam messages or commit another offence. When you deny involvement, they offer to “transfer” your call to a supposed China official who can clear your name.

That transfer is part of the deception. The second caller is not an investigator, and the money requested is not bail, a security deposit or an official fee. It goes to an account or cash collector controlled by the scam network.

If you receive such a call, hang up. Contact ICA or the relevant agency using the number published on its official .gov.sg website, not a number supplied by the caller. If you are unsure, call the 24-hour ScamShield Helpline at 1799.

How This Scam Works in Singapore

The first caller usually claims to represent ICA. They may say your passport details, identity information or phone number have appeared in a criminal investigation. SPF’s advisory describes allegations such as spreading false rumours or transmitting scam messages. The caller speaks with authority and may quote personal information to make the claim sound credible.

The scam then moves through several stages:

1. An unexpected official-sounding call arrives. The displayed number may look local, but caller ID can be spoofed. A familiar prefix is not proof of identity.
2. The caller creates a legal threat. You are told that your details are connected to an offence and that failure to cooperate may lead to arrest, deportation, account restrictions or other consequences.
3. The call is handed to a second “agency”. The supposed ICA officer transfers you to a person claiming to be a police officer, prosecutor or other official in China. SPF states that Singapore government officials will not transfer calls to the Police or another government official in this manner.
4. The scammer isolates you. You may be told that the case is confidential and that speaking to family, colleagues, your bank or Singapore authorities would obstruct the investigation. Secrecy prevents someone else from challenging the story.
5. Money or valuables are demanded. The fake official asks for a transfer for “investigation or bail purposes”. Other government impersonation variants seek cryptocurrency, gold, luxury watches or loans from licensed moneylenders. SPF says Singapore government officials will never ask for these.
6. The payment route changes if you hesitate. You may be instructed to withdraw cash, hand it to a collector or leave valuables at a physical location. A courier or collector does not make the request legitimate.
7. Further demands follow. Once a victim pays, scammers may invent another fee or claim the first transfer failed to satisfy the investigation. Victims often realise the truth only when the callers disappear or when they independently contact the real agency.

The use of real personal data is particularly persuasive. That information could have come from public social media profiles, previous data leaks, compromised accounts or commercially available records. The Personal Data Protection Act (PDPA) sets obligations for organisations that handle personal data, but it cannot prevent criminals from repeating information they obtained elsewhere. Knowing your NRIC digits, address or employer does not prove that a caller represents ICA.

Some variants may also ask you to install an app, share your screen or reveal banking credentials. Do not comply. An unverified app can expose messages, one-time passwords and banking activity. Unauthorised access and misuse of computer systems may engage Singapore’s Computer Misuse Act, but the immediate priority for a target is to stop contact and protect accounts.

Real-World Impact and Statistics

SPF’s August 2026 advisory gives the clearest measure of this specific variant: at least 72 cases and S$6.1 million lost since January 2026. That works out to more than S$84,000 per reported case on a simple average, although individual losses vary and an average does not describe what every victim lost.

The wider scam burden remains substantial. ScamShield’s Annual Scams and Cybercrime Brief reported 37,308 scam cases in 2025 and total losses of about S$913.1 million. Cases fell 27.6 per cent from the previous year and losses fell 17.9 per cent, yet the sums still show why a small number of high-loss impersonation cases demand attention.

Government impersonation scams can produce severe losses because the scammer does not ask only for a small test payment. The alleged criminal case gives them a reason to demand savings, borrowed money or physical assets. A victim who believes they are protecting their freedom or immigration status may keep paying after a normal purchase scam would have raised suspicion.

The target group is not limited to older people. The ICA-and-China script may be especially convincing to Chinese-speaking residents, international students, work pass holders, new citizens or people with family and business ties to China. However, anyone can be targeted. Scammers adapt the language, agency and accusation to the person they reach.

Businesses should also treat the pattern as a staff security issue. An employee who receives a threatening call during work may disclose company information, install remote-access software on a work device or make an urgent transfer. SMEs should give staff a clear route to pause unusual requests and contact a manager or IT lead without fear of blame.

How to Protect Yourself

Use a verification routine that does not depend on how confident the caller sounds.

• End the call and verify separately. Find the agency’s contact details on an official .gov.sg website. Do not call a number in a message, follow a link supplied by the caller or accept a “transfer”.
• Remember what officials will not request. SPF says Singapore government officials, including ICA officers, will not ask you to transfer or hand over money, luxury watches, gold or cryptocurrency; obtain loans from licensed moneylenders; or transfer your call to the Police or another government official.
• Do not surrender cash or valuables. Never leave money at a nominated location or pass it to a courier for an investigation.
• Protect banking access. Do not disclose your PIN, password, card security code, one-time password or Singpass credentials. Set lower transaction limits and enable the strongest authentication offered by your bank.
• Use bank safety controls. MAS works with financial institutions on anti-scam safeguards, but customers should still activate transaction alerts and learn where their bank’s emergency “kill switch” or account-locking feature is located before an incident.
• Install ScamShield. The app can help filter known scam calls and messages. It cannot identify every new number, so continue to verify claims independently.
• Keep devices updated. CSA Singapore advises users and organisations to apply security updates promptly. Updates reduce the chance that malicious software can exploit a known weakness, although they do not stop social engineering by themselves.
• Limit publicly visible personal details. Review what strangers can see on social media, including your employer, travel plans, family connections and phone number. Less context gives scammers fewer facts to build into a convincing script.
• Create an SME payment pause. Require a second person to approve unusual transfers, changes to payee details or payments supposedly connected to an investigation. No legitimate agency should object to independent verification.

A useful response to pressure is: “I will contact the agency through its official website.” Then end the call. You do not need to argue with the caller or prove that you are innocent.

What to Do If You Are Targeted

If you have not paid or disclosed credentials, stop contact, block the number and save evidence. Take screenshots of messages, note the phone numbers, record the claimed names and agencies, and write down any account details or payment instructions. Submit suspicious messages or numbers through ScamShield where available.

If you transferred money, act immediately:

1. Call your bank’s fraud hotline now. Ask the bank to freeze affected accounts, cards or digital banking access and attempt to stop or trace the transfer. Use the number on the bank’s official website or the back of your card.
2. Call ScamShield at 1799. The helpline is available 24 hours a day and can guide you on the next steps.
3. Make a police report. Provide transaction receipts, receiving account details, phone numbers, messages and a timeline. Do not delete the conversation even if it is embarrassing or distressing.
4. Secure compromised accounts. Change banking, email and messaging passwords from a clean device. Revoke unknown sessions, enable multi-factor authentication and contact Singpass support if those credentials may have been exposed.
5. Remove suspicious apps safely. Disconnect the affected device from networks and seek help from your bank or a trusted technical professional. If a malicious app had accessibility or screen-sharing permissions, changing a password on the same device may not be enough.
6. Warn your workplace if company information was exposed. Your IT or security team may need to reset credentials, review logs and alert colleagues to follow-up impersonation attempts.

Do not pay a person who later claims they can recover your money for an upfront fee. Recovery scammers monitor public complaints and approach victims when they are most anxious.

Common Mistakes to Avoid

Trusting caller ID. A Singapore-looking number or official agency name on screen can be spoofed. Verify through a separate channel.

Assuming a caller must be genuine because they know personal details. Personal information is not an authentication method. Ask yourself whether you initiated the contact and whether the request matches published government practice.

Following instructions to keep the case secret. Real investigations do not require you to hide a payment from your family, bank or lawyer. Secrecy is a control tactic.

Taking a loan to “prove” cooperation. SPF expressly warns that government officials will not ask you to obtain loans from licensed moneylenders. A licensed lender’s involvement does not make the caller’s demand lawful.

Waiting until the caller misses a detail. Skilled scammers may have a polished script. You do not need to detect a factual mistake; the request for money, valuables, banking credentials or secrecy is enough to end the call.

Deleting evidence after blocking the number. Preserve messages, transaction information and app details for your bank and SPF.

FAQ

Will ICA call me about a criminal investigation?

ICA may contact members of the public for legitimate administrative matters, but an unexpected call demanding money, valuables, loans, banking credentials or secrecy is not a legitimate process. End the call and contact ICA through its official website to verify.

Can ICA transfer my call directly to the Singapore Police or an official in China?

SPF states that Singapore government officials will not transfer your call to the Police or another government official in the manner used by these scams. Treat such a transfer as a major warning sign.

What if the caller knows my name, passport details or NRIC information?

That knowledge does not authenticate the caller. Personal data can come from leaks, compromised accounts, public profiles or earlier scam interactions. Do not confirm additional details; hang up and verify independently.

Is there any official “safe account” for an investigation?

No legitimate Singapore agency will ask you to move money to a “safe account” controlled by an investigator. Banks and government agencies do not need you to transfer savings to protect them.

What should I do if I handed cash or valuables to a collector?

Call the Police and ScamShield at 1799 immediately. Give officers the collection time, location, description of the collector, vehicle details, messages and any camera footage. Also alert your bank if any account information was shared.

Does ScamShield block every government impersonation call?

No. ScamShield can filter known scam calls and messages, but scammers change numbers and methods. Use it as one layer of protection, then independently verify every unexpected request involving money or sensitive information.

Can my bank recover a transfer made to a scammer?

Recovery is not guaranteed. Contacting the bank quickly gives it the best opportunity to freeze an affected account or coordinate with other institutions. Do not wait for the scammer to respond or promise a refund.

Conclusion

The ICA-and-China impersonation scam succeeds by turning stolen personal context into an urgent accusation. The decisive warning is not the caller’s accent, number or knowledge of you. It is the demand that you transfer money, surrender valuables, borrow funds, reveal credentials or keep the supposed case secret.

End the call and verify through an official .gov.sg contact. If money or account access may be at risk, call your bank immediately, contact the 24-hour ScamShield Helpline at 1799 and make a police report. A genuine official process will survive independent verification; a scammer’s story usually will not.