An offer of $10 or $20 for each mobile line can look like easy money. The person recruiting you may call it a promotion, a survey exercise or a harmless way to help someone who cannot open an account. What they need is not the plastic card. They need a Singapore-registered phone number tied to your identity.
The Singapore Police Force (SPF) put the risk in sharp focus on 24 August 2026. Following an island-wide operation conducted from 4 to 21 August, Police arrested 20 people and began investigating another 42 over postpaid SIM cards allegedly registered for illicit purposes. The arrested group comprised 15 men and five women aged 16 to 33. Another 42 people aged 16 to 75 were assisting with investigations.
Preliminary investigations found that subscribers were allegedly offered $10 to $20 per registered card. They were instructed to buy SIM cards in bulk from different retailers and hand between 10 and 33 cards to a syndicate courier. Those local numbers could then be used for scams, unlicensed moneylending, vice and other crimes.
The practical warning is simple: do not register, sell, lend or transfer a SIM card for another person's use when you do not control the line and do not know its purpose. Your name remains connected to it, even after the card leaves your hands.
How This Scam Works in Singapore
SIM card mule recruitment usually begins with an apparently low-risk request. A recruiter may approach a student, gig worker, job seeker or cash-strapped adult through Telegram, WhatsApp, social media, a messaging group or a personal contact. The pitch focuses on speed and convenience: visit several mobile shops, use your NRIC or Singpass to register postpaid lines, then surrender the cards for immediate cash.
Some recruiters dress the arrangement up as legitimate work. They may claim to be testing telco promotions, conducting market research, reselling mobile plans or helping foreign customers. Others tell recruits that Singapore residents are allowed to own multiple SIM cards, so there can be no legal problem. That argument misses the point. The offence depends on how the registered card is provided and used, not merely on whether a person may legitimately subscribe to more than one line.
Once a syndicate receives a locally registered number, it gains a useful layer of credibility and separation. The number can be used to contact potential victims, create messaging accounts, coordinate cash collection or support other unlawful activity. A local number may make a call or message feel more familiar, although a Singapore number is never proof that the sender is physically here or legitimate.
The subscriber becomes the first identifiable person in the chain. Telco records show whose identity was used during registration. Investigators may also examine shop records, device information, payment trails, messages with the recruiter and the circumstances in which the cards changed hands. Deleting a chat or claiming not to have used the number does not erase the registration trail.
Recruiters may also ask for Singpass access, screenshots of identity documents, one-time passwords or bank details. That creates separate dangers. Singpass credentials can be abused to access services or make further applications, while unauthorised access and disclosure of access codes may engage the Computer Misuse Act. Personal data copied during the process can support identity fraud long after the original handover.
For SMEs, the same risk can arise through staff-managed corporate or mobile plans. A weak inventory process may leave unused lines active, allow former employees to retain SIMs or let a dishonest insider divert cards. Organisations subject to the Personal Data Protection Act should treat subscriber information, identity records and mobile account credentials as sensitive operational data. The PDPA does not turn a criminal SIM-mule scheme into a data-protection issue alone, but poor controls can increase both regulatory and fraud exposure.
Real-World Impact and Statistics
The August 2026 enforcement action shows how little the initial reward can be compared with the consequences. According to the SPF release, the suspected subscribers were offered only $10 to $20 per card. Yet they allegedly handed over batches of 10 to 33 registered cards, giving syndicates multiple local communication channels.
Under section 39B of the Miscellaneous Offences (Public Order and Nuisance) Act 1906, knowingly providing a registered SIM card to another person to facilitate a crime for gain carries a fine of up to $10,000, imprisonment for up to three years, or both. SPF also states that scammers and scam-syndicate members or recruiters face mandatory caning of six to 24 strokes. Scam mules who enable scammers by providing SIM cards, Singpass credentials or laundering proceeds may face discretionary caning of up to 12 strokes for specified offences.
The consequences need not stop at sentencing. Under Singapore's Facility Restriction Framework, people involved in mule-related offences may be barred from subscribing to new mobile lines. The framework can apply to people under investigation and assessed to be at risk, as well as those warned, given composition sums, prosecuted or convicted. Losing access to new lines can disrupt work, banking alerts, family communication and digital-service authentication.
Singapore has tightened the system around SIM registration. From 28 February 2026, an individual may register no more than 10 postpaid SIM cards across all telcos, replacing the earlier limit of 10 per telco. IMDA also introduced a Singpass-authenticated self-help checker at go.gov.sg/simcardhowmany, allowing subscribers to see how many counted postpaid cards are registered under their identity.
These controls sit alongside disruption at network level. IMDA reported that more than 260 million potential scam calls and 40 million SMS messages were blocked in 2025, while about 100,000 mobile lines suspected of misuse had been disrupted since mid-2024. MDDI separately said more than 105,000 scam-related mobile lines were disrupted across telcos in 2025. MDDI also reported that scams using phone calls and SMS as the first approach fell by 19% and 65% respectively from 2024 to 2025. The numbers show that controls can reduce abuse, but syndicates still need fresh lines, which is why they continue to recruit subscribers.
How to Protect Yourself
Treat any request to register a line for someone else as a serious warning sign. A genuine employer or promotion should not require you to surrender a SIM registered to your personal identity, conceal the real user from a telco or buy cards from multiple shops.
Use these checks before agreeing to any mobile-line arrangement:
- Keep control of every line in your name. If you register it, you should know where the SIM is, which device uses it and why it remains active.
- Reject cash-for-SIM offers. A small reward is not compensation for the legal and identity risks. Do not act as a buyer, courier or introducer.
- Check your registered cards through the official tool. Type
go.gov.sg/simcardhowmanyyourself or reach it through IMDA's website. Authenticate only on an official Singpass page. - Do not share Singpass credentials or OTPs. Government agencies, telcos and legitimate employers do not need your password to “help” with registration.
- Verify unexpected telco requests independently. Contact your telco using the number on its official website or app. Do not rely on a number or link supplied by a recruiter.
- Protect identity documents. Do not send NRIC images to an unverified person. If a legitimate process requires identification, confirm the organisation, purpose and retention practice first.
- Enable ScamShield and overseas-call controls. ScamShield can help identify suspicious communications, while telcos provide options to block incoming international calls or SMS if you do not need them.
Parents and educators should explain the recruitment angle to teenagers and young adults without framing it as a lecture about gullibility. The pitch is designed to feel like casual gig work. The key distinction is ownership: legitimate work does not ask a recruit to hide the real user of a regulated service.
SMEs should maintain a live register of corporate lines showing the assigned employee, device, activation date, business purpose and return or termination status. Require approval for new lines, reconcile telco bills monthly and deactivate lines immediately when staff leave. Dual approval is sensible when several lines are ordered at once.
What to Do If You Are Targeted
If someone offers you money to register or hand over SIM cards, stop the conversation and do not meet the courier. Preserve the account name, phone number, messages, payment offer and meeting instructions. Do not confront the recruiter or pretend to continue if doing so may put you at risk.
If you already registered or surrendered a card, act promptly:
- Contact the relevant telco and explain that the line may be outside your control or linked to suspected crime. Ask what can be suspended or terminated and request a reference number.
- Check all postpaid cards registered under your identity using IMDA's official self-help checker. Ask the telco about any line you do not recognise.
- Change your Singpass password if it was disclosed or entered on a page supplied by the recruiter. Review recent account activity and secure the email and phone number used for recovery.
- Call the ScamShield Helpline on 1799 for scam-related guidance. If money or banking access is involved, contact your bank's fraud hotline immediately.
- Give information to Police through I-Witness or call the Police Hotline on 1800-255-0000. Call 999 if there is an immediate threat or a crime is in progress.
- Preserve evidence. Keep original messages, transaction records, telco contracts, receipts, phone numbers and the time and place of any handover. Do not alter screenshots in a way that removes timestamps or account details.
Reporting early helps authorities disable lines and identify recruiters, couriers and connected accounts. It also gives you a documented record of when you discovered the misuse and what steps you took.
Common Mistakes to Avoid
The first mistake is assuming that a low payment means a low-level offence. The value of the reward does not reflect the harm the line may enable. One registered number can be used to reach many targets or support several accounts.
The second is believing that the recruiter carries all responsibility because they kept the card. Singapore law specifically addresses people who knowingly provide registered SIM cards to facilitate crime for gain. “I never made the scam call” is not a safe defence to deliberate supply.
Do not ignore unfamiliar mobile lines on a telco bill or in the IMDA checker. They may come from an old family plan or promotion, but they could also indicate identity misuse. Verify first, then ask the telco to terminate lines you do not need or recognise.
Do not delete chats because you feel embarrassed. Messages may show how you were approached, what was promised and whether the recruiter misrepresented the purpose. That evidence can matter.
Finally, do not pay anyone who claims they can “clear” your identity from telco or police systems. A second scammer may target people who fear investigation. Deal directly with the telco, SPF, ScamShield and, if needed, a qualified Singapore lawyer.
FAQ
What is a SIM card mule in Singapore?
A SIM card mule registers a mobile line using their identity and transfers the SIM or control of the number to someone else, typically for payment. Syndicates use such lines to create accounts, contact targets or coordinate unlawful activity while placing the registration trail on the mule.
Is it illegal to give a registered SIM card to another person?
Family and business arrangements can have legitimate explanations, but knowingly providing a registered SIM card to facilitate crime for gain is an offence. If a stranger pays you to buy multiple lines, asks you to hide the real user or sends a courier to collect the cards, do not proceed.
What are the penalties for SIM card mule offences?
SPF states that the section 39B offence of knowingly providing a registered card to facilitate crime for gain carries a fine of up to $10,000, imprisonment for up to three years, or both. Certain scam-mule offences can also attract discretionary caning of up to 12 strokes, and facility restrictions may prevent new mobile subscriptions.
How many postpaid SIM cards can one person register in Singapore?
Since 28 February 2026, an individual may register up to 10 postpaid SIM cards in total across all telcos. Corporate-plan and data-only arrangements may be treated differently under the scheme, so check IMDA's current guidance for the precise scope.
How can I check whether unknown SIM cards are registered under my name?
Use IMDA's Singpass-authenticated checker at go.gov.sg/simcardhowmany. If a number is unfamiliar, contact the named telco directly. Do not follow a link sent by an unknown person claiming to help you check.
What should I do if I already handed a SIM card to a recruiter?
Contact the telco immediately to suspend or terminate the line, preserve your communications with the recruiter, secure Singpass if it was exposed, and report the matter to SPF. Call ScamShield on 1799 if you need help deciding what to do next.
Can an SME be exposed through unused corporate SIM cards?
Yes. An active but untracked corporate line can be diverted, retained by a former employee or used to create accounts without management's knowledge. SMEs should inventory every line, review bills, restrict bulk ordering and terminate unused services promptly.
Are MAS rules relevant to a SIM card mule case?
MAS does not regulate ordinary mobile subscriptions, but it oversees banks and financial institutions that may be targeted or used in connected scam flows. If a recruiter also asks for a bank account, payment transfer or investment transaction, contact the financial institution directly and consult MAS's consumer and investor resources where relevant.
Conclusion
The SIM card is only a small object; the identity attached to it is what a syndicate wants. SPF's August 2026 operation shows that recruiters may offer as little as $10 to $20 while exposing subscribers to arrest, prosecution, caning for specified offences and limits on future mobile services.
Keep every registered line under your control. Check unfamiliar subscriptions through IMDA's official service, refuse cash-for-SIM offers and report suspected recruitment. If a card has already left your hands, contact the telco first, then call ScamShield on 1799 and provide the Police with the evidence you still have.
Sources: SPF enforcement release, 24 August 2026; IMDA anti-scam measures; IMDA postpaid SIM limit announcement; MDDI parliamentary reply on local SIM cards and scams.