Singapore recovers scam money mainly through speed: victims alert banks and the Police, the Anti-Scam Command coordinates freezes with financial institutions, and investigators trace transfers before funds move offshore or into cryptocurrency. Recovery is never guaranteed, so the best response is to stop further transfers immediately, activate your bank's kill switch if needed, call the ScamShield Helpline at 1799, and make a police report with complete evidence.
Introduction
When a scam victim in Singapore asks whether the money can be recovered, the honest answer is uncomfortable: sometimes, but only if action is fast enough. Scam syndicates are built to move money quickly. They split funds across mule accounts, convert part of the proceeds into digital payment tokens, route value through overseas accounts, and pressure victims to keep quiet until the window for intervention has closed.
That is why Singapore's recovery system is designed around rapid disruption. The Singapore Police Force's Anti-Scam Command, known as ASCom, works with banks, fintech firms, cryptocurrency service providers, telcos, online platforms and foreign law enforcement partners. In the 2025 Annual Scams and Cybercrime Brief, SPF said ASCom recovered about S$140.5 million in scam losses and helped victims avert at least S$348 million in potential losses. Those figures show that reporting works, but they also show why prevention is still the stronger defence: total scam losses in 2025 remained large, even though cases and losses fell from the previous year.
For residents, SMEs and educators, the key lesson is practical. Do not wait to "confirm" the scam by arguing with the caller or watching a fake investment portal. Do not give scammers one more transfer to "unlock" your funds. Treat the first suspicion as a trigger to freeze, report and preserve evidence. In scam recovery, hours matter; in some cases, minutes matter.
How This Scam Works in Singapore
Money recovery begins with understanding how scam proceeds move. Most modern scams in Singapore are not simple one-to-one thefts where a criminal keeps the money in the first account that receives it. The first receiving account is often a mule account. It may belong to a person who sold or rented their bank account, responded to a fake job offer, or was tricked into allowing someone else to use their Singpass, bank access or cryptocurrency wallet.
In an authorised push payment scam, the victim personally approves the transfer. This happens in government official impersonation scams, fake friend call scams, job scams, investment scams, business email compromise, invoice redirection and many e-commerce scams. Because the transfer is authorised by the victim, the bank may not detect it as a classic account takeover. The fraud is in the deception, not necessarily in a stolen password.
Once money lands in a mule account, scammers try to move it through several stages. First, they disperse funds to other local accounts, often in smaller amounts. Second, they withdraw cash, buy high-value goods, send overseas remittances or convert money into cryptocurrency. Third, they use overseas accounts, exchange wallets or unregulated platforms to make recovery harder. The further the money travels from Singapore's banking system, the lower the chance of freezing it.
Cryptocurrency adds another layer. ScamShield's cryptocurrency guidance notes that cryptocurrency-related scams caused losses of more than S$182 million in Singapore in 2025, about one-fifth of reported scam losses. Transfers of Bitcoin, Ether, Tether and other digital assets are generally irreversible. MAS has repeatedly warned that cryptocurrencies are highly risky and not suitable for retail investors. Even where a digital payment token service provider is regulated, MAS regulation cannot make a fraudulent transfer reversible.
ASCom's role is to break this chain quickly. When a victim reports a scam and gives accurate transaction details, the Police can work with banks to identify receiving accounts, freeze remaining balances, and alert potential victims who may still be under manipulation. SPF has also worked with cryptocurrency exchanges and blockchain analytics partners to identify victims before scam transfers are completed. Recent police-crypto exchange operations in 2026 reportedly prevented millions of dollars in potential cryptocurrency scam losses by reaching suspected victims before funds left their control.
The system is not magic. If the funds are already withdrawn in cash, transferred overseas, or pushed through private wallets outside cooperative platforms, recovery becomes much more difficult. That is why every recovery guide in Singapore comes back to the same point: report early, give precise details, and stop interacting with the scammer.
Real-World Impact and Statistics
SPF's 2025 scam statistics showed a mixed picture. Scam cases fell for the first time after years of growth, but reported losses still reached hundreds of millions of dollars. The Police reported about 37,308 scam cases and about S$913 million in scam and cybercrime losses for 2025. Investment scams and government official impersonation scams were among the highest-loss categories, while e-commerce, phishing, job and impersonation scams continued to affect large numbers of people.
The recovery figures are significant because they show what coordinated intervention can achieve. SPF said ASCom recovered about S$140.5 million in scam proceeds in 2025, including both non-cryptocurrency and cryptocurrency proceeds. It also helped avert at least S$348 million in potential losses through proactive interventions with victims. CSA Singapore's Cyber Landscape reporting also highlighted this victim-centric approach, including Project ASTRO, where SMS alerts and bank collaboration helped reach people who did not yet realise they were being scammed.
There is an important distinction between money recovered and money averted. Recovered money refers to scam proceeds that authorities successfully froze, seized or returned after a loss had occurred. Averted loss refers to money that victims might have transferred if Police, banks or partners had not intervened. In practical terms, averted loss is often the better outcome because it prevents the money from entering the laundering chain at all.
For SMEs, the impact can be existential. A single invoice redirection or business email compromise case can drain working capital meant for payroll, suppliers or tax obligations. For residents, especially seniors, one large transfer may represent retirement savings. For young adults, small payments in job scams can snowball into criminal exposure if they become money mules. The money recovery system protects victims, but it also relies on victims, employees and family members recognising the signs early enough to activate it.
How to Protect Yourself
Build your own recovery window before a scam happens. The first step is transaction control. Set conservative daily transfer limits on banking apps, especially for accounts holding savings or business operating funds. Keep a separate account for high-value savings and avoid linking it casually to online marketplaces, unfamiliar payment requests or experimental investment platforms.
Second, use bank security tools before there is a crisis. Know how your bank's kill switch works. ScamShield explains that activating a kill switch can immediately freeze current and savings accounts, stopping digital transfers, ATM withdrawals and other outgoing transactions while the account is locked. This is disruptive, but disruption is the point when a scammer may be inside your account or pressuring you to move funds.
Third, treat verification as a process, not a feeling. If someone claims to be from SPF, MAS, CSA, a bank, a telco or a government agency, end the conversation and contact the organisation through official channels. Government officials will not ask you to transfer money to a "safe account", reveal bank login details, disclose Singpass credentials, install remote access tools, or buy cryptocurrency for investigations.
Fourth, protect the devices that approve payments. Enable multi-factor authentication, update operating systems, and avoid sideloading APK files or remote control apps. CSA and SingCERT guidance is especially relevant for phishing, malware and suspicious links. If you suspect a phishing email, malicious app or compromised business system, report the cybersecurity incident to SingCERT and preserve technical evidence.
Fifth, SMEs should separate payment authority from communication authority. A staff member who receives an invoice should not be the only person who approves a changed bank account. Use callback verification to a known number already held in your records, not a number in the suspicious email. Require dual authorisation for new payees, urgent payments, overseas transfers and cryptocurrency purchases. Keep audit trails in accounting systems so investigators can reconstruct what happened.
Sixth, check financial entities before investing. Use MAS' Financial Institutions Directory and Investor Alert List to verify whether an entity is regulated or has been flagged. A professional-looking website, a Telegram group with fake testimonials, or a "mentor" claiming MAS approval is not verification. For digital payment tokens, remember MAS' consumer warning: crypto values can be volatile, transfers may be irreversible, and retail consumers can lose all their funds.
What to Do If You Are Targeted
If you have transferred money or shared sensitive information, act in this order.
- Stop all communication with the scammer. Do not warn them, negotiate, or pay a "recovery fee". Many victims are hit twice when scammers pretend they can retrieve the money for a fee.
- Contact your bank immediately. Use the bank's official anti-scam hotline or in-app support. If you believe the account is compromised or the scam is still unfolding, activate the kill switch first and sort out inconvenience later.
- Call the ScamShield Helpline at 1799 if you are unsure whether the situation is a scam. For urgent police assistance, call 999. To provide scam information, use the Police Hotline at 1800-255-0000 or the I-Witness e-service where appropriate.
- File a police report promptly. Include the amount, date and time of each transfer, recipient account names and numbers, PayNow identifiers, wallet addresses, phone numbers, email addresses, chat handles, website links, screenshots, bank receipts and any courier or delivery details.
- Secure your accounts. Change email, banking and marketplace passwords from a clean device. Revoke suspicious device sessions. Enable multi-factor authentication. If Singpass, business email or accounting software may be compromised, escalate internally and preserve logs.
- If cryptocurrency is involved, contact the exchange immediately to freeze the account or halt pending withdrawals. If a private wallet seed phrase was exposed, move remaining assets to a new wallet only if you are technically confident and not still being guided by the scammer. Never share seed phrases or authentication codes with anyone.
- If personal data of customers or employees may have been exposed, assess whether PDPA breach notification duties may apply. Organisations should involve their data protection officer and, where necessary, report to the Personal Data Protection Commission. If systems were accessed without authorisation, the Computer Misuse Act may also be relevant to the police report and internal incident response.
Common Mistakes to Avoid
The first mistake is waiting for the scammer to return the money. Scammers often promise that a transfer is temporary, that a platform withdrawal is pending, or that a tax, fee or verification payment will release the funds. Each delay gives them time to empty mule accounts.
The second mistake is making another payment to fix the first one. Recovery fees, verification deposits, "anti-money laundering clearance" payments and account-unlock charges are common second-stage traps. Legitimate Singapore authorities and banks will not ask you to transfer money into a private account to recover scam proceeds.
The third mistake is deleting evidence out of embarrassment. Keep chat logs, emails, call records, receipts, URLs and screenshots. Even if a message feels humiliating, it may contain the account, wallet, device or platform clue needed for a freeze or investigation.
The fourth mistake is assuming small losses do not matter. A S$50 e-commerce scam may connect to a larger mule network. Reporting helps platforms, banks and Police identify patterns and alert other victims.
The fifth mistake is relying on caller ID, display names or website polish. Scammers spoof numbers, copy government wording, use realistic invoices and produce AI-written messages with no spelling errors. Verification must happen through independent official channels.
FAQ
Can scam money be recovered in Singapore?
Yes, but recovery is not guaranteed. The best chance comes when victims report immediately, provide accurate transfer details and contact their bank before funds are withdrawn, split across mule accounts, converted to cryptocurrency or transferred overseas.
What does the Anti-Scam Command do?
ASCom coordinates Singapore's operational response to scams. It works with banks, fintech companies, cryptocurrency service providers, online platforms and foreign law enforcement agencies to freeze funds, identify mule accounts, intervene with victims and disrupt scam infrastructure.
Should I call my bank or the Police first?
If money has just moved or your account may be compromised, call your bank immediately because the bank can attempt urgent holds and account protection. Then file a police report with full evidence. If you are in danger or need urgent police assistance, call 999.
What is the ScamShield Helpline number?
The ScamShield Helpline is 1799 and operates 24/7. Use it when you are unsure whether a call, message, investment offer, job offer, payment request or website is part of a scam.
Can cryptocurrency scam losses be reversed?
Usually not in the way a card payment might be disputed. Cryptocurrency transfers are generally irreversible, and MAS warns that retail consumers can lose all their funds. Recovery may be possible only if funds touch a cooperative exchange or can be frozen quickly through law enforcement and platform action.
What should SMEs do after a suspicious invoice payment?
Contact the bank, freeze further transfers, alert senior management, preserve the email headers and accounting records, and verify the supplier through a known phone number. If business email compromise is suspected, change credentials, review forwarding rules and file a police report.
Will making a police report get my money back immediately?
No. A police report starts the investigation and may support freezing or tracing action, but returned funds depend on whether money is recovered, whether there are competing claims, and when investigations or court processes conclude.
Conclusion
Singapore's scam money recovery system is stronger than many victims realise, but it is built for speed, not miracles. ASCom's S$140.5 million recovery figure and S$348 million in averted losses show that fast reporting, bank collaboration and targeted intervention can stop real money from disappearing. They also show the limits of response after a scam syndicate has already moved funds offshore or into harder-to-trace channels.
The practical rule is simple: the moment money, Singpass, bank access, cryptocurrency, invoices or urgent authority claims enter the conversation, slow the transaction down. Verify independently. If you suspect you have been targeted, freeze first, report quickly and preserve evidence. In Singapore's anti-scam system, your fastest call may be the action that keeps the money recoverable.