{"id":76626,"date":"2026-08-15T11:32:55","date_gmt":"2026-08-15T03:32:55","guid":{"rendered":"https:\/\/sgbuzz.com\/?p=76626"},"modified":"2026-08-15T11:32:55","modified_gmt":"2026-08-15T03:32:55","slug":"how-do-scammers-exploit-government-directories","status":"publish","type":"post","link":"https:\/\/sgbuzz.com\/?p=76626","title":{"rendered":"How do scammers exploit government directories?"},"content":{"rendered":"<p><br \/>\n<\/p>\n<div>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">SINGAPORE \u2013 <!-- -->An online directory containing the names, phone numbers, e-mail addresses and job titles of Singapore public officers <a href=\"https:\/\/www.straitstimes.com\/singapore\/contact-details-of-many-public-officers-in-singapore-government-directory-removed-to-fight-scams?ref=inline-article\" rel=\"noopener\" class=\"gap-x-04 items-center inline text-primary-60 select-auto\" aria-label=\"link\" target=\"_blank\" data-testid=\"custom-link\"><span class=\"inline font-tertiary-body-baseline-regular\" data-testid=\"typography-test-id\">has been pared down<\/span><\/a> in ongoing attempts to counter<!-- --> <!-- -->government impersonation scams.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">The<!-- --> move comes after <a href=\"https:\/\/www.straitstimes.com\/singapore\/courts-crime\/spore-scam-losses-fall-to-913m-in-2025-new-trend-of-victims-handing-over-gold-bars-to-syndicates?ref=inline-article\" rel=\"noopener\" class=\"gap-x-04 items-center inline text-primary-60 select-auto\" aria-label=\"link\" target=\"_blank\" data-testid=\"custom-link\"><span class=\"inline font-tertiary-body-baseline-regular\" data-testid=\"typography-test-id\">government official impersonation scams<\/span><\/a> more than doubled<!-- --> <!-- -->to 3,363 cases in 2025 from 1,504 cases the year before.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">While the governments of Canada, Hong Kong and Australia also publish similar directories in their communications with the public, most private-sector organisations do not reveal such information online.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">How do scammers exploit government directories, and what else can be done to stop such scams? The Straits Times explains.<\/p>\n<h2 class=\"font-primary-headline-md-semibold\" data-testid=\"article-subhead-test-id\">How government impersonation scams work<\/h2>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Scammers typically masquerade as officers from the Singapore Police Force, the Immigration and Checkpoints Authority and the Ministry of Law, alerting victims to supposed unauthorised bank or telco applications, unpaid taxes or potential criminal liabilities. The scammers would then pressure victims to disclose personal details and passwords, or transfer money to a bank account to assist with official investigations.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">In 2025, victims lost\u00a0$242.9 million\u00a0to fake government official scams, up from $151.3 million in 2024.\u00a0This is the second-highest amount lost among all scam types in 2025, with the largest amount lost to investment scams at $336.2 million.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Scammers have also impersonated bank and telco staff, claiming to have detected suspicious transactions on victims\u2019 credit cards or phone line applications. Victims were then directed to fake government officials to get them to transfer money into \u201csafe accounts\u201d.<\/p>\n<h2 class=\"font-primary-headline-md-semibold\" data-testid=\"article-subhead-test-id\">How scammers exploit government directories<\/h2>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Having a real officer\u2019s name, designation, agency and contact number adds credibility to government impersonation calls. Victims who verify the details online against an online directory would likely let down their guard.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">\u201cIn reality, they have only verified that the officer exists, but they didn\u2019t pause to think that the person on the phone may not be that officer,\u201d said<!-- --> <!-- -->Andy Prakash, the founder and chief executive of IT security company Privacy Ninja.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Fraudsters had spoofed local numbers, including those from government agencies, to make their scams look more convincing.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">But since 2019, telcos have blocked the spoofing of emergency hotlines and government agencies.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Since April 2020, telcos have also added the \u201c+\u201d prefix for all incoming overseas calls to alert users to calls that do not originate in Singapore.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">In December 2022, telcos started to block all overseas calls that spoof local fixed and mobile line numbers.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Scammers have now moved to messaging apps like WhatsApp to spoof local numbers, which can include government agency numbers, as the apps sit outside the control of Singapore\u2019s telcos, said Aaron Ang, regional director at Singapore-based cybersecurity and AI consultancy CWG Innovations.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">On WhatsApp, scammers may also use profile pictures bearing official logos, or even appear in uniform against an office backdrop during video calls, to make the ruse more convincing.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">\u201cNo Singapore agency handles case matters over WhatsApp,\u201d said Ang. \u201cThe platform itself is the red flag. You don\u2019t even need to work out whether the officer is real.\u201d<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">To protect themselves against scam calls on WhatsApp, users can adjust their privacy settings to silence unknown callers.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">They can also call the national ScamShield helpline on 1799 if they are unsure, or download the ScamShield app where they can submit suspicious phone numbers for screening.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Ang said that it would not make sense for the Government to change all contact details at this point as informing the public of the change could itself create opportunities for scams. \u201cIt\u2019s a bit like changing your house number to stop junk mail,\u201d he said.<\/p>\n<h2 class=\"font-primary-headline-md-semibold\" data-testid=\"article-subhead-test-id\">Risk of corporate espionage<\/h2>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">The risk of corporate espionage is why most private-sector organisations do not publish staff directory information online.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Similarly, an agency\u2019s directory can reveal its organisational structure, including the names and contact details of officers in the same department. This allows a scammer to pose as a senior officer using a lookalike e-mail address and instruct subordinates to send confidential documents, or trick them into opening malicious files or click on malicious links.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">\u201cThe scam is far more believable because the names and organisational relationships are accurate,\u201d said cybersecurity expert <!-- -->Steven Wong<!-- --> from the Singapore Institute of Technology.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Officers working in procurement, licensing or grant administrators<!-- --> <!-- -->are common targets.<\/p>\n<h2 class=\"font-primary-headline-md-semibold\" data-testid=\"article-subhead-test-id\">Is the public safer now?<\/h2>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">While scams will not dry up completely, scammers will have less data to exploit.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Over time, as more rank-and-file public officers leave their organisations, what has already been harvested by scammers will also become outdated, said Anthony Lim, a senior research fellow at the Centre for Strategic Cyberspace and International Studies think-tank.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">While online government directories still contain the information of politicians or very senior officers, it will be harder to convince victims that someone who is very senior has called them, said Lim.<\/p>\n<h2 class=\"font-primary-headline-md-semibold\" data-testid=\"article-subhead-test-id\">What else can be done to stop government impersonation scams?<\/h2>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Mr Matthias Yeo, chief executive of Singapore-based cybersecurity research company CyberXCenter, suggested that agencies use a general e-mail address to communicate with the public instead of publishing individual officers\u2019 e-mail addresses.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">\u201cWhen people are used to communicating through a generic official e-mail, they are more likely to question an e-mail that suddenly claims to come from a specific officer,\u201d said Yeo.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Prakash also suggested a live verification system that allows the public to verify their caller.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">It works by allowing government officers to generate a dynamic one-time code, which a member of the public can enter on a government website. The website would then display the officer\u2019s name and agency and confirm that the dynamic code, which will expire in a few minutes, had just been generated.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">\u201cThis can help verify the live interaction, rather than merely verifying that the officer exists,\u201d said Prakash.<\/p>\n<p class=\"text-primary font-tertiary-body-baseline-regular\" data-testid=\"article-paragraph-annotation-test-id\">Public education should continue to stress that government officials will never ask people to transfer money or valuables, disclose banking login details, or install apps from unofficial sources.<\/p>\n<\/div>\n<p><br \/>\n<center><br \/>\n<br \/><a href=\"https:\/\/www.straitstimes.com\/tech\/st-explains-how-do-scammers-exploit-government-directories-and-how-to-stop-it\" target=\"_blank\" rel=\"noopener\">Read Full Article At Source <\/a><br \/>\n<center\/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>SINGAPORE \u2013 An online directory containing the names, phone numbers, e-mail addresses and job titles of Singapore public officers has been pared down in ongoing&#8230;<\/p>\n","protected":false},"author":1,"featured_media":74281,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[2611],"tags":[],"class_list":["post-76626","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-buzz-headlines","wpcat-2611-id"],"_links":{"self":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts\/76626","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=76626"}],"version-history":[{"count":0,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/posts\/76626\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=\/wp\/v2\/media\/74281"}],"wp:attachment":[{"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=76626"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=76626"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sgbuzz.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=76626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}