How to Spot AI Scams in Singapore: Deepfakes, Voice Clones, Fake Ads
Table of Contents
In May 2026, someone in Singapore got a WhatsApp message with a photo of a senior civil servant. An email followed from an address that looked official. Then came a video call with what appeared to be the Prime Minister and several officials, an NDA to sign and an urgent request for funding.
None of it was real. The Singapore Police Force says at least one victim of that scam lost S$4.9 million.
That is the shift AI has brought to scams. The old warning signs — a bad phone line, broken English, a stranger’s voice — are disappearing. A scammer can now put a familiar face on a video call, copy a voice from a few public clips and run polished ads with a celebrity “endorsement” that the celebrity never gave.
The good news is that the scam still needs one thing from you: an action. A transfer, an OTP, an app install, a login. If you check the right things before you act, the quality of the fake stops mattering.
This guide gives you a seven-step check for AI scams in Singapore, the free official tools that back it up and what to do in the first hour if you have already paid.
Why Most People Try to Spot AI Scams the Wrong Way
The common advice is to “look for glitches”. Watch the lips. Count the blinks. Listen for a robotic tone.
That advice is not wrong — Singapore’s Cyber Security Agency lists those exact signs. The problem is relying on it alone. Deepfake tools get better every few months, video calls are often low quality anyway, and a scammer can blame a “bad connection” for anything odd. If your only defense is spotting the flaw, you lose the day the flaw is fixed.
The second mistake is trusting the channel. A call that shows “+65”, a WhatsApp profile with an official photo or an email that mentions your name feels safe. All of those can be faked or bought.
The core principle: do not try to prove a call is fake. Verify that it is real, through a channel the caller did not give you.
Glitch-spotting becomes a bonus. Verification is the defense.
How Big the Problem Is in 2026
Scam losses in Singapore fell in 2025, but they are still huge. The SPF’s Annual Scam and Cybercrime Brief 2025 reports:
| Measure | 2025 figure |
|---|---|
| Total lost to scams | S$913.1 million (down from S$1.1 billion in 2024) |
| Change in number of cases | Down 24.8% |
| Median loss per case | S$1,644 (up from S$1,389) |
| Victims who transferred money themselves | 81.8% |
| Highest average loss | Elderly victims, at S$37,053 |
| Top scam types by losses | Investment scams, then government official impersonation |
The 81.8% figure is the one to remember. Most victims were not hacked. They were persuaded to move the money themselves — which is exactly what a convincing fake face or voice is designed to do.
The Five Things You Need
- ScamShield app and website (free) — the official checker. It filters scam calls and SMSes and lets you check a number, link or message against reported scams.
- ScamShield Helpline 1799 (free) — a 24/7 line for “is this real?” questions. If you have already lost money, it can connect you to your bank. From overseas, call +65 6869 1799.
- Your bank app’s security settings (free) — transaction limits, transfer alerts and a “money lock” for savings you do not touch.
- A free AI chatbot — ChatGPT, Gemini or Claude (free) — a second opinion on a suspicious message. It cannot verify anything, but it is good at naming pressure tactics you might miss when you are stressed.
- A family code word (free) — a word or question only your family knows, for any call that asks for money.
Total cost: S$0. Every tool in this system is free.
The Full Workflow: Step by Step
Step 1 — Run the Pressure Test (10 Seconds)
Before you look at the face or the voice, look at what the message wants. AI scams in Singapore almost always combine three things:
- Urgency. “Today.” “Within the hour.” “Before the account is frozen.”
- Secrecy. An NDA, “do not tell your family”, “this is a confidential investigation”.
- An action that moves money or access. A transfer, an OTP, a login, an app download, a crypto purchase.
If all three are there, treat the call as a scam until proven otherwise. Real officials, real bosses and real banks can wait while you check.
What you end up with: a clear reason to slow down, instead of a vague bad feeling.
Time saved vs manual: it replaces the minutes you would spend debating whether the face “looked right”.
Step 2 — Check the Request Against the Rules Officials Follow (20 Seconds)
Government impersonation was the second-largest scam type by losses in 2025, and the AI versions are getting bolder. In April 2026, SPF warned of scammers in police uniforms on Google Meet calls asking victims for OTPs. In May 2026, it warned of the deepfake Prime Minister video calls.
You do not need to judge the uniform or the face. You only need to know what real officials never do. According to SPF, government officials will never ask you to:
- Transfer money to them or to a “safe account”.
- Share your banking login details or OTPs.
- Install apps from outside the official app stores.
- Transfer a phone call to the police.
Government SMSes in Singapore now arrive from the “gov.sg” sender ID. An official-sounding message from a personal number or a WhatsApp profile is a red flag on its own.
What you end up with: a yes or no answer that does not depend on how real the call looks.
Time saved vs manual: no more “but he knew my NRIC number” second-guessing. Personal data leaks. The rules do not change.
Step 3 — Look and Listen for Deepfake Signs (30 Seconds)
Now use the glitch checks — as supporting evidence, not proof. The Cyber Security Agency’s deepfake advisory lists these signs.
On video:
- Blurring or a soft edge around the face, especially when the head turns.
- Unnatural blinking, or no blinking at all.
- Reflections in the eyes that do not match each other.
- Skin tone that does not match the neck or hands.
- A background that warps or shifts.
On audio:
- Lips that are slightly out of sync with the words.
- A flat tone with little emotion, even during an “emergency”.
- Background noise that does not fit the setting, or no background noise at all.
Two quick tests help. Ask the person to turn their head fully to the side, or to wave a hand in front of their face. Many real-time deepfakes break up when something passes over the face. Then ask a question only the real person could answer.
What you end up with: extra evidence — but if the call fails Step 1 or Step 2, it is a scam even if it passes every visual test.
Time saved vs manual: you stop spending the whole call staring at pixels.
Step 4 — Verify Through a Second Channel (2 Minutes)
This is the step that defeats even a perfect deepfake.
Hang up. Then contact the person or organization through a channel you already had — not one the caller gave you.
- A family member asking for money: call their usual number. Ask the family code word.
- Your boss or a client asking for an urgent transfer: call their office line or message them on your company chat. The March 2025 joint advisory from SPF and its partners warned specifically about deepfake calls impersonating company executives.
- A bank or MAS officer: call the number on the back of your card or on the official website. The same 2025 advisory flagged deepfakes of MAS officials.
- A government agency: look up the number on the agency’s gov.sg website yourself.
A real caller will not mind. A scammer will push back — “there is no time”, “you will be charged for obstruction”, “the line is not secure”. That pushback is your answer.
What you end up with: confirmation from the real person, or a confirmed scam.
Time saved vs manual: two minutes against the median loss of S$1,644.
Step 5 — Get a Second Opinion From ScamShield and AI (2 Minutes)
If you are still unsure, check the details.
- Paste the number, link or message into the ScamShield app or website. It checks against reported scams.
- Call the ScamShield Helpline at 1799. It runs 24 hours a day.
- Ask an AI chatbot to name the red flags. Copy the message text — with your own name, NRIC, account numbers and addresses removed — and use this prompt:
I received the message below. Do not tell me whether it is real. List every scam warning sign you can find in it, such as urgency, secrecy, unusual payment methods, lookalike links or requests for codes. Then tell me what I should verify and through which official channel.
The prompt asks for warning signs, not a verdict, on purpose. A chatbot cannot see the sender, the link’s destination or SPF’s latest reports. It can, however, point out the pressure tactics you are too stressed to notice.
What you end up with: a list of specific red flags and a check against reported scams.
Time saved vs manual: it replaces a late-night search through forums and news sites.
Step 6 — Lock Down Your Money and Accounts Before You Need To (10 Minutes, Once)
The best time to do this step is today, before any scam call. SPF’s ADD, CHECK, TELL framework starts with ADD — adding security features. Set these up once:
- Install the ScamShield app and turn on its call and SMS filters.
- Lower your daily transfer limit in your bank app to what you actually use. You can raise it when you need to.
- Turn on transaction alerts for every transfer, not only large ones.
- Use a money lock for savings you do not touch. DBS digiVault, OCBC Money Lock and UOB LockAway hold money that cannot be transferred out digitally. Unlocking needs extra verification, often in person, and the rules differ by bank, so check yours. If you keep an emergency fund in one of the savings accounts we compared, a lock is worth adding to it.
- Turn on two-factor authentication for email, Singpass-linked apps and social media.
- Stop strangers adding you to WhatsApp groups. Go to Settings, Privacy, Groups and choose “My Contacts”. Many investment and job scams start in a group chat.
What you end up with: a scammer who gets past you still cannot empty your savings in one sitting.
Time saved vs manual: 10 minutes now against the weeks it takes to report and chase a loss.
Step 7 — Know the First-Hour Plan if You Already Paid (5 Minutes)
If you have already sent money, shared an OTP or installed an app, speed matters more than embarrassment.
- Call your bank’s 24-hour scam hotline, or 1799. Ask them to freeze your accounts and stop the transfer. 1799 can connect you to seven banks.
- Disconnect your phone from the internet if you installed an app the caller asked for. Do not keep using it for banking.
- Report it in the ScamShield app or make a police report online. Call 999 if you need urgent police help.
- Change your passwords for banking, email and any account you logged in to during the call.
- Tell your family and friends. The same scammer often moves on to the people you know.
What you end up with: the best chance of stopping the money before it moves on.
Time saved vs manual: minutes count. Banks can sometimes hold funds that have not left the receiving account yet.
The Full Time Breakdown
| Step | Check | When | Time |
|---|---|---|---|
| 1 | Pressure test: urgency, secrecy, action | Every suspicious call or message | 10 seconds |
| 2 | Compare with what officials never ask | Every suspicious call or message | 20 seconds |
| 3 | Look and listen for deepfake signs | Video and voice calls | 30 seconds |
| 4 | Verify through a second channel | Any request for money or codes | 2 minutes |
| 5 | ScamShield and AI second opinion | When still unsure | 2 minutes |
| 6 | Lock down accounts | Once, today | 10 minutes |
| 7 | First-hour plan | Only if you already paid | 5 minutes to start |
Total: about five minutes per suspicious call, plus a one-off 10-minute setup. Against a median loss of S$1,644 — and a 2026 deepfake case running into millions — it is the best five minutes you will spend all year.
What AI Cannot Do (And Should Not Try To)
AI cannot tell you who is on the other end. A chatbot only sees the text you paste. It cannot check the caller’s number, the email’s real sender or the link’s destination. Never treat “this looks legitimate” from a chatbot as clearance.
Deepfake detectors are not reliable enough to bet on. Consumer “AI detector” apps and websites miss good fakes and flag real videos. Some are scams themselves. Verification through a second channel works every time. Detection does not.
AI cannot get your money back. Only your bank and the police can act on a transfer, and only fast. If you have paid, skip the chatbot and call 1799 or your bank.
AI can be used against you in the same chat. If a “support agent” asks you to paste a message into an AI tool they link you to, or to install an “AI security app”, that is part of the scam. Use only the official ChatGPT, Gemini or Claude apps from the app stores.
Tips to Get Better Answers When You Ask AI About a Scam
Remove personal details first. Delete your name, NRIC, account numbers, addresses and OTPs before you paste anything. The same rule applies when you budget with AI — the chatbot does not need them to help.
Ask for red flags, not a verdict. “List the warning signs” gets a useful checklist. “Is this a scam?” gets a confident guess either way.
Give it the context it cannot see. Add a line such as “This came by WhatsApp from a number I do not know, and the sender says they are from the police.” The channel is often the biggest clue.
Ask what to verify and where. End your prompt with “Which official website or phone number should I use to check this?” Then look up that number yourself rather than clicking anything in the reply.
Use it to practice, not only to react. Ask a chatbot to write three examples of a fake bank SMS and explain the tells in each. Showing these to older relatives works better than a lecture.
The No-App Version of This Workflow
Some people — often the parents and grandparents most at risk — will not install another app. The workflow still works without one.
- Write three rules on a card by the phone: officials never ask for money, never ask for OTPs and never ask you to install apps.
- Save 1799 in their phone as “Scam Check” so it is easy to find under stress.
- Agree a family code word and practice it once on a normal call.
- Set a low transfer limit and a money lock on their savings during a branch visit. Bank staff can help with both.
- Make “hang up and call me” the default. If anyone asks for money, they hang up and call you on your usual number before doing anything.
The trade-off is that there is no automatic filter on scam calls and SMSes. That makes the code word and the call-back habit even more important.
Frequently Asked Questions
Can AI deepfake detectors reliably spot a fake video call?
No. Detection tools miss well-made deepfakes and sometimes flag real videos, and real-time video calls are hard to analyze. Use the signs from CSA as supporting evidence only, and rely on verifying the request through a second channel you already trust.
How do I set this up for my parents?
Install ScamShield on their phone, lower their bank transfer limit and add a money lock to their savings. Agree a family code word and save 1799 as “Scam Check”. Most of all, make “hang up and call me first” the house rule for any request involving money.
What is the easiest first step for a beginner?
Install the ScamShield app and turn on its call and SMS filters. It takes five minutes, costs nothing and blocks a large share of scam messages before you see them. Then lower your daily bank transfer limit.
How long does it take to check a suspicious call?
About five minutes for the full check, and most calls fail in the first 30 seconds. If the caller wants urgency, secrecy and a money transfer or OTP, you can stop there. The one-off account setup takes about 10 minutes.
Do I need to verify every call from a bank or government agency?
Only the ones that ask you to act — transfer money, share a code, log in, install something or keep a secret. Real officials and banks are fine with you hanging up and calling back on the official number. A caller who objects to that is the warning sign.
What should I do if I already transferred money to a scammer?
Call your bank’s 24-hour hotline or the ScamShield Helpline at 1799 right away and ask for your accounts to be frozen. Then report the scam in the ScamShield app or make a police report online, and change your passwords. Speed matters, because banks can sometimes stop money that has not moved on yet.
Final Thoughts
AI has made scams in Singapore look and sound real. It has not changed what scammers need from you: a transfer, a code or a login, delivered fast and in secret.
That is why the seven-step check works. It does not depend on spotting a flaw in the deepfake. It depends on slowing down, knowing what officials never ask and confirming through a channel the caller did not give you.
Set up the protections in Step 6 today — it takes 10 minutes. Then share the three rules with the people in your family who answer calls from unknown numbers. The time you spend now is far less than the time it takes to chase a loss.
→ Read SPF’s latest scam advisories
Have you or someone you know received a deepfake call or a cloned voice message? Share what gave it away in the comments.
Continue reading:
