Singapore introduces new anti-scam rules for WhatsApp and other messaging services

SINGAPORE, Singapore (AFP) — Singapore began requiring messaging services to restrict unknown contacts and social media services to verify advertisers on Tuesday, as the city-state clamps down on online scams. Cyberscam hubs, which lure foreigners into work to carry out online romance and crypto investment scams, have proliferated across Southeast Asia in recent years. Singapore, the region's second-largest economy, lost over $2.8 billion to scams from 2020 through the first half of 2025, Home Affairs Minister Sim Ann told parliament last November. The new rules under the Online Criminal Harms Act target services deemed to "pose the highest risk of scams" in the country, Singapore's police said Tuesday. "Investment scams are a key concern on online messaging platforms," the police said in a statement. "In this variant, scammers approach victims using accounts not previously known to the victim ('unknown contact') to offer lucrative investment products." Seven online services -- WhatsApp, Telegram, WeChat, Apple iMessage, Apple FaceTime, Google Messages and Google Meet -- must now obtain users' consent before unknown contacts can add them to groups or channels. They must also warn users about suspicious accounts and allow users to silence, filter or block communications. A separate code covering Facebook, Instagram and TikTok will require platforms to block suspected scam advertisements, verify advertisers' identities against government records and ensure financial services advertised to Singapore users are offered by licensed providers. "In 2025... Facebook, Instagram and TikTok accounted for about 30 per cent of total scam cases. Facebook alone accounted for about 18 per cent of total scam cases," the statement read. E-commerce services such as Carousell, Facebook Marketplace and Facebook Business will also be required to introduce stronger login safeguards. Platforms have until January 31, 2027, to comply, while measures against "spoofing" -- imitating the Singapore government -- must be in place by end-September. Failure to comply could result in financial penalties of up to 1 million Singapore dollars ($782,500), the police said. In recent years, Singaporean authorities have intensified public education efforts against scamming, including approving mandatory caning of up to 24 strokes for serious scam offences.

The measures are part of a series of new and enhanced "codes of practice" issued by the Online Criminal Harms Act Office to guard against scams and malicious cyber activities, with the others covering social media platforms and e-commerce services.