Singapore is significantly strengthening its arsenal against digital fraud with sweeping new legislation that targets the infrastructure criminals use to operate online scams. The Scams (Countermeasures) and Other Matters Bill, introduced in Parliament on Tuesday, August 4, represents a major escalation in the city-state's fight against a criminal ecosystem that has metastasized across social media and e-commerce platforms, costing citizens billions of dollars since 2019.
The legislation introduces criminal liability for account mules—individuals who rent out or sell their online profiles on platforms including Carousell, TikTok, Telegram, Facebook, Instagram and WhatsApp to criminal syndicates. Previously, Singapore had laws addressing traditional money mules and those selling SIM cards or Singpass credentials, but a critical gap existed in prosecuting those supplying social media and marketplace accounts. This oversight allowed scammers to operate with relative impunity on these platforms, which have become their preferred channels for recruiting victims and moving money. The new law closes this vulnerability by criminalizing the supply, receipt, possession and provision of personal information used to create such accounts for criminal purposes.
Individuals convicted of serving as online account mules face substantial penalties: fines reaching S$10,000, imprisonment of up to three years, and caning of up to 12 strokes. These sentences place the offence at the serious end of Singapore's criminal justice spectrum, signaling the government's determination to disrupt the supply chain of compromised accounts that enable scams. The penalties apply equally to those who knowingly provide their own credentials and those who traffic in accounts, recognizing that both groups actively facilitate criminal operations.
The enforcement mechanisms targeting digital service providers have also been dramatically strengthened. Platforms and services that fail to comply with codes of practice and implementation directives now face maximum fines escalating from S$1 million to S$10 million, with daily fines for continuing breaches rising from S$100,000 to S$300,000. This tenfold increase reflects official frustration with platforms' sluggish responses to scam epidemics. Meta has already received two implementation directives, in September 2025 and January 2026, requiring specific anti-scam measures; police have credited these orders with reducing impersonation scams on Facebook, though challenges persist.
The scale of Singapore's scam problem provides the urgency driving these legislative changes. In 2025 alone, scams accounted for three in every five police reports, with victims losing S$913.1 million. Government impersonation scams more than doubled from 1,504 cases in 2024 to 3,363 in 2025, becoming the fifth most prevalent scam variant. Since 2019, cumulative losses have exceeded S$4 billion—a staggering sum that underscores how online fraud has evolved from an irritant into a national economic security issue. The sophistication and speed of modern scam operations have outpaced traditional enforcement, prompting regulatory innovation.
A critical innovation within the Bill empowers police to issue anti-scam directives through automated computer programmes, including those utilizing artificial intelligence. Scammers have adopted industrial-scale tactics, rapidly generating vast numbers of fraudulent sites, accounts and advertisements, rendering manual review processes obsolete. By deploying algorithmic detection and response systems, authorities can theoretically match the velocity of criminal operations. Police have pledged to implement safeguards ensuring algorithmic decisions remain accurate and equitable, though the mechanics of such oversight in real-time enforcement remain to be detailed.
The legislation introduces three new categories of police order targeting service providers such as banks, telecommunications companies and online platforms. Disclosure orders compel providers to furnish information about specified accounts and scam-related activities. Account disabling orders permit authorities to suspend suspicious accounts for up to 60 days (with a possible one-time 30-day extension). These tools feed into Singapore's National Scams List, an automated information-sharing system enabling real-time coordination between government agencies and private sector partners. By flagging culprits' identities, bank accounts, phone numbers and online accounts across the financial and telecommunications ecosystem, the system aims to interrupt money flows before funds can be laundered or moved.
The facility restriction framework, operational since October 2025, represents an earlier iteration of coordinated enforcement. As of June 30, the system had placed 1,423 money mules, 1,439 SIM card mules and 53 corporate mules under restrictions limiting their access to financial services, telecommunications accounts and Singpass systems. Previously, compliance relied on voluntary cooperation or sector-specific incentives. The Bill introduces a service limitation order, allowing police to mandate service restrictions lasting up to three years, formalizing what had been a collaborative approach and giving it statutory teeth.
For Malaysia and other Southeast Asian nations watching Singapore's regulatory evolution, the Bill offers instructive lessons about tackling transnational fraud networks. The region shares interconnected digital ecosystems where scammers operate across borders, recruiting mules and victims across multiple jurisdictions. Singapore's approach—combining tough criminal penalties for account mules, massive corporate fines for non-compliance, algorithmic enforcement tools and real-time inter-agency coordination—represents a comprehensive model balancing innovation with due process. The tenfold increase in platform fines particularly signals that service providers can no longer treat scam prevention as a secondary compliance matter; it has become a core operational requirement carrying severe financial consequences for failures.
The Bill's emphasis on automation and AI-driven enforcement also reflects recognition that human-scale policing cannot match the industrial pace of modern scam operations. However, this shift toward algorithmic decision-making in law enforcement raises important questions about transparency, appeal mechanisms and the risk of over-enforcement that regulators across the region will need to address. Singapore's pledge to implement safeguards is welcome, though specifics remain limited.
The legislation's focus on account mules recognizes a crucial vulnerability: scammers cannot operate without complicit individuals willing to monetize their online presence. By raising the criminal and financial costs of supply, the Bill targets scam syndicates at the point of infrastructure rather than chasing individual victims or perpetrators. This upstream approach, combined with real-time account disabling and financial flow interception, represents a more strategic response than reactive prosecution of scammers themselves, many of whom operate from jurisdictions beyond Singapore's reach.
As the Bill moves through Parliament toward passage, its implementation will likely influence anti-fraud approaches across Southeast Asia. The region faces an estimated US$50 billion in annual fraud losses, much of it enabled by the same account mule infrastructure Singapore is now criminalizing. Whether other nations adopt comparable penalties and coordination mechanisms will significantly impact scammers' operational calculus. For now, Singapore is betting that dramatically raising the cost of facilitating online fraud, combined with real-time enforcement tools and financial system coordination, can finally begin reversing a decade-long losing battle against scam syndicates.
