Combatting scams: Messaging platforms must restrict unsolicited contact, prevent spoofing of govt officials

To curb the proliferation of online investment scams, messaging platforms must introduce measures that make it harder for an unknown person to contact another user.

The seven designated messaging and conferencing services — WhatsApp, Telegram, WeChat, Apple iMessage and FaceTime, as well as Google Message and Google Meet — must also prevent the impersonation of Government officials by fake accounts taking advantage of profile names or pictures, where applicable. 

The police, which issued new codes of practice under the Online Criminal Harms Act on Monday (Aug 17), said in a news release that 52 per cent of scam cases reported in 2025 occurred on designated online services.

WhatsApp and Telegram accounted for about 23 per cent of all scam cases, and about 18 per cent of Government officials impersonation scams (GOIS) took place through WhatsApp that year.

Urgent action is needed to address GOIS cases, police said, and the seven messaging platforms must comply with requirements to prevent the spoofing of officials by Sept 30.

The remaining requirements under the code includes allowing users to consent before they can be added by an unknown contact into a chat group or channel.

They also involve the display of warnings or risk indicators for unknown or suspicious accounts, and the introduction of an option for users to silence, filter or block messages or calls originating from unknown accounts or numbers.

Designated messaging services must implement the necessary systems, processes and measures to comply with the above requirements by Jan 31, 2027.

Protecting against scams on social media, e-commerce platforms

The police said another 30 per cent of total scam cases last year were perpetuated on social media platforms such as Facebook, Instagram and TikTok.

Facebook alone accounted for about 18 per cent of all cases.

An area of concern is the advertisements of scams, the police said.

"Social media platforms profit from the publication of advertisements and must ensure that the content in the advertisement is not in furtherance of a crime."

The new code of practice for social media services will require measures that prevent the publishing of any advertisement if there is reason to suspect it is facilitating a scam, and the prompt take down of suspected scam advertisements, including those reported by users.

The platforms must also verify the identities of advertisers by conducting checks against Government issued records and disallow the publication of advertisements offering financial services and/or products, unless the advertisers are licensed by Singapore authorities.

Meanwhile, the code of practice for e-commerce services Carousell, Facebook Marketplace and Facebook Business Pages will be enhanced to mandate stronger consent measures when allowing logins from new or unrecognised devices.

Online services designated under the respective codes must comply with the respective requirements by Jan 31, 2027.

Service providers who do not comply with a requirement may be handed a rectification notice.

If they fail to comply with a rectification notice without reasonable excuse, they could be fined up to $1 million.

Under the new Scams (Countermeasures) and Other Matters Bill tabled in Parliament on Aug 4, the maximum financial penalty could be increased to $10 million for each instance of non-compliance with anti-scam obligations.

The police also urged the public to remain vigilant against online criminal harms and continue taking precautions when interacting and transacting online.

[[nid:741806]]

lim.kewei@asiaone.com