First reading of the Scams (Countermeasures) and Other Matters Bill
4 August 2026
1. The Ministry of Home Affairs (“MHA”) introduced the Scams (Countermeasures) and Other Matters Bill (“the Bill”) for First Reading in Parliament today. The Bill will amend the Protection from Scams Act, Online Criminal Harms Act, and other legislation to strengthen Singapore’s levers to detect, disrupt and deter scams.
2. The key amendments in the Bill will:
(a) Enable and safeguard scam-related information exchange between the Police and service providers;
(b) Strengthen application of the Facility Restriction Framework to restrict the provision of services to identified persons;
(c) Introduce new offences to deter the misuse of online accounts;
(d) Enhance the Online Criminal Harms Act (OCHA); and
(e) Enhance the effectiveness of Police operations.
Enable and Safeguard Scam-Related Information Exchange between the Police and Service Providers[1]
3. Scammers and mules often use accounts provided by different service providers, leaving behind indicators of scam activity that could help identify and disrupt their operations. However, without consistent information-sharing mechanisms, suspicious activity detected by one service provider may not be shared systematically with others. This can result in fragmented efforts to disrupt scams.
4. To facilitate such information exchange, MHA announced during the 2026 Committee of Supply Debate that HTX (Home Team Science and Technology Agency) and the Police are developing a platform known as the National Scams List (NSL).
5. To enable and safeguard scam-related information exchange between the Police and service providers through the NSL and other platforms, and to support necessary actions to disable accounts where required, the Bill will empower the Police to issue the following orders to service providers:
(a) A Disclosure Order to require a service provider to provide information relating to specified accounts and scam-related activities, including information necessary to prevent or disrupt scam-related offences.
(b) An Account Disabling Order (ADO) to require a service provider to disable an account specified in the order or disable accounts that meet specified disabling conditions prescribed by the Police.[2] An account subject to an ADO will be disabled for up to 30 days. The ADO may be extended once, for up to 30 more days.
6. Persons whose accounts have been disabled pursuant to an Account Disabling Order may appeal against any decision in relation to the Account Disabling Order to the Commissioner of Police, whose decision is final.[3] The Order will remain in effect while the appeal is being considered.
Strengthen Application of the Facility Restriction Framework to Restrict the Provision of Services to Identified Persons
7. Since October 2025, the Government has rolled out the Facility Restriction Framework. As of 30 June 2026, 1,423 money mules, 1,439 SIM card mules, and 53 corporate mules have been placed under the Framework.
8. Under the Framework, scam mules may face restrictions on access to financial, telecommunications and/or Singpass services if they:
(a) Have been warned, issued with composition sums, prosecuted or convicted of mule-related offences; or
(b) Are under investigation for mule-related offences and are assessed to be at risk of further facilitating scams.[4]
9. Thus far, compliance with the Framework has generally been voluntary or implemented through sector-specific levers. To strengthen the application of the Facility Restriction Framework, the Police will be empowered to issue a Service Limitation Order to require a service provider to restrict the provision of service(s) to an identified person for the purpose of countering scams-related offences.[5] Restrictions to scam-enabling services may be imposed on an identified person for up to 3 years.
10. Persons who are subject to restrictions pursuant to a Service Limitation Order may appeal against any decision in relation to the Service Limitation Order to the Commissioner of Police, whose decision is final.[6] The Order will remain in effect while the appeal is being considered.
New Offences to Deter the Misuse of Online Accounts
11. In 2024, the Government introduced new offences to deter the misuse of SIM cards, Singpass accounts and bank accounts for scams. Building on these efforts, the Bill introduces new offences to deter the misuse of online accounts for scams:
(a) Unlawful provision of personal information for the registration of online accounts for criminal activity;
(b) Possession of online accounts registered using another person’s personal information for criminal activity;
(c) Supplying of online accounts for criminal activity; and
(d) Receiving of online accounts for criminal activity.
12. These offences apply only to online accounts offered by online services designated under the OCHA.[7]
Enhance the Online Criminal Harms Act
13. Since the OCHA came into force in 2024, the Police have issued directions requiring online service providers to take down scam-related content, as well as Codes of Practice (COPs) and Implementation Directives (IDs) requiring designated online service providers to put in place anti-scam measures.
14. To strengthen the effectiveness of these levers, the Bill amends the OCHA to:
(a) Allow OCHA directions to be issued using a computer programme; and
(b) Introduce financial penalties for every instance of non-compliance with the OCHA COPs and IDs.
Allow an OCHA direction to be issued using a computer programme
15. The Bill amends OCHA to enable the authorities to issue directions at significantly greater speed and scale. Scammers can create large numbers of scam websites, accounts and advertisements within a short period, making it increasingly difficult for manual review processes to keep pace. Allowing directions to be issued through a computer programme will enable the Police to act more swiftly against such content, and better protect the public from scams. Safeguards will be put in place to ensure that the programme operates accurately, fairly and in accordance with the law. The Bill will also make clear who is responsible for the use of such computer programmes.
Introduce financial penalties for every instance of non-compliance with the OCHA COPs and IDs
16. The Bill introduces a framework for the Competent Authority to impose financial penalties on designated online service providers for non-compliance with COPs and IDs. For each instance of non-compliance, the Competent Authority may:
(a) Issue a financial penalty of up to S$10 million; or
(b) Direct the online platform to rectify the non-compliance through a Rectification Notice (RN) or a Compliance Order (CO).[8]
17. The Bill also creates criminal offences for non-compliance with RNs and COs:
(a) A person who has failed to comply with a direction to rectify a non-compliance will be liable on conviction to a fine of up to $10 million;[9] and
(b) In the case of a continuing offence, to a further fine not exceeding $300,000 for every day or part of a day during which the offence continues after conviction.
18. Before imposing any financial penalty, the Competent Authority will serve a written notice on the online service provider. The notice will set out the intended enforcement action and the timeframe within which the provider may submit representations, including reasons for the identified non-compliance. The Competent Authority will consider these representations before deciding whether to impose a financial penalty. The online service provider may appeal any financial penalty to the Minister for Home Affairs.
Supporting Police Operations
19. As the scam landscape evolves, the Government will continue to update its laws to enable effective Police operations. The Bill introduces two further sets of amendments.
(a) The Protection from Scams Act will be amended to provide specified officers with powers to request information relating to persons who must be notified of the issuance of a Restriction Order, including joint account holders. This will enable the Police to obtain the information needed to notify persons affected by the Restriction Order. This is currently not possible due to confidentiality obligations under the Banking Act.
(b) With the launch of Cyber Command, the Police intend to recruit civilians with the aptitude and skillsets to combat cybercrime. To enable this, the Police Force Act will be amended to allow for the appointment of Civilian Specialist Officers (CSOs), and to provide them with the powers needed to perform their investigation duties. These powers, which are similar to those provided to Commercial Affairs Officers, will include powers to search, arrest, seize and request documents. The Police may recruit and deploy CSOs in other domains in the future, if operationally necessary.
Conclusion
20. Scams are evolving rapidly, and Singapore’s laws must keep pace. The Scams (Countermeasures) and Other Matters Bill will strengthen Singapore’s ability to detect scam activity earlier, disrupt scam operations more quickly, and hold accountable those who enable or facilitate scams. Together with industry and community partners, the Government will continue to take firm, coordinated and proportionate action to protect the public and preserve trust in Singapore’s digital environment.
[1] Service providers include financial institutions (e.g., banks, digital payment token service providers), telecommunications service providers providing telephone line accounts, providers of online services (including online accounts and related supporting services), and other providers prescribed under the legislation.
[2] Disabling conditions are scam-related indicators specified by the Police to identify accounts that may be facilitating scam-related offences. The offences for which an Account Disabling Order can be issued to a service provider will be prescribed through the subsidiary legislation.
[3] The Commissioner may designate a specified officer of or above the rank of Superintendent or equivalent to hear and determine the appeal in the Commissioner’s place.
[4] High-risk persons refer to individuals who, while under investigation for mule-related offences, demonstrate behaviour that suggests a continued likelihood of facilitating scam activities. This may include those who persist in applying for new facilities to facilitate scams while being investigated or those whose conduct indicates an intent to profit from providing such facilities to scam syndicates.
[5] The offences for which a Service Limitation Order can be issued to a service provider will be prescribed through the subsidiary legislation.
[6] The Commissioner may designate a specified officer of or above the rank of Superintendent or equivalent to hear and determine the appeal in the Commissioner’s place.
[7] Designated online services consist of Facebook, Instagram, WhatsApp, Telegram, WeChat, TikTok, Carousell, Google and Apple.
[8] A RN or a CO may be issued to an online platform when it is assessed to have not complied with a COP or an ID respectively.
[9] Under Section 51(3) OCHA, a person who is guilty of an offence of non-compliance with an RN shall be liable on conviction to a fine not exceeding $1 million and, in the case of a continuing offence, to a further fine not exceeding $100,000 for every day or part of a day during which the offence continues after conviction.
