The Immigration and Checkpoints Authority (ICA) has temporarily suspended its online service for changing residential addresses after scammers used compromised Singpass accounts to alter addresses without victims' knowledge.
The home addresses of about 80 people were changed online without their knowledge, after scammers had obtained their NRIC and Singpass details. Scammers had used compromised Singpass accounts to circumvent several security safeguards in the Immigration and Checkpoints Authority's (ICA) change-of-address system. But they've increased recently, and it appears this is one method for crime syndicates to gain access to and control the victims' Singpass accounts.
On Saturday (Jan 11), ICA said it started investigating cases of unauthorised changes of residential addresses in September 2024. All NRIC holders are required to report a change of address within 28 days of moving into a new residence, whether it is located in or outside Singapore. Anyone who reports a false residential address can be fined up to $3,000, jailed for two years, or both. It is also an offence if a user does not fix the new address sticker to the NRIC. To make it convenient for the public to update the authorities on their new address, ICA had in 2020 introduced a feature on their website to allow them to do it online, without needing to go to the police station. To verify the new address, applicants input a unique PIN sent by mail to their new address. Once confirmed, an instant acknowledgement will be sent to indicate the change of address is successful. Those who are not tech-savvy or unable to submit applications through the online service can appoint proxies, like a friend or family member who are Singpass holders, to submit the applications on their behalf through the 'Others' module on the e-service. To complete the process, the proxy must also obtain and enter the PIN mailed to the applicant's new address. But in September 2024, several unconnected cases of unauthorised change of address were reported to ICA. ICA said it so far found about 80 unauthorised attempts, 75 per cent of which were successful in changing the addresses. It said this is believed to have occurred after the perpetrators used stolen or compromised Singpass accounts to change the residential address of the victims through the 'Others' module of the e-service. To do this, the scammers would have previously acquired both the victim's NRIC number and its date of issue, to input these details into the e-service. But the criminals can then use this method to reset the victims' Singpass passwords. For example, if someone forgets his Singpass password, he'll request for a new one to be sent to his home address. So now, the criminals could pretend to be the victim and ask for a new password to be sent to the new address they listed. Once the password has been sent, the criminals can access the victim's Singpass account. Said ICA: 'It is likely that the perpetrators are using stolen or compromised Singpass accounts and letter boxes of third parties to generate more mule accounts to use for scams and other cybercrimes.' ICA has temporarily removed the change of address function from its website to implement additional security measures to prevent further abuse. It will also conduct a review in the next two days and will likely resume the service on Jan 14, it said. The authorities are looking to implement additional measures, such as integrating face verification technology into the Singpass log-in for the e-Change of Address service. ICA said this will minimise the risk that a perpetrator can use the stolen Singpass account of a third party to access the service to change a victim's address. ICA reminded the public to check that their registered address has not been changed without their knowledge
ICA Singpass Scammers Cybercrime Unauthorized Access Security Measures
Singapore Latest News, Singapore Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
ICA suspends online change of address service after hit by scammersThe home addresses of about 60 people were changed online without their knowledge, after scammers obtained their NRIC and Singpass details. Scammers had used compromised Singpass accounts to circumvent several security safeguards in the Immigration and Checkpoints...
Read more »
ICA uncovers 80 cases of unauthorised address changes on web portal, suspends online service for reviewSingapore's immigration authority has uncovered about 80 cases of unauthorised attempts to change residential addresses via its web portal. ICA says there has been no indication that foreign actors were involved, and all the perpetrators in these cases are suspected to be local.
Read more »
Singapore Suspends Electronic Address Change Service After Unauthorized AccessICA suspends eCOA service due to 80 cases of unauthorized address changes by using stolen Singpass accounts. Additional security measures are being implemented to prevent further abuse.
Read more »
ICA suspends e-service allowing change of residential address after 80 cases of unauthorised attempts by scammersSINGAPORE - The home addresses of about 80 people were changed online without their knowledge, after scammers had obtained their NRIC and Singpass details. Scammers had used compromised Singpass accounts to circumvent several security safeguards in the Immigration and Checkpoints Authority's (ICA) change-of-address system.
Read more »
Malaysian Immigration Department Surprises ICA Officers with New Year CakeIn a heartwarming gesture of goodwill, the Malaysian Immigration Department presented a surprise cake to their Singaporean counterparts at the ICA Woodlands checkpoint to celebrate the New Year.
Read more »
Malaysian Immigration Department Surprises ICA with New Year CakeIn a heartwarming gesture of goodwill, the Malaysian Immigration Department presented a celebratory cake to their Singaporean counterparts at the ICA Woodlands checkpoint on New Year's Day.
Read more »