Singapore’s police force has issued three new regulatory codes requiring major messaging and social media platforms operating in the city-state to actively block scam activity, with compliance deadlines running from September 2026 through January 2027. The rules, issued under the Online Criminal Harms Act, mark one of the region’s most detailed regulatory efforts targeting scam distribution across messaging, social media and e-commerce channels.
Key Facts At A Glance
- The Singapore Police Force (SPF) issued three Codes of Practice (COPs) under the Online Criminal Harms Act (OCHA) on August 17, 2026, publicly announced August 18
- A new Messaging Code covers seven services: WhatsApp, Telegram, WeChat, Apple iMessage, Apple FaceTime, Google Messages and Google Meet
- A new Social Media Code applies to Facebook, Instagram and TikTok; an enhanced E-Commerce Code applies to Carousell, Facebook Marketplace and Facebook Business Pages
- Most requirements take effect January 31, 2027; anti-impersonation measures against Singapore government spoofing take effect earlier, on September 30, 2026
- SPF data shows WhatsApp and Telegram accounted for about 23% of scam cases in Singapore in 2025, while social media platforms accounted for about 30%, with Facebook alone linked to about 18%
- Non-compliance can bring a fine of up to S1million,plusuptoS100,000 for each day the violation continues after conviction
- SPF reported that scam cases on designated online services fell by about 37% between 2024 and 2025 following earlier safeguards
What The Messaging Code Requires
Under the new Messaging Code, the seven designated services must make it harder for unknown contacts to reach Singapore users. Platforms must obtain user consent before an unfamiliar contact can add someone to a group or channel, and must warn users about suspicious accounts, including details such as when and in which country the account was created. Users must also be given the ability to silence, filter or block communications from contacts outside their existing list. SPF said investment scams are the primary concern behind this code, since scammers frequently approach victims through accounts with no prior relationship to offer investment products. Because impersonation of Singapore government officials is treated as a more urgent risk, messaging platforms must implement anti-spoofing safeguards for official profile names and images by September 30, 2026, ahead of the broader January 2027 deadline.
Advertiser Verification For Social Platforms
The Social Media Code, which replaces an earlier Online Communication Code, applies to Facebook, Instagram and TikTok and centers on advertising controls. Platforms must verify advertisers’ identities against government-issued records and must not publish advertisements for financial products or services unless the advertiser is licensed by the Monetary Authority of Singapore or another relevant authority, or is acting under the authority of a licensed entity. Platforms are also required to screen for techniques such as URL cloaking, where the page shown during ad review differs from the page a user ultimately reaches, and to promptly remove suspected scam advertisements already in circulation. A parallel enhancement to the existing E-Commerce Code will require Carousell, Facebook Marketplace and Facebook Business Pages to strengthen login verification for new or unrecognized devices.