Common Singapore Tax Scams and How to Spot Them 2026
Your phone buzzes with a message saying you owe a tax penalty and must pay within hours. Your heart skips. Did you miss something on your return? That moment of panic is exactly what scammers want. IRAS tax scams keep appearing in Singapore, and many look convincing. Fake emails borrow official-looking layouts. Fake websites copy real login pages. Some callers even claim to be tax officers. This guide explains how these scams work, the warning signs that give them away, and the steps you can take to stay safe.
You will also learn what to do if you already clicked a link or shared your details. The advice here is based on notices from IRAS and the Singapore Police Force. Read it once, and you will spot most fakes in seconds.
Common Singapore Tax Scams – Quick Summary
- Scammers pretend to be IRAS through emails, SMSes, calls, and fake websites.
- IRAS does not ask for banking credentials or card details by email or SMS for refunds.
- Refunds go to your registered bank account or linked PayNow, never to a card.
- Official government websites end in .gov.sg and use HTTPS.
- Never click links in unexpected messages. If unsure, call the ScamShield Helpline on 1799.
How IRAS Tax Scams Usually Work
Most IRAS tax scams follow a similar pattern. First, the scammer creates fear or excitement. A fake penalty notice makes you worry. A fake refund makes you hopeful. Both push you to act fast. Second, the message gives you a link or a phone number. The link leads to a fake website that copies a government page. Third, the site asks for sensitive details such as your Singpass login, bank login, card number, or one-time password (OTP). Once you enter them, the scammer can take money from your account.
Victims often discover the scam only when they notice unauthorised transactions or check with IRAS. The stories keep changing, so no single script covers every case. Even careful people get caught, because the pages look polished. Remember one rule: genuine agencies do not pressure you to share banking credentials through email, SMS, or a phone call. If a message creates urgency, slow down and verify it first.
Common Scam Types at a Glance
IRAS and the Police have warned about several scam types. The table below summarises the main ones.
| Scam type | How it reaches you | What the scammer wants |
|---|---|---|
| Fake tax refund | Email or SMS | Card details and OTP |
| Fake penalty notice | A click on a harmful link or a payment | |
| Fake tax review | SMS or email | Singpass and bank login details |
| Fake IRAS officer call | Phone call | Money or bank details |
| Fake stamp duty or deposit request | Payment of a made-up fee |
Penalty emails often claim you under-declared your income. The links inside may lead to a phishing site or install malware on your device. Tax review messages push you to finish an urgent check. Scammers also mix these tricks, so one message may combine several. The sender name can say IRAS and the logo can look real, but neither proves the message is genuine. Always judge the message by what it asks you to do.
How to Check If a Message Is Genuine
Use these steps whenever a message mentions IRAS, tax, or a refund.
- Pause. Do not click, call, or reply straight away.
- Look at the sender. Check the email address or phone number, not just the display name.
- Read the request. Any message asking for card details, OTPs, or bank passwords is a red flag.
- Check the link. Official government websites end in .gov.sg and use HTTPS. Better still, type the address yourself.
- Verify in your account. Open the myTax Portal by typing its address yourself, then look for notices or refund updates.
- Ask for help. Call the ScamShield Helpline on 1799 or visit scamalert.sg if you are still unsure.
Notice the common warning signs along the way: urgent deadlines, threats of penalties, unexpected refunds, spelling mistakes, and links that look slightly off. Also remember that IRAS asks taxpayers to use myTax Mail for correspondence, so a random SMS asking you to log in is suspicious.
Example: A Fake Tax Refund Email
Example: Mei Ling receives an email titled “Tax Refund Available”. It says she is owed S$412.50 and must claim it within 48 hours. The email contains a button that opens a page with a government-style header. The page asks for her card number, expiry date, and the OTP sent to her phone.
Mei Ling notices three red flags. The refund was unexpected. The deadline is tight. IRAS refunds are not sent to cards, so a request for card details makes no sense. She closes the page, opens the myTax Portal by typing the address, and finds no refund notice. She then deletes the email and calls the ScamShield Helpline on 1799 to confirm.
Mei Ling lost nothing. Staying calm made the difference. Had she entered her card details and OTP, the scammer could have charged her card within minutes. This is a made-up example, but it matches the pattern described in real advisories.
Common Mistakes to Avoid
Even careful people slip up when a message feels urgent. Watch out for these mistakes.
- Trusting the sender name. Scammers can make a message appear to come from IRAS.
- Clicking first and thinking later. One tap on a bad link can lead to a fake login page.
- Sharing an OTP. An OTP is meant for you alone. Never read it out or type it on a page you reached from a message.
- Calling the number in the message. Look up contact details yourself instead.
- Staying silent after a mistake. Reporting quickly gives your bank and the Police a better chance to act.
- Forwarding scary messages to friends without a warning. Add a note that it is a suspected scam.
The common thread is speed. Scammers rely on you acting before you think. Taking one minute to verify removes most of their advantage. If a message is real, it will still be there after you check.
What to Do If You Fall for a Scam
Act quickly if you shared details or made a payment. Speed matters.
- Call your bank right away to report and block fraudulent transactions.
- Make a police report.
- Change passwords for any account you entered on the fake page.
- Keep screenshots of the message, website, and any payment.
- Use the ScamShield app to filter future scam calls and SMSes.
- Warn family and friends, especially older relatives.
Do not feel embarrassed. Scammers copy real pages so well that many sensible people have been caught. The most important thing is to move fast. Banks and the Police can only help if they hear about the problem early. If you are unsure whether something is a scam, the Anti-Scam Helpline on 1800-722-6688 and the website scamalert.sg offer guidance. You can also check your recent bank statements for charges you do not recognise over the next few weeks. Report any unusual activity straight away, even if the amount looks small.
Frequently Asked Questions
Does IRAS send emails asking for card details?
No. IRAS does not ask taxpayers for banking credentials or card details through emails or SMSes for refunds. Refunds are credited automatically to your registered bank account or a PayNow account linked to your NRIC, FIN, or UEN. If a message asks for card details, treat it as a scam.
How can I tell if a website is genuine?
Check the address carefully. Official Singapore government websites end in .gov.sg and use HTTPS, shown by a lock icon. Do not rely on the logo or design alone, because scammers copy them easily. When in doubt, type the web address yourself instead of following a link from a message.
What should I do if I get a call from a “tax officer”?
Hang up. Government officials will never ask you to transfer money, share bank login details, install apps from unofficial stores, or transfer your call to the Police. Then call the 24/7 ScamShield Helpline on 1799 if you are unsure. Never call back using a number given by the caller.
Can IRAS tax scams reach me by SMS?
Yes. Past advisories describe SMS messages with IRAS in the sender name that urged people to finish a tax review through a link. The link led to fake Singpass and bank login pages. IRAS does not send SMSes with links asking you to log in with your credentials.
Where can I report a suspected scam?
Call the Anti-Scam Helpline on 1800-722-6688 or visit scamalert.sg for guidance. If you lost money, contact your bank immediately and make a police report. For quick checks on suspicious calls or messages, the ScamShield Helpline on 1799 is available 24 hours a day.
Conclusion
IRAS tax scams rely on fear, speed, and convincing design. The good news is that a few habits defeat most of them. Treat unexpected tax messages with suspicion. Never share card details, passwords, or OTPs. Remember that official government sites end in .gov.sg, and refunds do not go to cards. When in doubt, stop, type the official address yourself, and check your account directly. Share these tips with family members who may be less familiar with online scams. Your next step is simple: save the ScamShield Helpline number, 1799, in your phone today, so help is one tap away the next time a suspicious message arrives.
Official Sources
- IRAS Scam Advisory: https://www.iras.gov.sg/news-events/announcements/scam-advisory
- IRAS Refunds: https://www.iras.gov.sg/quick-links/refunds
- Joint Police and IRAS Advisory on Phishing Scams: https://iras.gov.sg/news-events/newsroom/police-iras-advisory-on-phishing-scams-involving-iras-and-singpass
