BackWhat is Cyber Security? 2026 Guide
In 2025, Singapore recorded 41,974 cybercrime cases with losses of S$913 million. Here's what cyber security means, the attacks targeting Singaporeans today, and exactly what you can do to stay protected.
How This Guide Helps You
Clear Definitions
Understand exactly what is cyber security and identify the various types of cyber security protecting your home.
Threat Analysis
Learn about common types of cybersecurity attacks—from phishing to malware—and how they work.
Protection Tips
Adopt cybersecurity best practices that provide 24/7 peace of mind for your digital lifestyle.
Why is Cyber Security Important?
Because the cost of ignoring it is real, immediate and personal.
In 2026, cyber security isn't a concern reserved for big corporations or government agencies.
It touches every Singaporean with a phone, a bank account, or a Wi-Fi router at home.
Your Data is a High-Value Asset
NRIC details, health records, and login credentials have high street value on dark web marketplaces. In 2026, these are frequently used to drain bank accounts or orchestrate sophisticated identity theft campaigns.
The Escalating Cost of Breaches
Beyond direct theft, breaches trigger PDPA fines and legal fees. Following 2025 trends, the average cost of a breach remains at record highs, making prevention a critical financial priority.
Securing the Remote Frontier
Home routers and personal devices are the new frontline. Securing your "work-from-home" infrastructure is no longer optional—it's a daily necessity to protect corporate and personal data silos.
2026 Compliance Standards
The amended Cybersecurity Act and PDPA mandates require significant breaches to be reported within three business days. Staying compliant ensures your data remains protected by law.
What the 2025 numbers actually tell us
Singapore's anti-scam efforts produced real results last year. The SPF Annual Scam and Cybercrime Brief 2025 confirmed the first-ever recorded decline in cases. But look at the median loss figure carefully:
The median loss per victim went up, even as total cases fell. Attacks are becoming more targeted and effective. And that 81.8% figure — victims who transferred money themselves after being manipulated — is the most important number on the table. Most successful attacks in Singapore don't involve sophisticated hacking. They involve a convincing story and someone who had no reason to suspect otherwise.
Types of Cyber Security Attacks in Singapore
These are the attack types most commonly targeting Singaporeans right now, with local data and real examples.
Attackers impersonate legitimate organisations — your bank, SingPass, IRAS, a courier — to trick you into clicking a malicious link, entering login credentials, or authorising a payment. Per the CSA Cyber Landscape 2024/2025, phishing cases surged 49% in 2024. Banking, government agencies and e-commerce are the most spoofed.
The newer and more alarming development: 12% of phishing emails now contain AI-generated content — better grammar, convincing tone, personalised details. These are significantly harder to spot than the "Dear Customer" scams of the past.
Attackers impersonate police officers, CPF staff, ICA officials or bank representatives to create fear or urgency that pressures victims into transferring money. Government official impersonation scams surged 123.6% in 2025 per the SPF Annual Brief, with elderly victims losing an average of S$37,000 each.
Some attacks now use deepfake video calls to impersonate executives or officials, making them even harder to dismiss as obvious scams.
Any software designed to infiltrate, damage or gain unauthorised access to your device — viruses, trojans, spyware, keyloggers and more. Fake banking portals delivered 70% of mobile malware during Singapore's 2024 scam wave, almost always through apps downloaded outside official stores.
Notable ransomware groups actively targeting Singapore include Black Basta, LockBit 3.0 and RansomHub, per SOCRadar's Singapore Threat Landscape Report 2025. These groups rent attack tools to affiliates, dramatically lowering the barrier to launch sophisticated campaigns.
Ransomware encrypts your files and demands payment — usually in cryptocurrency — to restore access. Ransomware attacks in Singapore increased 21% in 2024. Manufacturing (31.58%), wholesale trade (12.87%) and real estate (11.11%) are the most targeted sectors. Most infections involved old, known malware strains attacking devices that hadn't been updated — meaning they were entirely preventable.
A data breach occurs when attackers gain unauthorised access to stored personal data — through hacking, exploiting a third-party supplier, or social engineering. In April 2025, a vendor attack compromised approximately 8,200 DBS clients and 3,000 Bank of China customers. Neither bank was hacked directly. Their supplier was. Even when you're careful, your data can be exposed through a company you trust.
Attackers impersonate company executives, vendors or business partners via email to trick employees into making fraudulent payments. In 2025, BEC ranked as one of Singapore's top five scam types by total financial loss. Attacks use email addresses almost identical to legitimate ones — a single character substitution that's easy to miss.
8 Cyber Security Best Practices for Singaporeans
Ranked by impact
Beyond individual action, Singapore provides a comprehensive legal and regulatory framework to protect your digital footprint. Understanding your rights under these regulations is the next step in complete digital safety.
Singapore's Cyber Security Regulatory Framework
Singapore has one of the most comprehensive cyber security regulatory environments in Asia. Here's who governs what, and what it means for you.
How to Report Cybercrime in Singapore
If you've been targeted, speed matters. The Anti-Scam Command (ASCom) recovered S$140.5 million in losses in 2025 and helped avert a further S$348 million through early intervention. Reporting quickly genuinely improves your chances of recovering funds.
Frequently Asked Questions
In Singapore, banks and government agencies will never send you clickable links via SMS. Look for common "red flags": high pressure or urgency (e.g., "account will be suspended in 2 hours"), requests for your SingPass password or OTP, and unusual sender IDs. When in doubt, ignore the message and call the organization's official hotline directly.
Generally, no. Public Wi-Fi networks in malls or cafes are often unencrypted, meaning a hacker on the same network could potentially intercept your data. If you must access sensitive accounts, use a Virtual Private Network (VPN) to encrypt your connection, or simply switch to your mobile data (4G/5G), which is significantly more secure.
Your SingPass OTP (One-Time Password) is the final key to your digital identity. Sharing it is like handing over the keys to your house; it allows someone to access your CPF, IRAS, and health records. No legitimate official—including police officers or bank staff—will ever ask you for your SingPass OTP or password over the phone or via text.
Immediately disconnect your device from the internet (turn off Wi-Fi and mobile data). Use a different, clean device to change your passwords for critical accounts like email and banking. Contact your bank to place a temporary hold on your accounts and report the incident to the Singapore Police Force via their e-Services portal.
Yes. Developed by the National Crime Prevention Council and GovTech, ScamShield uses an AI-powered database to block known scam numbers and filter out phishing SMS. As of late 2025, it has helped block millions of scam attempts in Singapore. It is a "set and forget" tool that significantly lowers your risk of being targeted.
Stay Protected Against Evolving Cyber Threats
Good habits are the first line of defence, but the right tools provide 24/7 peace of mind. Explore StarHub’s suite of security services designed to protect your identity, your devices, and your finances.
24/7 call and SMS filtering to block scam contacts. Available to everyone with a 6-month free trial.
Real-time protection against malware, phishing, and unauthorised access across all your devices.
Financial protection covering losses from online fraud and identity theft in the event of an attack.
An all-in-one subscription bundling these essential protections for the whole household.
Disclaimer:
This content is provided for general information and convenience. While we take care in preparing our articles, readers should refer to official sources or professional advice for specific, up-to-date details.
