SINGAPORE - The home addresses of about 80 people were changed online without their knowledge, after scammers had obtained their NRIC and Singpass details.
Scammers had used compromised Singpass accounts to circumvent several security safeguards in the Immigration and Checkpoints Authority’s (ICA) change of address system.
Initially, only several cases were reported in 2024.
But they’ve increased recently, and it appears this is one method for crime syndicates to gain access to and control the victims’ Singpass accounts.
On Jan 11, ICA said it started investigating cases of unauthorised changes of residential addresses in September 2024.
All NRIC holders are required to report a change of address within 28 days of moving into a new residence, whether it is located in or outside Singapore.
Anyone who reports a false residential address can be fined up to $3,000, jailed for two years, or both. It is also an offence if a user does not fix the new address sticker to the NRIC.
To make it convenient for the public to update the authorities on their new address, ICA had in 2020 introduced a feature on their website to allow them to do it online, without needing to go to the police station.
They can access the e-service using Singpass.
To verify the new address, applicants input a unique PIN sent by mail to their new address. Once confirmed, an instant acknowledgement will be sent to indicate the change of address is successful.
Those who are not tech-savvy or unable to submit applications through the online service can appoint proxies, like a friend or family member who are Singpass holders, to submit the applications on their behalf through the “Others” module on the e-service.
That person must provide the applicant’s NRIC number and its date of issue to access the e-service.
To complete the process, the proxy must also obtain and enter the PIN mailed to the applicant’s new address.
But in September 2024, several unconnected cases of unauthorised change of address were reported to ICA.
And more cases recently surfaced.