Security Advisory

Beware of Rising Impersonation Calls, SMSes and Email Phishing Scams

Created: 27 January 2022
Updated: 1 April 2026

In view of the recent rise in impersonation calls* and phishing scams** in Singapore, we would like to remind our patients, partners and members of public who use NUHS and our institutions' services to stay alert and vigilant.

How to protect yourself

Here are some steps to protect themselves against fraud:

1. Do not answer unsolicited calls or reply to unknown SMSes or emails.
2. Do not divulge sensitive information or login credentials to anyone.
3. Enter login credentials or personal information only on the NUHS App or our official websites.
4. Always check that you have entered the correct website address. Do not click on links from unsolicited SMSes and/or emails to get to our official websites.
5. Visit our official websites to verify if information or requests are legitimate.

Please report to us immediately should anyone receive unusual calls, SMSes or emails purporting to be from NUHS and its affiliated institutions that ask for sensitive information: www.nuhs.edu.sg/about-nuhs/contact-us.

Common scam tactics to watch out for

Be cautious of unexpected requests involving:

• Banking or financial information changes;
• Updates to personal or employment details;
• Urgent payment or fund transfer requests;
• Requests to bypass normal verification or approval processes.

Red flags may include:

• Emails from external addresses impersonating NUHS staff;
• Urgent requests that pressure you to act quickly;
• Requests to send sensitive information via email or messaging platforms; and
• Poor grammar or unusual phrasing from someone claiming to be a known contact.

Verify before you act

• Always verify requests through official NUHS communication channels, even if they appear to come from a familiar source.
• Contact the person directly using known contact details, rather than reply links or phone numbers provided in suspicious messages or emails.
• When in doubt, check with the relevant NUHS department before taking any action for any financial or personal data requests.

Legitimate requests for banking or personal information changes will always follow proper institutional procedures and verification processes.

If you suspect a scam

If you are unsure if something is a scam or suspect you are a victim of a phishing scam, call the 24/7 ScamShield Helpline at 1799 and change your passwords immediately.

Thank you.

^*Impersonation: Scammers pose as friends, renowned companies, or authority figures (e.g. job recruiters, police, or government officials) to trick victims into parting with money or giving up sensitive information such as banking details or personal data. Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

^**Phishing scam: Some SMSes or emails may have headers or email addresses that appear to be sent officially, and may include links to fake websites (mimicking real ones) created by scammers. Victims who enter their log-in information and one-time passwords (OTP) into fake websites can quickly have their accounts breached and their savings or information stolen. The fake SMS messages/emails may also appear in the same message thread as previous, genuine messages using a technology called spoofing.