The Cyber Security Agency said ScamShield blocked more than 12,000 short-message links over the weekend that pretended to offer National Environment Agency mask vouchers or Ministry of Health haze subsidies, piggybacking on genuine government announcements as Singapore’s air quality stayed in the unhealthy range.
CSA encouraged Android and iOS users who have not updated ScamShield since August to do so before the next PSI spike, because rule packs ship separately from operating-system security patches. Singtel, StarHub and M1 said they were blocking known smishing domains at the network layer in addition to app-level filtering, though criminals rotate URLs faster than blocklists refresh.
Community centres in the northeast scheduled lunch-hour talks on spotting government impersonation, pairing SPF officers with CSA staff to walk residents through authentic NEA pages. The goal is to shrink the pool of victims before losses climb high enough to trigger another weekend headline.
CSA issued the tally on Monday alongside a reminder that official haze support never arrives through clickable SMS links. Real N95 distribution, when the 24-hour PSI crosses 200 into the very unhealthy band, is coordinated through grassroots organisations and vending machines at selected MRT stations — not through messages asking residents to “confirm delivery addresses.”
What the lures looked like
Investigators said many messages reused NEA’s haze microsite branding in preview images while pointing to domains registered only days earlier. Others cited MOH’s activation of clinic subsidies from 12 October and urged recipients to pay a S$1 “registration fee” through PayNow to unlock a S$10 consult cap. No such fee exists; eligible Singaporeans receive subsidised care by presenting their NRIC at participating Public Health Preparedness Clinics or polyclinics.
The Singapore Police Force’s Anti-Scam Centre paired with CSA to push an in-app banner inside ScamShield urging users to forward suspicious texts to 7726. Banks including DBS, OCBC and UOB said they placed extra friction on new PayNow recipients flagged for impersonation of government agencies.
How to verify real help
NEA publishes PSI readings and health advisories at haze.gov.sg and on the myENV app. MOH’s subsidy details sit on moh.gov.sg with a list of qualifying respiratory conditions. If a message includes a shortened URL or requests banking credentials, treat it as fraudulent even when the air outside looks frightening.
Employers distributing N95 kits to outdoor staff should source masks through licensed suppliers rather than WhatsApp forwards, CSA added. The agency is working with telcos to throttle SMS bursts from overseas gateways that surged once central PSI readings approached 192 on Friday evening.
Haze seasons always produce charity scams; this year’s twist is how quickly fraudsters mirrored real task-force triggers. Blocking 12,000 messages is not a victory lap — it is a warning that the next 12,000 may arrive before the wind shifts.