How to Spot and Avoid the Latest IRAS Phishing Scam

The Inland Revenue Authority of Singapore (IRAS) has warned about a new phishing scam aimed at taxpayers. These phishing scams trick someone into providing confidential personal and financial information. By understanding the common tactics scammers employ and taking proactive measures, you can protect yourself from falling victim to such scams.

Understanding Phishing Scams

Phishing is a type of social engineering attack in which scammers trick people into providing personal or financial information. They often do this by posing as an authorized entity, such as a government department, bank, or online retailer. In this particular set of phishing scams targeting IRAS, the scammers pretend to be IRAS officers, convincing unsuspecting taxpayers to click on malicious links or open attachments.

IRAS Warning On Phishing Scam: Common Tactics Used

• Urgent Messages: Scammers often create a sense of urgency by claiming immediate action is required to avoid penalties or legal consequences. They may use threats or intimidation tactics to pressure victims.
• Fake Email: Your email inbox could contain phoney phishing emails that claim to be from IRAS official email addresses, but they will often use broken grammar, suspicious link(s), or have vague or generic details or actions that you need to take.
• Requesting Sensitive Information: Scammers may request other sensitive information, such as your NRIC number, date of birth, bank account information, or online bank login details.
• Malicious Links and Attachments: Clicking on malicious links or opening attachments can lead to malware infections or further phishing attempts.

IRAS Warning On Phishing Scam: How to Spot a Phishing Scam

• Check the Sender: Always pay close attention to the sender’s email address. Legitimate companies will usually have a company address. 
• Look For Suspicious Language: Phishing emails typically contain grammatical errors, typos, or strange language. 
• Do Not Respond To Urgency: Pay close attention to emails and requests for urgency. Legitimate organizations will typically give you sufficient time to respond. 
• Hover Over Links: Hover your mouse over a link before clicking on it to determine what the URL contains. If the URL looks suspicious or does not match, do not click on it. 
• Check for Official Websites: If you receive an email requesting you to visit a website, verify the URL by typing it directly into your web browser. Do not click on any links provided in the email.

Must Read: IRAS Tax Filing Tips For Singapore 2025

IRAS Warning On Phishing Scam: Additional Tips for Protecting Yourself

1. Be Cautious of Unexpected Calls:

• Phishing scammers may also attempt to contact you by phone. Be wary of unsolicited calls, especially those claiming to be from IRAS. If you receive a call from someone claiming to be from IRAS, verify their identity by calling the official IRAS contact number on their website.

2. Avoid Sharing Sensitive Information Over the Phone or Email:

• Do Not Disclose Information over the Phone or Email:
• You should only give personal and/or financial information on the phone or online via email if you are the one contacting them and have confirmed it is the person they claim to be.
• A legitimate organization would never ask someone for information by soliciting phone calls or emails.

3. Use a Secure Internet Connection:

• When accessing your online accounts or conducting financial transactions, ensure you use a secure internet connection. Avoid using public Wi-Fi networks, as they can be vulnerable to hacking.

4. Familiarize Yourself with IRAS’s Communication Channels:

• Learn about IRAS’s official communication channels. This will help you identify legitimate communications from the organization.
• IRAS typically communicates with taxpayers through official letters, emails, or phone calls from known contact numbers.

5. Regularly Monitor Your Accounts:

• You should monitor your bank accounts, credit card statements, and other financial records for unauthorized activity.
• Report any suspicious transactions to your financial institution immediately.

6. Stay Informed:

• Stay updated on the latest phishing scams and security threats by subscribing to security alerts from reputable sources.
• Follow IRAS’s official social media channels for important announcements and warnings.

IRAS Guidelines to Protect Against Phishing Scams

The Inland Revenue Authority of Singapore (IRAS) has provided guidelines to help taxpayers protect themselves from phishing scams:

Official Communication Channels:

• IRAS Website: Visit the official IRAS website for accurate and up-to-date information.
• IRAS Contact Center: Contact IRAS through their official contact centre number to verify any information or concerns.
• IRAS MyTax: Use the IRAS MyTax portal to securely access your tax information and communicate with IRAS.