online-security-you-banner-deskonline-security-you-banner-mobile

Be alert against scams

Cases of fraud and scam are on the rise. Scammers are using SMS and email phishing disguised as delivery notifications, targeting SingPost customers by tricking them into accessing fake websites to make payments or to provide sensitive personal information.

With such phishing attempts taking the lead, SingPost is taking extra measures to protect you. If you suspect you have received such emails, calls, or SMSes, please do not respond to it or click on any links. Find out more below how to verify the authenticity of such communications.

How to identify a scam attempt?

How do you tell if an SMS is a scam attempt?

How do you tell if an Email is a scam attempt?

Things to note

  • Payments to SingPost can only be done via the SingPost Mobile App, at SAM machines, or any post office—never through an online link
  • Your parcels can only be tracked on the SingPost Mobile App and singpost.com/track-items
  • We will never request for personal or banking information such as your full name, ID number, home address, and credit card details via SMS
  • We will never send you an SMS for non-delivery matters such as lucky draws, loans, or job offers
  • If we are unable to deliver an item to you, you will receive a physical Non-Delivery Advice to collect the item from a post office or POPStation.

Switching from SMS to Push Notifications

SingPost Mobile App - Push Notifications

Since 28 February 2022, we have switched from using SMS alerts to pushing out notifications from the SingPost Mobile App to inform you of service updates, for added security.

The SingPost Mobile App allows you to track and manage deliveries without having to worry about landing on unsuspecting phishing sites. The mobile app features the use of mobile biometric security features, as well as in-app pin verification and OTP-required account registration as added security measures.

How to enable Push Notifications?

Please note: We will still send you an SMS only for the following situations:

  • One-Time PIN for verification purposes or registration of SingPost Mobile App account
  • One-Time PIN when using POPStations and POPStations-related service updates
  • Post office digital queue tickets
  • Customer Service follow-up for selected customer feedback and accounts

Emails from SingPost

Limiting the use of clickable links in emails from SingPost

Emails are a common tool used by scammers in phishing attempts. A phishing email looks like an official email and tries to trick you into visiting a fake website and providing your personal and account information. It may also ask you to call a phone number and provide account information.

As such, we will be limiting the use of clickable links in our emails to you. While we continue to include crucial links in our emails with you, please note that the links will only point to the following websites operated by SingPost:

  • Singpost.com
  • Speedpost.com.sg
  • vPost.com
  • MySam.sg
  • SgLocate.com
  • Ezy2ship.net
  • Ezyparcels.com

The list above may change from time to time, and we will notify you when there are updates to the list. The latest list will be updated on this page.

Always verify that the link is legitimate

Scammers may continue to impersonate SingPost to trick you into clicking links and providing personal information or payment details to them. Hence, it is critical to learn how to verify that the links you click on are legitimate.

When clicking on the link, always double check the URL in the address bar of your browser. For instance, SingPost’s URL is always www.singpost.com. For example:

  • www.singpost.com
  • www.singpost.com/about-singpost
  • www.singpost.com/personal

It should NOT look like these:

  • www.singpost.com.xyz.com
  • www.singpost.net
  • www.singpost.org

For your added safety, we recommend that you copy the URL from the email and paste it into the browser manually. In addition, always check that the website is secure. To do so, identify the lock symbol next to the address bar.

Ensure that the URL is complete

Ensure that the URL is complete and contains the domains listed above. Be sure to look out for slight deviations in the domain name, such as 0 (zero) in place of the letter O, or use of the lowercase L for I.

For instance:

online-security__imgonline-security__img
online-security__img

General FAQ

All small items with tracking services, including Registered Service items, smartpac, Tracked Mail and Tracked Package will be delivered to the recipient’s letterbox instead. In the event the item cannot fit into the letterbox, we will deliver to the doorstep using the contactless delivery process (see below).

 

If we are unable to deliver it despite going up to the recipient’s door, we will attempt to contact the recipient to arrange for re-delivery. We will attempt up to two additional re-deliveries before returning the item to the sender.

SingPost does not initiate automated voice calls and our primary language of communication with customers is always English first, unless otherwise requested specifically by customer.

 

All official emails from SingPost will always be sent from email addresses ending with "@singpost.com". Emails will not be sent from personal email accounts such as Hotmail, Gmail, or other unfamiliar email domains. We also do not initiate any SMS asking you to claim a prize or to make any form of payments by clicking on a link in the SMS.

 

SingPost is working closely with the Singapore Police Force to take down fake websites and stop fake SMSes, to prevent the public from falling for such scams. You may lodge a police report if you receive such calls, email or SMSes.

 

If you have further questions, please call the SingPost hotline @ 1605.

 

You may also visit the National Crime Prevention Council's scamalert.sg website for more information about various types of scams.

Here are some general tips to protect yourself against a phishing attempt:

  • Beware of emails or SMSes asking you to click on links in them or to reply to them. Links may lead to a website, asking you to provide a confirmation or for your personal, financial, or other sensitive information.
  • It tends to also sound threatening, or urge you to act quickly.
  • When browsing websites, beware of pop-ups. Do not click on hyperlinks, download files, or open attachments unless you are sure that the source is legitimate. If in doubt, always check the URL of the page you are browsing to make sure you are on a bona fide website.
  • Beware of SMSes asking you to claim a prize or make any form of payments by following a hyperlink, especially if you have not participated in any lucky draws.
  • Look out for any security warnings displayed by web browsers and any security software. If there is a security warning, it is best to follow it.

To safeguard yourself, please be extra careful when you receive an unsolicited email or all other forms of communication asking you to provide confidential or personal information. Under no circumstances should you give personal information including credit card or banking details to third parties via email, letter, SMS, or phone until and unless you have verified the authenticity of such requests.

  • Check the full URL to ensure that the website is legitimate. SingPost’s URL is always www.singpost.com., For example:

    • www.singpost.com
    • www.singpost.com/about-singpost
    • www.singpost.com/personal

    It should NOT look like these:

    • www.singpost.com.xyz.com
    • www.singpost.net
    • www.singpost.org
  • All official emails from SingPost will be sent from addresses ending with "@singpost.com". They will not be sent from personal email accounts such as Hotmail, Gmail, or other unfamiliar email domains.
  • Our email replies are usually signed off with an officer's name, designation, and contact information.

If you have received a suspicious email, letter, SMS or phone call purportedly from SingPost, call SingPost's hotline at 1605 to verify the authenticity of such messages.

Do not respond to them or click on any hyperlink. In the case of suspicious phone calls, you should request for the caller’s full name, telephone number and department and validate this through our Customer Service hotline at 1605.

If you suspect that you have responded to a phishing scam with personal or financial information, you are advised to:

  • Lodge a police report;
  • Change the passwords or PINs on all your online accounts; and
  • Contact your banks to stop any transactions.

Push Notifications FAQ

Push Notifications are alerts sent to you directly from the SingPost Mobile App. These alerts will also be stored in your Notifications Inbox within the SingPost Mobile App for easy reference.

 

Push Notifications to be received such as delivery status updates, as well as alerts on duty and/or GST payment if you are expecting an international parcel to be sent to you. From time to time, we may also send other important information to you through the SingPost Mobile App.

Push Notifications will be the default channel of notifications from SingPost. For exceptional requests, please contact us either through our Online Contact Form or call us at 1605.

On the home page, look for your Notifications Inbox, denoted by a bell icon.

 

You may also edit and delete all notifications in your Notifications Inbox by selecting the bin icon on the top right corner.

Yes, users will have to keep their accounts logged in to receive Push Notifications.

To register for an account on the SingPost Mobile App, users are required to verify their identity via an OTP (one-time password) sent to their mobile number. Each mobile number is allowed to register for one (1) account only, and it will act as your personal identification on the app.

You will have to keep your Push Notifications turned on in order to receive real-time updates from SingPost. To do so:

 

- iOS: Click on Settings from your mobile Home screen > SingPost > Notifications > toggle ‘Allow Notifications’

- Android: Click on Settings from your mobile Home screen > Apps & Notifications > SingPost > toggle ‘Allow Notifications’

 

If this is set to off/disabled mode, you will not receive Push Notifications on your mobile device. However, you may still view them in your Notifications Inbox within the app.

Yes, you will still be able to receive Push Notifications on your new mobile phone after you have successfully logged into your account with the same mobile number. However, you will not be able to view old notifications from the new device or if you have changed your mobile number.

 

Each account can only be logged in from one device at a time, therefore you will be automatically logged out from your old device when you sign in from the new one.

Download the App

Make the switch and download the SingPost Mobile App now

online-security__grey
app_storegoogle_play