Security Advisory

Beware of Rising Impersonation Calls, SMSes and Email Phishing Scams

Created: 27 January 2022
Updated: 10 October 2025

In view of the recent rise in impersonation^* calls and phishing^** scams in Singapore, we would like to remind our patients, partners and members of public who use NUHS and our institutions' services to stay alert and vigilant. Here are some steps to protect themselves against fraud:

1. Do not answer unsolicited calls or reply to unknown SMSes or emails.
2. Do not divulge sensitive information or login credentials to anyone.
3. Key in login credentials or personal information only on the NUHS App or our official websites.
4. Ensure that you have entered the correct website address and do not click on links from unsolicited SMSes and/or emails to get to our official websites.
5. Visit our official websites to see if information is legitimate.

Please report to us immediately should anyone receive unusual calls, SMSes or emails purporting to be from NUHS and its affiliated institutions that ask for sensitive information: www.nuhs.edu.sg/about-nuhs/contact-us.

If you are unsure if something is a scam or suspect you are a victim of a phishing scam, call the 24/7 ScamShield Helpline at 1799 and change your passwords immediately.

Thank you.

^*Impersonation: Scammers pose as friends, renowned companies, or authority figures (e.g. job recruiters, police, or government officials) to trick victims into parting with money or giving up sensitive information such as banking details or personal data. Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

^**Phishing scam: Some SMSes or emails may have headers or email addresses that appear to be sent officially, and may include links to fake websites (mimicking real ones) created by scammers. Victims who enter their log-in information and one-time passwords (OTP) into fake websites can quickly have their accounts breached and their savings or information stolen. The fake SMS messages/emails may also appear in the same message thread as previous, genuine messages using a technology called spoofing.