Skip to main content

ICA Suspends Online Address Change Service After 80 Cases of Unauthorized Changes

 




The Immigration and Checkpoints Authority (ICA) has suspended its electronic Change of Address (eCOA) service after uncovering about 80 unauthorized attempts to fraudulently change residential addresses using stolen or compromised Singpass accounts.

The fraudulent activities targeted the “others” option in the eCOA service, introduced in October 2020 to allow proxies to assist individuals in updating their addresses online. This module has been temporarily disabled while the rest of the eCOA service is under review, slated to resume on Jan. 14 with enhanced security measures.

How the Fraud Was Carried Out

The perpetrators exploited compromised Singpass accounts by acquiring victims’ NRIC numbers and issue dates, enabling them to change addresses through the eCOA service. A verification PIN mailer was sent to the new fraudulent address, which the perpetrators used to confirm the change. This new address was then used to reset Singpass account passwords, allowing access to the victims' accounts for further criminal activity.

According to ICA Commissioner Marvin Sim, the motive appeared to be the creation of mule accounts to facilitate scams and cybercrimes. There was no indication of foreign actors’ involvement, and the suspects are believed to be locals.

ICA's Response

Following reports of unauthorized changes since September 2024, ICA launched investigations that revealed a growing number of cases, prompting immediate action. Commissioner Sim stressed that the issue was not due to a system glitch but a deliberate misuse of the service.

In a press conference, Sim assured that ICA is committed to acting decisively against such activities and emphasized the importance of protecting personal data and public trust in digital government services.

Enhanced Security Measures

To prevent future misuse, ICA announced plans to introduce face verification technology for Singpass logins and is considering a One-Time Password (OTP) requirement for the proxy module. The OTP would ensure that individuals explicitly authorize address changes made by proxies.

The proxy option will remain suspended until ICA is confident that additional safeguards are effective.

Support for Affected Individuals

ICA is assisting victims by reverting their addresses and replacing compromised NRICs with updated issue dates. Those whose Singpass accounts may have been compromised will have their accounts reset in collaboration with GovTech.

Members of the public are encouraged to verify their registered addresses on ICA’s website and report any inaccuracies immediately.

Interim Measures

While the eCOA service is temporarily unavailable, individuals needing proxy assistance can visit the ICA Building’s IC Unit during operational hours.

The Singapore Police Force (SPF) confirmed that investigations are ongoing but declined to comment on whether arrests had been made or if other government services had been accessed using compromised accounts.

Labels:
Location: Singapore

Comments

Post a Comment

Popular posts from this blog

5 Months Jail: Man Busted with Etomidate Vapes for Sale and Illegal Extendable Baton

  A 24-year-old man, Muhammad Izham Rasol, has been sentenced to five months and 11 weeks' jail after pleading guilty to a total of seven charges that included serious vape and traffic offenses. A further 10 charges for similar offenses were taken into consideration during sentencing, bringing the total number of offenses to 17. The charges included the possession of Kpods (vapes laced with the drug etomidate) for sale, driving without a licence, and the possession of an illegal extendable baton. The First Arrest: Peninsula Shopping Centre (Jan 17) Court documents detailed that Izham was first caught by police officers around 1:20 am on January 17 at a club located in Peninsula Shopping Centre. When officers searched him, they found five Kpods (vapes laced with etomidate). Izham admitted that he had been using Kpods since December 2024 and had purchased the five pods in Geylang Lorong 18. A subsequent search of Izham’s vehicle revealed further evidence of illegal activity: A Ziploc...
Post a Comment
Read more

Police Take Chinese Nationals Suspected Loan Shark Harassers Back to Scene

  Singapore authorities have arrested two Chinese nationals for their alleged involvement in loan shark harassment. Li Zhihong, 41, and Liu Xuetao, 42, were charged with targeting a debtor living in a Housing Board flat at Towner Road on Jan 25. According to police reports, the duo placed a bicycle lock on the main gate of the flat and wrote a debtor’s note in blue permanent ink on the adjacent wall. The police acted swiftly, using footage from police cameras to identify and apprehend the suspects the very next day. Brought Back to the Crime Scene As part of investigations, on Jan 31 at about 11 am, police escorted the handcuffed suspects back to the void deck of Block 105 Towner Road. The bespectacled Li was then taken up to the flat where the incident occurred. Standing beside the wall where the debtor note remained visible, he was seen speaking to the officers in Mandarin. Liu, also shackled, was present during the re-enactment. This process is often done to strengthen the evide...
Post a Comment
Read more