7 Recruitment Scams Targeting Singapore Employers (And How to Stay Safe)

Introduction

Recruitment scams are increasingly sophisticated, and Singapore employers can be targeted in ways that cause financial loss, compliance risk and reputational damage. In this article, 7 Recruitment Scams Targeting Singapore Employers (And How to Stay Safe) explains the most common schemes and practical steps to protect your business while complying with Singapore laws.

The guidance below highlights what to watch for, which Singapore-specific checks to run (ACRA BizFile+, MOM pass verification, Employment Agencies Act licensing), and how to respond if you suspect a scam.

Who this applies to

This article is intended for:

• Small and medium-sized enterprises (SMEs) and multinational employers in Singapore.
• HR professionals and hiring managers responsible for recruitment, payroll and onboarding.
• Employment agencies and in-house recruiters operating under the Employment Agencies Act.

If you engage third-party recruitment providers or hire foreign manpower (Employment Pass, S Pass, Work Permit), the risks and checks discussed here are especially relevant.

Key rules and requirements in Singapore

When addressing recruitment scams, employers must consider multiple regulatory obligations:

• Employment Agencies Act — ensure any agency you use is licensed and compliant.
• Employment of Foreign Manpower Act and MOM guidelines — verify work pass status and follow proper hiring procedures.
• CPF Act and IRAS obligations — ensure CPF contributions and tax reporting are accurate for hired staff.
• Personal Data Protection Act (PDPA) — handle candidate data securely and lawfully when conducting checks.
• Manpower Act, Employment Act, SDL, Work Injury Compensation Act and Workplace Safety and Health Act — ensure statutory obligations are not compromised by scam events.

Always record due diligence steps and maintain audit trails (e.g. correspondence, verification screenshots) in case of investigations or disputes.

Seven common recruitment scams and how to spot them

1. Fake CVs, qualifications and references

Scammers fabricate academic records, professional certifications or employment history. Red flags include inconsistencies in dates, unverifiable referees, and overly generic achievements.

• Verify certificates directly with issuing institutions where possible.
• Confirm referees via corporate email and phone numbers listed on ACRA or the organisation’s website.

2. Impersonation of licensed recruitment agencies

Fraudsters pose as legitimate agencies or create convincing websites. They may request upfront placement fees or signatory authority to handle passes.

• Check the agency’s licence under the Employment Agencies Act and verify company details on ACRA BizFile+.
• Request an agency’s licence number and confirm directly with MOM or the relevant regulator.

3. Fake work pass documents and identity fraud

Documents purporting to be valid Employment Passes, S Passes or Work Permits may be forged. Hiring someone who is not authorised can expose employers to penalties under the Employment of Foreign Manpower Act.

• Use MOM’s online work pass verification tools to check pass validity and conditions.
• Verify identity documents against government portals where available and confirm original documents in-person at onboarding.

4. Phishing interview invitations and malicious links

Scammers send fake interview invitations, CV requests or assessment links that harvest credentials or deploy malware.

• Scrutinise email domains, avoid downloading attachments from unknown senders, and use corporate IT security to scan links.
• Train hiring staff to recognise social engineering techniques and report suspicious emails.

5. Payroll diversion and change-of-bank requests

Criminals may request last-minute changes to salary accounts for new hires or current staff, diverting payroll to fraudulent accounts.

• Implement strict verification for any changes to bank details — require written confirmation, sight original bank statements and, where feasible, call the bank using numbers from public records.
• Maintain segregation of duties between HR and payroll teams.

6. Overpayment and invoice fraud from bogus vendors or agencies

Scammers posing as staffing vendors submit fake invoices or ask for refunds of an alleged overpayment.

• Cross-check invoices against signed contracts and purchase orders. Verify vendor details with ACRA and maintain a list of approved suppliers.

7. Ghost workers and collusion

Ghost workers are non-existent employees placed on the payroll. This can occur through collusion between dishonest insiders and external parties.

• Perform periodic payroll audits, reconcile headcount with department records and use periodic bank reconciliations to spot anomalies.

Step-by-step process to protect your organisation

Follow these practical steps to reduce exposure to recruitment scams.

• Establish a written recruitment policy covering verification, background checks and data handling (PDPA compliance).
• Verify company and agency details on ACRA BizFile+ and confirm agency licences under the Employment Agencies Act.
• Use MOM’s work pass verification services before making offers to foreign candidates.
• Conduct reference and qualification checks directly with listed institutions and with corporate contacts verified via public sources.
• Introduce segregation of duties for offer approval, payroll changes and vendor payments.
• Keep audit trails of recruitment communications, offers, accepted contracts and CPF/IRAS filings.
• Train staff on phishing, social engineering and reporting procedures; involve IT and legal where appropriate.

Common mistakes to avoid

• Relying solely on emailed documents without independent verification.
• Paying placement fees or signing power of attorney for pass matters without checking agency licensing.
• Allowing ad-hoc payroll changes without multi-level approvals.
• Failing to report suspected fraud to MOM, the police and, if relevant, to your compliance officer.

Practical examples

Example 1: A hiring manager receives an impressive CV from a candidate with international experience. The references come from generic email domains. After contacting the issuing university directly and using ACRA to verify previous employer details, the HR team discovered inconsistencies and declined to proceed.

Example 2: A company receives a last-minute bank account change request for a new hire. Because the payroll team requires a signed form plus a call-back to the employee’s registered phone number and a sighted bank book, the attempted diversion was blocked.

How an experienced consultant can help

An experienced immigration and employment consultant can help by:

• Advising on MOM and Employment Agencies Act requirements when engaging third-party recruiters.
• Conducting or advising on background checks, work pass verification and due diligence processes that meet PDPA standards.
• Assisting with secure onboarding, payroll controls, CPF and IRAS obligations, and remediation if a scam is suspected.

Little Big Employment Agency can provide advisory support and help implement verification and compliance processes tailored to your business needs.

Frequently Asked Questions

Q: How can I verify a candidate’s work pass quickly?

A: Use MOM’s online work pass verification tools and request supporting documentation from the candidate. Always confirm via MOM if you suspect forgery and keep records of the checks performed.

Q: Are employers liable for hiring a worker with forged documents?

A: Employers may face penalties under the Employment of Foreign Manpower Act and other regulations. Conduct thorough verification and act promptly if you discover forged documents. Seek professional advice for remediation.

Q: What steps should I take if I suspect a recruitment agency is fraudulent?

A: Stop further engagement, retain evidence, verify the agency via ACRA and MOM licence checks, and report the matter to MOM and the police where appropriate.

Q: How should we handle candidate personal data under PDPA during checks?

A: Collect only necessary data, obtain consent for checks, store information securely and dispose of data when no longer required, in line with PDPA guidelines.

Key takeaways

• Recruitment scams targeting Singapore employers are diverse — from fake CVs to payroll diversion and impersonation.
• Use Singapore-specific checks: ACRA BizFile+, MOM work pass verification, and Employment Agencies Act licence confirmation.
• Implement internal controls: segregation of duties, documented verification steps, and payroll safeguards.
• Maintain PDPA-compliant handling of candidate data and keep audit trails for compliance with CPF Act, IRAS and other statutes.
• If in doubt, seek help from experienced consultants to reduce operational and regulatory risks.

If you would like to find out more about how Little Big Employment Agency can assist with your employment and immigration requirements, please get in touch with the team at [email protected].

Yours sincerely,
The editorial team at Little Big Employment Agency

Requirements may change, so always check the latest guidance from MOM, or consult a professional adviser.

Disclaimer: This does not constitute legal advice. If you require legal advice, please contact a lawyer.