How to Report a Phishing Email in Singapore: SingCERT, ScamShield 1799 and the Police
Every outage has a sequel, and it usually arrives by email. After a disruption like the Microsoft 365 outage of 13 November 2026, inboxes come back to life at exactly the moment when a message saying "your mailbox needs to be restored, click here" sounds almost reasonable.
The quick answer: in Singapore you report a phishing email to SingCERT using its online form, call the ScamShield helpline on 1799 if you are unsure whether something is a scam, and make a police report if you have lost money. Details, links and CSA's own warning signs are below.
To be clear, at the time of writing we have not seen an official advisory about scams tied to this particular outage. The patterns here are ones the Cyber Security Agency of Singapore (CSA) and the Singapore Police Force have warned about generally.
How do you report a phishing email to SingCERT?
- Do not click links or open attachments in the suspicious email.
- Submit it through SingCERT's online form at go.gov.sg/singcert-report-phishing-email.
- If your security settings block you from forwarding it, email singcert@csa.gov.sg without the suspicious attachment, and SingCERT will follow up.
- Also tell the organisation being impersonated, and your own IT team.
CSA says SingCERT reviews what is submitted and, if it finds something malicious, may work with hosting providers to take down the email address used and any malicious websites linked in the email.
One limit to know: SingCERT only takes reports on incidents based in Singapore.
Source: CSA, Report a phishing email; CSA, Report your cybersecurity incident to SingCERT.
What are the warning signs of a phishing email?
CSA lists these:
- Spelling mistakes or poor grammar.
- Urgent or threatening language.
- A sender address that does not match the sender name, or that has typos or looks unusual.
- Links that lead somewhere other than expected. Hover over a link to see the full address before clicking.
- Attachments that have not been scanned.
CSA also notes that generative AI is helping criminals write more convincing messages with fewer errors, so a well-written email is no longer proof of anything.
Source: CSA, Report a phishing email; CSA, Beware of phishing scams.
What scams should staff watch for after an outage?
These are general patterns the authorities have warned about, matched to the kind of story an outage makes believable. This table is SourceIT's guidance.
| What the message says | What it is after | What the authorities have warned |
|---|---|---|
| "Your mailbox was affected. Sign in here to restore it." | Your password | Phishing for account credentials |
| "This is IT support. We need remote access to fix your PC." | Control of your computer | The Police and CSA have issued advisories on technical support scams |
| "Our email was down. Please pay to this new bank account." | A diverted payment | The Police have warned about business email compromise scams involving requests to change vendors' payment details |
A simple house rule covers all three: nobody changes a payment detail, shares a password or grants remote access on the strength of an email alone. Call the person on a number you already have.
Source: Singapore Police Force, advisory on technical support scams; Singapore Police Force, advisory on business email compromise scams.
What if someone already clicked?
CSA's advice, in order:
- Tell your IT department if it was a work laptop or phone.
- Run a full anti-virus scan.
- Contact your bank if banking details were shared.
- Change the password on any account that uses the password you disclosed.
- If money was lost, file a police report online at eservices1.police.gov.sg.
If personal data may have been exposed, there may also be PDPA obligations. See is an email outage a data breach under the PDPA.
The fastest way to lose a password is to be told, politely and urgently, that you are about to lose your mailbox.
More on the Microsoft 365 outage
- Microsoft 365 outage: what Microsoft has confirmed, and an IT manager checklist
- How to complain to Microsoft about the Outlook outage
- Email continuity options for SMEs
Getting help in Singapore
For email security and backup, call (65) 6978 3502, email Sales@sourceit.com.sg or use our contact page.
Frequently asked questions
How do I report a phishing email in Singapore? Submit it through SingCERT's online form at go.gov.sg/singcert-report-phishing-email, or email singcert@csa.gov.sg without the suspicious attachment.
What is the ScamShield helpline number? 1799. It runs 24 hours a day, and you can call if you are unsure whether something is a scam.
When should I make a police report? If you think you have been a victim of cybercrime or have lost money. Reports can be filed online with the Singapore Police Force.
Does SingCERT take reports from overseas? SingCERT only takes reports on incidents based in Singapore.
This article is general information compiled from the CSA and Singapore Police Force sources linked above as at 13 November 2026. It is not professional advice and is not a statement by or on behalf of those agencies or Microsoft.
SourceIT Approved
Researched and verified by the SourceIT team for Singapore buyers.
