CPFB | How to protect yourself from phishing links

How to protect yourself from phishing links

Are you able to detect a phishing scam? Check out these tips to learn how to determine if a link is safe or suspicious.

17 Jan 2022
SOURCE: CPF Board

desktop showing Yearly Statement of Account 2021 email

In this digital age, website links are a legitimate means for the Government to point citizens to useful services and information.

However, with the recent rise in scam or phishing attempts, it has become more important than ever before to verify links in emails, SMSes or WhatsApp messages before clicking.

To ensure that a link genuinely leads to the CPF website or another Government website, always check that the domain ends with “.gov.sg”.

A domain forms the first part of a URL. If a “https://” prefix is included in the URL, the domain comes immediately after it.

More tips on how to protect yourself from fraudulent links

· Pay particular attention to any misspelling, substitution of letters, and/or the deliberate shifting of “.gov.sg” to other parts of the URL.

· Only click on links from trusted sources. To determine if a link is reliable or will lead you to a malicious website:

- On desktop computers, hover your mouse cursor over the link to view the full URL.

- For mobile devices, hold your finger down on the link so that a window pops up and shows you the full URL.

When in doubt, search for the organisation’s website directly using search engines to ensure that the website is legitimate.

· Always verify the sender:

- For email, ensure that the sender’s email address is correctly spelt and ends with @cpf.gov.sg or @e.cpf.gov.sg.

- For WhatsApp, ensure that the sender is “CPF Board”, our official business account, with a green badge.

Is this link legitimate?

You may have received an SMS notifying you that your CPF Yearly Statement of Account is ready for viewing at cpf.gov.sg/latestysoasms.

You may have also received separate WhatsApp messages advising you not to click on the link because it is a scam.

Which of these messages should you trust?

Based on the “.gov.sg” rule, the link is actually legitimate and it is safe for you to click on it.

After you’ve clicked through to the webpage, please be extra vigilant before providing any sensitive information such as personal particulars or account login details. Look out for valid encryption certificates by checking for the green lock in the browser’s address bar.

How ready are you to detect phishing links?

Put your newfound knowledge to the test! Take this quiz to find out if you are now able to distinguish between credible links and scam attempts.