Singapore’s Central Provident Fund (CPF) Board has warned members about a phishing campaign involving fraudulent emails that claim recipients are entitled to refunds for excess CPF contributions.
The scam email reportedly uses the subject line “CPF Contribution Overpayment – Refund Notification” and tells recipients that they are eligible to receive a refund. It then directs them towards a link, purportedly to confirm the refund details.
The CPF Board said such emails are not issued by the organisation, despite attempts by scammers to make them appear genuine. The fraudulent messages may use the CPF Board name and logo, while also spoofing the sender information to make the email appear more convincing.
Scammers impersonate CPF Board to target members
According to the warning, members should be particularly cautious if an unexpected email claims that they have made excess CPF contributions and are entitled to money back.
The CPF Board said its official email addresses end in @cpf.gov.sg or @e.cpf.gov.sg. However, users should not rely solely on the sender name displayed in an email, as sender information can be manipulated.
The CPF Board has previously advised members to check that an email address is correctly spelt and ends with @e.cpf.gov.sg when verifying genuine CPF Contribution Alert emails. It also advises members to ensure that links lead to domains ending in .gov.sg.
The latest warning comes as Singapore continues to face increasingly sophisticated phishing attempts involving impersonation of government agencies and financial institutions.
Scammers commonly use convincing branding, official-looking logos and urgent requests to persuade victims to click on fraudulent links or disclose sensitive information.
Members told not to provide Singpass or banking details
CPF members who receive the suspicious refund email have been advised not to click on any links or download attachments contained in the message.
They should also avoid entering personal information, banking credentials or Singpass details on websites reached through unsolicited emails.
The safest approach is to independently access the official CPF website or CPF Mobile app rather than using links supplied in an unexpected message.
Singapore’s ScamShield service similarly advises members of the public never to click links in unsolicited emails or messages, even when they appear to originate from trusted organisations such as banks or government agencies.
CPF Board has also introduced additional safeguards for members. In February 2026, it launched the Trusted Contact notification service and CPF Safety Switch as part of measures designed to protect CPF accounts against evolving scam tactics.
What to do if you receive the suspicious email
Anyone receiving an email claiming to offer a CPF contribution refund should avoid interacting with it and delete it.
If a person is uncertain whether a message is genuine, they can contact the 24/7 ScamShield Helpline at 1799 for assistance. ScamShield says the service can help members of the public check whether something may be a scam and provide advice on protecting themselves.
People who have already provided banking information or lost money should contact their bank immediately and report the incident through the appropriate channels.
The key warning is simple: an unexpected CPF refund should never be treated as genuine merely because the email carries the CPF Board’s name or logo. Members should independently verify the information through official channels before providing any personal or financial information.