Can a Secondary 1 student be targeted by a scam even without a bank account? Yes. A scammer may try to take over a student’s messaging account, impersonate the student to contact parents or use a fake school programme to request payment. The student may not lose money personally, but the family can still be deceived through a trusted account.
Singapore Police issued a specific advisory in September 2026 about scammers taking over students’ WhatsApp accounts and impersonating them to ask parents for payment for fake youth exchange or AI-related programmes. In October 2026, Police issued another advisory about compromised WhatsApp accounts being used to ask relatives and friends for loans or financial assistance. These are current examples, not hypothetical risks.
This guide explains how PG1 students and Sengkang families can recognise suspicious requests, protect online accounts and respond if an account is compromised.
PG1 does not make a student safer or more vulnerable
Posting Group 1 is a school admission category. It does not determine whether a student is likely to be targeted online. Scammers approach people through social media, messaging apps, online advertisements, games, marketplace listings and fake education offers.
A Secondary 1 student may use WhatsApp or other services to communicate with family and friends, receive school updates or participate in group work. The important protection is not to assume that a message is genuine just because it comes from a familiar account.
Parents should build a household rule: any unexpected request for money, codes, passwords or urgent action must be checked through a second trusted channel.
The student impersonation scam involving fake programmes
On 28 September 2026, the Singapore Police Force warned of a scam variant in which scammers compromised students’ WhatsApp accounts and then contacted parents while pretending to be their children. The messages described fake youth exchange programmes or AI-related courses and asked parents to pay to secure a place. Some messages used forms bearing the names and logos of educational institutions or government agencies to appear credible.
Police reported at least eight cases since September 2026, with losses of at least $18,000 at the time of that advisory. Those figures refer to the cases reported by the date of the advisory; they are not a current total.
Read the Police advisory of 28 September 2026. The lesson is straightforward: a form with a school-looking logo or a message from a child’s account is not enough proof that a programme is real.
The October 2026 WhatsApp loan request variant
On 21 October 2026, Police warned about another scam using compromised WhatsApp accounts. Scammers impersonated relatives, friends or acquaintances and asked victims for loans or help transferring money. The excuses included having reached a bank-transfer limit or needing someone else to make a payment.
Police reported at least 128 cases since September 2026 with losses of at least $249,000 at the time of that advisory. Again, these figures are a dated snapshot, not an estimate of all current cases.
For a family, the risk is that a parent may trust a message that appears to come from their child. A student should therefore understand that account takeover can affect other people, not just the account owner.
See the Police advisory of 21 October 2026.
A simple verification rule for students and parents
Before paying for a course, trip, competition or activity, verify it using contact details obtained independently from the institution’s official website or school notice.
Do not rely on: – A WhatsApp message alone. – A payment QR code sent by an unknown account. – A consent form that has a school or government logo. – A claim that the fee will be refunded later. – A countdown or threat that the student will lose a place unless payment is immediate. – A request to continue the conversation on another platform.
Call the school or institution through its published number. Ask whether the programme exists, whether the student has been selected and whether the payment method is official.
Phishing links in social media advertisements
Police also issued an advisory on 2 October 2026 about phishing scams promoted through social-media advertisements. The advertisements offered apparently affordable products and redirected users to fake websites that asked for card details or online banking credentials. Some victims also supplied OTPs or approved digital-token notifications.
The student may encounter such advertisements while scrolling through a social platform or watching short videos. A low price or an attractive image does not prove that a seller is genuine.
The Police advised people not to click dubious links, not to share banking or card details and OTPs, and to verify suspicious messages with official sources. Read the 2 October 2026 phishing advisory.
What is phishing?
Phishing is an attempt to trick a person into revealing sensitive information through a fake message, website, call or advertisement. The page may imitate a bank, online shop, government service or education provider.
A student may be asked to: – Log in to a fake account page. – Enter a password or verification code. – Scan a QR code to receive a prize. – Provide personal information to confirm a competition entry. – Download an application from an unofficial source. – Pay a small fee to unlock a supposed reward.
Do not enter account details after following an unsolicited link. Open the official app or type the known official website address independently.
Protect the WhatsApp account
The Police recommend enabling WhatsApp two-step verification and reviewing linked devices. Students and parents can follow these steps:
- Open WhatsApp settings.
- Go to Account and enable Two-Step Verification.
- Review Linked Devices regularly.
- Log out devices that are not recognised.
- Never give another person the SMS verification code or two-step verification PIN.
- Tell a parent if an unexpected login or verification message appears.
A verification code is not a harmless number. Someone asking for it may be trying to register or take over the account.
What if the student’s WhatsApp account is compromised?
Tell the parent immediately. Use the account recovery instructions from WhatsApp’s official Help Centre and contact the platform where necessary. Warn family members through another channel that messages from the compromised account may not be genuine.
If a scammer has requested money, parents should contact their bank immediately to report the transaction and ask about blocking or recovery steps. Lodge a Police report. Do not delete all the messages before recording relevant evidence, if it is safe and practical to preserve it.
If passwords were reused on other services, change them. Check linked devices and enable two-factor authentication where available.
Never share OTPs, passwords or banking access
Students should not share a parent’s bank login, card details, Singpass credentials or OTPs. A school project, game reward, online competition or youth programme should not need a student’s family banking password.
An OTP authorises an action in a system. Sharing it can allow an attacker to complete a transaction or take control of an account. A person who says they are helping the student secure a prize is not entitled to the code.
What to do if a student has already paid
Do not hide the incident because of embarrassment. Tell a parent immediately. Contact the bank or payment provider through its official hotline and report the suspected transaction. Keep screenshots, account names, telephone numbers, URLs, payment records and the time of the incident.
Call the 24-hour ScamShield Helpline at 1799 for scam-related guidance. Make a Police report through the official channel. The sooner the family contacts the bank, the sooner it can ask whether transactions can be stopped or accounts protected. A recovery is not guaranteed.
Family rules that reduce the risk
- Verify unexpected requests for money with a voice call or another known contact method.
- Use official school or institution channels to confirm programmes and fees.
- Keep WhatsApp two-step verification enabled and check linked devices.
- Never share OTPs, passwords, bank logins or Singpass credentials.
- Avoid clicking unknown links or scanning unexpected payment QR codes.
- Use official app stores and verified websites for downloads.
- Tell a parent early if an account behaves strangely.
- Do not blame a child who reports a mistake; focus first on securing accounts and funds.
Frequently asked questions
Can scammers use a student’s WhatsApp account to target parents?
Yes. Police described this exact scam variant in September 2026, involving fake youth exchange or AI-related programme payments.
Should a student send an OTP to prove they are the account owner?
No. Do not share verification codes or account PINs with another person.
Is a school logo on a form proof that a programme is genuine?
No. Verify the programme and payment through the institution’s independently obtained official contact details.
What if the message comes from a parent’s or child’s real WhatsApp number?
The account may have been compromised. Verify any money request through a separate trusted channel.
What should a family do after a suspicious payment?
Contact the bank immediately, preserve evidence and lodge a Police report. Use the ScamShield Helpline at 1799 for guidance.
Does installing ScamShield guarantee that every scam will be blocked?
No. ScamShield can help identify or block some suspicious calls and messages, but families still need to verify requests and protect their accounts.
Official sources and connected Sengkang guides
- Singapore Police: 28 September 2026 student WhatsApp impersonation advisory
- Singapore Police: 21 October 2026 WhatsApp impersonation advisory
- Singapore Police: 2 October 2026 phishing advertisement advisory
- ScamShield: Phishing scams
- ScamShield: Secure your online accounts
- ScamShield Helpline and scam information
- PG1 Sengkang: Parent Gateway, school notices and consent forms
- eduKate Sengkang Learning Atlas
Editorial verification, 13 November 2026: Scam examples and dated case figures are drawn from the Police advisories of 28 September, 2 October and 21 October 2026. Figures are reported as at the publication dates of those advisories and should not be interpreted as current cumulative totals. No app or filter can guarantee complete scam prevention.
