As of 14 January 2025, the Immigration & Checkpoints Authority (ICA) has implemented additional security measures for, and resumed the “Myself” module of the electronic change of address (eCOA) service. 

2.          The eCOA service allows Singapore residents (Singapore Citizens and Permanent Residents) to report a change of residential address to ICA online. 

3.          To enhance the security of the service, individuals accessing the “Myself” module will now be required to additionally perform face verification when logging in using their Singpass account.

4.          The “Myself and my family members” and “Others” modules remain unavailable at this juncture.  ICA is working on additional security measures to prevent abuse, and safely allow the change of address by a family member or a proxy. During this period, families who require to change their address can still do so, as individuals under the “Myself” module. For those who are unable to do so, they may approach the IC Unit at Level 3, ICA Building, for assistance from Mondays to Fridays, 8am to 4.30pm.

Update on Cases

5.          As of 13 January 2025, investigations have uncovered 87 unauthorised attempts to change registered residential addresses, with 69 address changes successfully executed. Of these 69, the perpetrators had gained control of 17 Singpass accounts. 

6.          Following the suspension of the eCOA service on 11 January 2025, ICA has sought to contact all 87 affected individuals to inform them of the attempted change to their registered address. House visits were made to those who were uncontactable by phone. 

7.          For all the 87 cases, regardless of whether the attempt to change their address was successful, ICA is facilitating a replacement of their identity card, and restoring their registered address in our database to their legitimate one. The Singpass accounts linked to all the 87 cases have been reset or suspended. 

8.          ICA and GovTech are also working together to assist the 17 users whose Singpass accounts had been compromised.  In this regard, the Police and GovTech have been contacting relevant government agencies and private sector services (e.g. banks and telcos) which the perpetrators might have accessed using the compromised Singpass accounts, to ensure that appropriate remedial or preventive actions are taken.

Advisory to the Public 

9.          ICA advises members of the public to check their registered address on our website to ensure its accuracy. Please refer to Annex A for detailed steps on how to do so. Any inaccuracies should be reported to ICA immediately via FormSG at https://go.gov.sg/reportunauthorisedchange.

10.         We thank members of the public for their understanding and patience while we work to put in place additional security measures for the eCOA service.

IMMIGRATION & CHECKPOINTS AUTHORITY
14 JANUARY 2025

Annex A - How to check your residential address