TRW & Co · Investigations and financial crime
Protection from Scams Act: Restriction Orders on Bank Accounts
The Protection from Scams Act in Singapore lets the police direct banks to restrict the accounts of people about to send money to scammers. Each restriction order lasts up to 30 days, extendable up to five times. Affected customers can apply for access to funds for legitimate needs or appeal to the Commissioner of Police, and new 2026 amendments add further orders.
Key pointA restriction order protects the account holder; it does not recover money already lost. Families should run two tracks at once: secure access to funds for essential bills under the order, and report and trace any earlier transfers immediately.
At a glance
In force since 2025
The Protection from Scams Act 2025 was passed on 7 January 2025 and came into force on 1 July 2025 with the Protection from Scams Regulations 2025.
Who it protects
Individuals the police reasonably believe will transfer money, withdraw cash or draw on credit for a scammer, where an order is necessary to protect them.
What is restricted
Outgoing transfers including PayNow and online banking, ATM facilities and all credit facilities, at the seven domestic systemically important banks by default.
Duration and appeal
Up to 30 days, extendable up to five times; the individual or a joint account holder may appeal to the Commissioner of Police, whose decision is final.
2026 amendments
The Scams (Countermeasures) and Other Matters Act 2026 adds disclosure, account disabling and service limitation orders and will commence on a date to be notified.
Swipe or scroll →
The short answer: when can the police restrict your bank account?
The Protection from Scams Act in Singapore allows the police to issue a restriction order directing banks to restrict a person's banking and credit facilities where an officer reasonably believes the person is about to send money to a scammer, withdraw cash to hand to one, or draw on credit for a scammer's benefit, and the order is necessary to protect them. The Protection from Scams Act 2025 was passed on 7 January 2025 and came into force on 1 July 2025.
A restriction order is aimed at protecting scam victims, not punishing suspects. It blocks outgoing transfers, ATM withdrawals and the use of credit facilities. Each order lasts up to 30 days and can be extended up to five times, so an account could be restricted for up to about six months in total. The person can apply to the police for access to money for legitimate needs, and can appeal to the Commissioner of Police.
As of October 2026, the regime is also being expanded. The Scams (Countermeasures) and Other Matters Act 2026, passed on 9 September 2026 and gazetted on 29 September 2026, adds new police orders against scam-linked accounts and mules. It will come into operation on a date to be notified. This article explains how restriction orders work, what banks do, how affected customers and families can respond, and what the 2026 changes mean.
Why Singapore introduced restriction orders
Some scam victims remain convinced by the scammer even after police and bank staff have warned them. Investment, romance and impersonation scams in particular can leave a victim determined to keep paying. Before the Act, the authorities had no clear power to stop a competent adult from transferring their own money.
MHA described the restriction order in its press release on commencement as a last resort, to be used only after other efforts to convince the individual have failed. The police decide each case on its facts and may consider information from the individual or from family members. That framing matters: a restriction order is a protective intervention, but it is still a significant interference with a person's control over their own money.
How restriction orders work under the Protection from Scams Act in Singapore
The test for issuing an order
A police officer may issue a restriction order where the officer reasonably believes that the individual will make a transfer to a scammer, withdraw money intending to give it to a scammer, or apply for or draw down credit to benefit a scammer, and that the order is necessary to protect the individual. There is no requirement that the person has already lost money.
Which banks and which facilities
By default, orders are directed to the seven domestic systemically important banks, which MHA identified as DBS, OCBC, UOB, Citibank, HSBC, Maybank and Standard Chartered. An order can also be sent to another bank if it is reasonably suspected that an account there is directly involved in transfers to the scammer.
The order restricts money transfers out of the person's accounts, including online and mobile banking, PayNow and over-the-counter transfers, as well as ATM facilities and all credit facilities, such as credit cards and personal loans.
Duration, extensions and cancellation
| Feature | How it works |
|---|---|
| Initial duration | Up to 30 days |
| Extensions | Further periods of up to 30 days each, with a maximum of five extensions |
| Early cancellation | The police may cancel the order once the person is no longer at risk of being scammed |
| Access to funds | The person may apply to the police for access to money for legitimate needs, such as daily expenses and bills, assessed case by case |
| Appeal | The individual or any joint account holder may appeal to the Commissioner of Police; the order stays in effect during the appeal and the decision is final |
| Procedure | Appeal procedures are set out in the Protection from Scams Regulations 2025 |
When the order ends, normal access to banking and credit facilities resumes. Because the order affects joint accounts too, a joint account holder who is not the person at risk may find their access limited and should engage early with the police on access for legitimate needs.
Safeguards and limits on the power
The Protection from Scams Act in Singapore contains several built-in limits. The order is a last resort, issued only after persuasion has failed. It is time-limited, with a cap on the number of extensions, and the police may cancel it early. Access to funds for legitimate needs remains available on application, and there is a right of appeal for both the individual and any joint account holder.
Equally, the limits of the safeguards should be understood. The order continues while an appeal is pending, the Commissioner's decision on appeal is final, and access to funds is discretionary rather than automatic. For an affected family, that means the practical work happens through prompt, well-documented engagement with the police rather than through adversarial proceedings.
Nothing in the Protection from Scams Act in Singapore removes a person's ownership of their money. The order restricts what can be done with the accounts for a period; it does not transfer, confiscate or forfeit any funds.
What banks must do
Banks that receive a restriction order must give effect to it by blocking the specified transactions and must not grant or allow drawdowns on credit facilities. In practice, this means restricting digital channels, cards and branch transactions, and managing communications with a customer who is often distressed and may not accept that they are being scammed.
For banks, the Protection from Scams Act in Singapore sits alongside other anti-scam obligations, including the Shared Responsibility Framework for phishing scams developed by MAS and IMDA and the bank's own fraud monitoring. Compliance teams should make sure restriction orders are actioned promptly across every channel, that joint account holders are handled correctly and that front-line staff know how to direct customers to the police for access requests and appeals.
A restriction order does not decide whether money already sent can be recovered. If transfers have been made, the victim should report to the police immediately and ask the bank about recall or freezing of the recipient account. Recovery depends on speed, on where the money went and on other legal tools, such as civil claims against recipients. A restriction order only stops further losses from the protected person's own accounts.
If you or a family member is subject to an order
Being placed under a restriction order can be confusing and upsetting, especially for older account holders. These steps help protect both the person and their legitimate financial needs.
- Read the notice carefully. Note the date of the order, its expiry and which accounts and facilities are affected. Keep the notice and any police contact details provided.
- Secure essential payments. List upcoming essential outgoings, such as rent, utilities, medical bills, insurance premiums and salaries for domestic helpers, and apply to the police for access to funds for those needs with supporting documents.
- Engage with the concerns. If you believe you are not being scammed, gather evidence about the counterparty and the purpose of the payments. If family members raised the alarm, involve them; their information can be relevant.
- Consider an appeal. The individual or a joint account holder may appeal to the Commissioner of Police. The order remains in place during the appeal, so pursue access requests in parallel.
- Plan for longer-term protection. Where a person is repeatedly targeted or is losing capacity, consider durable protections such as a lasting power of attorney, trusted contact arrangements with the bank and lower transaction limits.
- Report losses promptly. If money has already been sent, report it to the police and the bank without delay, because recovery prospects fall quickly.
For families concerned about an older relative's ability to manage money, our pages on lasting powers of attorney and mental capacity and fraud and asset recovery explain the longer-term options.
What changes under the Scams (Countermeasures) and Other Matters Act 2026
MHA introduced the Scams (Countermeasures) and Other Matters Bill on 4 August 2026, and Parliament passed it on 9 September 2026. According to MHA's first reading announcement, it amends the Protection from Scams Act in Singapore, the Online Criminal Harms Act and other legislation. The key measures described by MHA include:
- Disclosure orders requiring service providers to give the police information on specified accounts and scam-related activity.
- Account disabling orders requiring a service provider to disable specified accounts for up to 30 days, extendable once by up to 30 more days.
- Service limitation orders requiring a service provider to restrict services to an identified person, such as a scam mule, for up to three years, building on the facility restriction framework that has applied since October 2025.
- New offences for providing personal information to register online accounts for criminal use, and for possessing, supplying or receiving such accounts on designated online services.
- Information for restriction orders, allowing specified officers to obtain information about persons who must be notified of a restriction order, including joint account holders, which banking confidentiality had previously prevented.
Appeals against account disabling and service limitation orders go to the Commissioner of Police, with orders remaining in effect pending appeal. The new Act will come into operation on a date to be notified in the Gazette, and the offences for which some orders can be issued will be prescribed in subsidiary legislation. The text of the Bill as introduced is available on the Parliament website.
An illustrative scenario
This scenario is illustrative only and does not describe any real person or case.
A retired professional has transferred several large sums to an online investment platform introduced by a new acquaintance. His adult children suspect a scam and alert the police. Officers and bank staff speak to him, but he insists the investment is genuine and plans to liquidate a fixed deposit to send more.
The police issue a restriction order to his banks. He is upset, and his spouse, a joint account holder, cannot pay household bills from their joint account. The family applies to the police for access to funds for specified bills, which is assessed and granted with conditions. Over the following weeks, with the order in place, the family gathers evidence that the platform is fraudulent and the father accepts the position. Separately, the family seeks advice on reporting the earlier transfers, tracing the money and putting a lasting power of attorney in place.
Risks and common mistakes
Assuming an order means you are suspected of a crime
A restriction order under the Protection from Scams Act in Singapore is protective. It is directed at a person believed to be at risk of being scammed, not at a suspected offender. Different powers apply to suspected mules and criminals, including the new orders under the 2026 amendments and ordinary criminal investigation powers.
If you are being investigated as a suspected mule, the position is very different and you should take legal advice promptly. Our white-collar crime team can help.
Waiting for the order to expire
Some people simply wait for the 30 days to pass. But orders can be extended up to five times, and essential bills can fall into arrears in the meantime. Engaging early on access to funds, and addressing the police's concerns with evidence, is usually more effective than waiting.
Keep a written record of every request and response.
Ignoring joint account holders and dependants
An order affecting a joint account can leave a spouse or carer unable to pay household expenses. Joint holders have their own right to appeal and can apply for access for legitimate needs.
Families should identify all affected accounts quickly and coordinate a single, documented request.
Treating the order as a recovery tool
A restriction order only stops further payments from the protected person's own accounts. It does not freeze the scammer's accounts or recover money already sent. Recovery requires prompt reporting, bank recall efforts and, where appropriate, civil proceedings against recipients or other parties.
Our page on banking and financial disputes explains the routes against banks and recipients.
Cross-border angle
Most scam proceeds leave Singapore quickly, often through chains of mule accounts and crypto platforms in several countries. Restriction orders stop new losses but do nothing to bring funds back. Cross-border tracing and recovery requires coordination with foreign banks, regulators and courts.
TRW & Co works with victims and families on tracing and recovery across our offices in Singapore, Dhaka, Dubai, London and China, and with businesses reviewing their anti-scam controls. See our pages on financial services regulation and anti-money laundering compliance, and our article on the corporate investigations framework.
Checklist
- Individuals: keep the restriction order notice, note its expiry and apply promptly for access to funds for essential needs.
- Individuals: appeal to the Commissioner of Police if appropriate, while pursuing access requests in parallel.
- Families: document concerns and share them with the police; plan longer-term safeguards such as a lasting power of attorney.
- Banks: confirm restriction orders are actioned across all channels and that staff know how to guide customers on access and appeals.
- Service providers: prepare for disclosure, account disabling and service limitation orders once the 2026 Act commences.
- Everyone: report suspected scams and losses immediately, because speed is the biggest factor in recovery.
If you need advice on the Protection from Scams Act in Singapore, on recovering scam losses or on compliance with the new orders, contact TRW & Co. Where Singapore court or tribunal representation is required, we work alongside Singapore-qualified counsel.
Frequently asked questions
01Can the police freeze my bank account if I am a scam victim?
Yes, in limited circumstances. Under the Protection from Scams Act 2025, a police officer may issue a restriction order directing banks to restrict your transfers, ATM access and credit facilities if the officer reasonably believes you are about to send money to a scammer, withdraw cash for one or use credit for one, and the order is necessary to protect you. MHA has described it as a last resort after other efforts to convince the person have failed.
02How long does a restriction order last?
Each restriction order lasts up to 30 days. The police may extend it by further periods of up to 30 days each, with a maximum of five extensions, so an account could be restricted for up to about six months in total. The police can cancel the order earlier if they are satisfied the person is no longer at risk of being scammed. Normal access to banking and credit facilities resumes when the order ends.
03Can I still pay my bills during a restriction order?
You can apply to the police for access to your money for legitimate needs, such as daily living expenses and bill payments. Each request is assessed case by case and may be subject to conditions. It helps to list essential outgoings with supporting documents, such as utility bills, rent, medical invoices or insurance premiums. Joint account holders affected by the order can also make requests and should coordinate with the protected person and their family.
04How do I appeal against a restriction order?
The individual named in the order, or any joint account holder of an affected account, may appeal to the Commissioner of Police. The order remains in effect while the appeal is considered, and the Commissioner's decision is final. Appeal procedures are set out in the Protection from Scams Regulations 2025. Because the order continues during an appeal, you should pursue requests for access to funds for essential needs at the same time.
05Which banks are covered by the Protection from Scams Act?
By default, restriction orders are directed to the seven domestic systemically important banks, which MHA identified as DBS, OCBC, UOB, Citibank, HSBC, Maybank and Standard Chartered. An order may also be directed to another bank if it is reasonably suspected that an account there is directly involved in transfers to the scammer. Banks must give effect to the order by blocking the specified transactions and credit facilities.
06What does the 2026 scams law change?
The Scams (Countermeasures) and Other Matters Act 2026, passed on 9 September 2026, adds police powers including disclosure orders, account disabling orders and service limitation orders that can restrict services to scam mules for up to three years. It creates offences relating to online accounts used for crime and allows police to obtain information about people who must be notified of restriction orders. It will commence on a date to be notified in the Gazette.
Sources and official materials
- MHA: Commencement of the Protection from Scams Act — How restriction orders work, banks covered and appeals
- Protection from Scams Act 2025 — Primary legislation on restriction orders
- Protection from Scams Regulations 2025 — Procedures including appeals
- MHA: First Reading of the Scams (Countermeasures) and Other Matters Bill — 2026 amendments and new police orders
- Scams (Countermeasures) and Other Matters Bill (Bill No. 16/2026) — Text of the Bill as introduced in Parliament
General information only, current as at 20 October 2026. It is not legal advice and does not create a lawyer–client relationship. Singapore law and regulatory practice change; check current official sources and take advice on the facts of your matter.
