Online Criminal Harms Act 2023 · Updated to 15 Sep 2026 · Schedules
Schedule 3 · Purposes of systems, processes or measures
Official textFrom Singapore Statutes Online, unchanged
THIRD SCHEDULESection 19(1)(b)Purposes of systems, processes or measures1.To minimise the exposure of Singapore end-users of a designated provider’s service to scam or malicious cyber activities.2.To verify the authenticity of accounts on a designated provider’s service, and detect and safeguard against —
designated provider
“designated provider” means the provider of a designated online service;
the creation of inauthentic accounts and misuse of accounts on a designated provider’s service;
the misrepresentation of identity of any end-user of a designated provider’s service; and
the misuse of any bots that conduct online activity on or through a designated provider’s service.3.To receive information from Singapore end-users of a designated provider’s service on suspected scam or malicious cyber activities.4.To facilitate information sharing between the competent authority and a designated provider on suspected scam or malicious cyber activities.5.To act on information received from the competent authority and Singapore end-users of a designated provider’s service to proactively detect, prevent and disrupt scam or malicious cyber activities.6.To facilitate criminal investigations into scam or malicious cyber activities, including the maintenance, preservation and provision of records.7.To provide payment protection mechanisms for online payments (if any) conducted through a designated provider’s service.8.To facilitate the administration of this Act by the competent authority, including the provision of relevant information to the competent authority, such as the following:
online activity
“online activity” means any activity conducted by means of the internet, and regulations may clarify the types of activities that are online activities;
details of systems, processes or measures taken or being considered by a designated provider to comply with Part 4 or against scam or malicious cyber activities;
details of scam or malicious cyber activities encountered on a designated provider’s service and identification of new tactics observed.
Terms defined in s 2
competent authority
Defined · s 2“competent authority” means the competent authority appointed under section 3;
designated provider
Defined · s 2“designated provider” means the provider of a designated online service;
online activity
Defined · s 2“online activity” means any activity conducted by means of the internet, and regulations may clarify the types of activities that are online activities;