Tuition Fee Scams in Singapore: How Students and Parents Can Stay Safe

In March 2026, more than 20 cases of tuition fee fraud were reported in Singapore, with losses exceeding S$31,000. Students received emails that appeared to come from their educational institutions, containing fake payment links or modified bank account details. Some paid their entire semester's tuition into scammers' accounts before realizing what happened.

This is not a new problem. In August 2025, Temasek Polytechnic students received emails from spoofed school addresses with fake payment portals. China-based university admission fraud has also targeted international students in Singapore. The attacks are becoming more sophisticated, and the financial consequences are devastating.

How Tuition Fee Scams Work

The Email Spoofing Method

1. Scammers spoof the email address of an educational institution — the "from" field shows the school's official domain
2. The email contains fake payment instructions with modified bank account details, or a link to a fake payment portal that mimics the school's website
3. Students or parents, believing it is a legitimate communication, transfer the tuition fees to the scammer's account
4. By the time the school reports non-payment, the money is gone

Why It Works

• Timing: Scammers send emails during registration or payment periods when students expect payment notices
• Appearance: Spoofed emails look identical to legitimate school communications
• Urgency: Messages often warn of late payment penalties or enrollment cancellation
• Trust: Students and parents inherently trust communications that appear to come from their school

Who Is Being Targeted?

Target Group	Risk Factor
Local polytechnic/university students	Receive many emails from school; may not verify each one
International students	Less familiar with local payment processes; larger tuition fees
Parents making payments	May not have direct access to school portals to verify
Private education institution students	Smaller institutions may have less robust email security

Schools Known to Be Affected

While specific institutions vary, the scams have targeted students at:

• Polytechnics (including Temasek Polytechnic)
• Local universities
• Private education institutions
• International school programs

How to Protect Yourself

Verification Checklist

• Never click payment links in emails — go directly to your school's official website
• Call the school's finance department to verify any payment instructions received via email
• Check the URL carefully — fake portals often use slightly modified domain names (e.g., temasekpoly.com instead of tp.edu.sg)
• Compare bank account details with previous legitimate payments
• Enable two-factor authentication on your school email account
• Report suspicious emails to your school's IT department immediately

Red Flags to Watch For

1. Unexpected payment instructions — especially if you already paid or the amount differs
2. New or different bank account numbers — schools rarely change their payment accounts
3. Urgency language — "Pay immediately or lose your enrollment"
4. Slightly wrong email addresses — look closely at the sender's domain
5. Links to external payment pages — legitimate schools use their own payment systems

What Schools Should Do

Educational institutions bear responsibility for protecting their students. Effective measures include:

1. Use secure payment channels — not email-based payment instructions
2. Implement email authentication — DMARC, DKIM, and SPF records to prevent spoofing
3. Educate students about phishing during orientation
4. Send payment reminders through official portals — not via email
5. Share payment instructions via password-protected links — tools like LOCK.PUB allow schools to share sensitive payment details through encrypted, password-protected memos instead of plain email. Only authorized recipients with the password can access the information, making it impossible for intercepted emails to reveal payment details.

What MOE and Authorities Are Doing

The Ministry of Education (MOE) has reminded schools to use secure payment channels. The Singapore Police Force regularly issues advisories about education-related scams. However, the primary defense remains individual vigilance.

What to Do If You Have Been Scammed

1. Contact your bank immediately — request a transaction freeze or reversal
2. File a police report — call 1800-255-0000 or report online
3. Notify your school — they need to know their identity is being used
4. Report to ScamShield — Singapore's anti-scam hotline: 1799
5. Preserve all evidence — save the scam email, payment confirmation, and any correspondence

The LOCK.PUB Solution for Schools

The fundamental problem with email-based payment instructions is that email is inherently insecure. Emails can be spoofed, intercepted, and forwarded.

LOCK.PUB offers a practical alternative. Instead of sending payment details in plain email, schools can:

1. Create a password-protected memo with the correct payment instructions
2. Share the LOCK.PUB link via email
3. Communicate the password through a separate channel (e.g., school portal, iMessage)
4. Set an expiration date so the information is no longer accessible after the payment deadline

Even if the email is intercepted, the scammer cannot access the payment details without the password. This two-channel approach — link via email, password via separate channel — significantly reduces the risk of payment fraud.

Frequently Asked Questions

Can banks reverse scam transactions?

If reported quickly (within hours), banks may be able to freeze the receiving account. However, recovery is not guaranteed, especially if the scammer has already withdrawn the funds.

Are international students more at risk?

Yes. International students often pay larger tuition fees and may be less familiar with the school's official communication channels, making them more vulnerable to spoofed emails.

Should I report a suspicious email even if I did not fall for it?

Absolutely. Reporting helps schools identify ongoing attacks and warn other students.

Stay Alert

Tuition fee scams exploit trust between students and their educational institutions. Always verify payment instructions independently — never rely solely on email. If your school sends payment details via email, ask them to use a more secure method like LOCK.PUB.

Your education is an investment. Protect it.