MoneySmart says an unauthorised third party copied personal data belonging to some of its customers in Singapore and Hong Kong. The company, which lets people compare and apply for credit cards, personal loans and insurance, emailed affected users on 2 and 3 November 2026 and confirmed the incident publicly on 3 November.
> Quick view: discovered 29 Oct 2026 · some Singapore and Hong Kong customers affected, number not disclosed · ID numbers, contact details, income ranges and vehicle details may be involved · emails sent 2-3 Nov · PDPC and MAS informed · check card statements, report scams to 1799
What MoneySmart has said
According to chief executive Vinod Nair's note on the company's website and its emails to customers, as reported by The Straits Times and CNA:
- It discovered on 29 October 2026 that an unauthorised third party had accessed some internal IT systems, which hold data customers share when they compare or apply for financial products.
- It has confirmed that data of some customers in Singapore and Hong Kong was copied.
- It stopped the access, secured its systems and hired independent cybersecurity and forensics experts.
- It informed regulators including the Personal Data Protection Commission (PDPC) and the Monetary Authority of Singapore (MAS).
- It is contacting affected customers directly, and says its services continue to operate as normal.
What data may be involved
The Straits Times lists these categories as potentially accessed. Not every customer will have had all of them copied, so your email is the guide to your own case.
- Personal particulars: names, dates of birth, nationality and personal identification numbers
- Contact details: email addresses, mobile numbers and shipping addresses
- Financial profile: income ranges, life stage and financial products you currently own
- Vehicle and insurance: vehicle information, and car insurance enquiries or policies
CNA adds that customers who submitted reward claims may also have had their shipping address and the application or policy reference number for the claimed product copied.
What is still unknown
MoneySmart has not said how many customers are affected or how the third party got in. CNA reported that its questions on the number went unanswered. The reports we read do not mention compensation, so treat any message offering it as suspect until you have confirmed it yourself.
Why this one deserves extra care
A scammer who knows your ID number, your income range, which card you hold and the reference number of your last application can sound very convincing. A call about "your MoneySmart reward" or "your car insurance renewal" could quote real details. Knowing those details proves nothing about who is calling.
What to do now
- Read MoneySmart's email if you received one, but go to moneysmart.sg by typing it yourself rather than tapping a link if you are asked to log in or verify anything.
- Check your card statements, as MoneySmart recommends, and report any transaction you do not recognise to your bank promptly.
- Be wary of delivery or reward messages that ask you to confirm details or pay a fee. This is MoneySmart's own warning, and it is the most likely follow-up.
- Treat unexpected calls, emails and messages with suspicion, especially about loans, cards or insurance. Never share one-time passwords or banking log-ins, however much the caller knows about you.
- Verify police callers. From 2 November 2026, Singapore Police Force calls come from one number, 6000 0999, with a gov.sg SMS. Officials will never ask you over a call to transfer money.
- Report scams to the ScamShield Helpline at 1799. If you have already given out banking details, call your bank immediately and make a police report.
This is general safety information, not legal or financial advice. Confirm anything specific to your accounts with MoneySmart or your bank.
