238 views
Photo by Markus Winkler on Pexels

Singapore residents fall for phishing despite high MFA adoption rates

The report also found 64% of employees had received cybersecurity training.

Singapore residents show strong cybersecurity awareness and high multi-factor authentication (MFA) uptake, but many still fall for phishing and social engineering attacks, according to Yubico’s Global State of Authentication Survey 2025.

The report highlights a mixed cybersecurity landscape. Whilst 78% of Singaporeans use MFA for personal accounts and 43% use mobile authentication apps like TOTP or push notifications at work — nearly double the global average — a majority still rely on traditional logins. 

Usernames and passwords remain the default for 58% at work and 63% in personal use, exposing users to ongoing security risks.

Despite high levels of awareness — 89% are concerned about AI’s impact on account security (the second-highest globally), and 85% say phishing is becoming more sophisticated — nearly half (44%) admitted to engaging with a phishing message in the past year.

Additionally, 26% reported social media account hacks, and 22% said they had accidentally shared work emails in phishing incidents.

At the workplace level, 60% of companies in Singapore require MFA across all apps, well above the 48% global average, though down from 68% in 2024.

The report also found 64% of employees had received cybersecurity training, and 86% felt their company's security policies were appropriate for their roles.

Still, data leaks remain a concern. Beyond email exposure, 17% of respondents shared names, and 16% shared phone numbers as a result of phishing incidents.
 

Join Singapore Business Review community
Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

Reaching the people who run Asia's businesses is harder than it used to be.

Inboxes are crowded. Attention is short. The executives you most want to reach — the founders, CFOs, and operators who actually move budgets — are the hardest to find through the usual channels. If you're building a company, a category, or a reputation, you already know this.

We've spent twenty years building the room they read. Singapore Business Review is where senior decision makers in Singapore and across Southeast Asia come for business coverage they can't get elsewhere — in print, online, and in person at the summits and roundtables we host across seven markets.

If you have something these readers should know about — a point of view worth publishing, a product worth their attention, an event worth their time — we'd like to hear what you're trying to do.