, Singapore
605 views
Photo via Pexels

Singapore to ban NRIC banking authentication amidst identity fraud risks

Banks must stop using NRIC numbers for verification by January 2027 under MAS, PDPC rules.

Singapore banks are phasing out the use of NRIC numbers for authentication, in line with new guidance from the Personal Data Protection Commission (PDPC) and the Monetary Authority of Singapore (MAS).

The Association of Banks in Singapore (ABS) said banks are aligning with a PDPC advisory requiring organisations to cease using NRIC numbers for authentication by 1 January 2027.

ABS director Ong-Ang Ai Boon said NRIC numbers cannot be used on their own to carry out financial transactions such as payments or fund transfers, which already require multi-factor authentication.

Most banks have already stopped using NRIC numbers for non-transactional authentication, including opening encrypted email attachments. Banks that still rely on NRIC numbers for such purposes are expected to shift to alternative methods in the coming months.

In its advisory, the PDPC said NRIC numbers were designed for identification, not authentication, and their use as verification credentials increases the risk of identity fraud if the information is exposed.

Organisations are expected to adopt stronger authentication measures, such as passwords, one-time passwords, or multi-factor authentication, instead of NRIC numbers.
 

Join Singapore Business Review community

Follow the link for more news on

Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

If you've been wondering whether SBR could work for your company — yes, probably.

A lot of the companies we partner with started as readers. They'd been following our coverage for a while, saw their own customers and competitors in it, and eventually asked the obvious question: could we do something with you? The answer is usually yes. The shape of it depends on what you're trying to do.


The options are broader than most people assume — thought leadership articles, sponsored content, industry summits across Southeast Asia, regional awards programmes, podcasts, and media placements in print and digital. Some partners use one channel; most use a mix. We figure out the right combination by starting with your brief, not with our rate card.


So if the question has been on your mind, here's the easy way to ask it.

We'll tell you honestly whether we can help, and how. It's a better use of everyone's time.

Top News

Singapore targets $645m fund for SEA climate projects
The programme will also feature a data platform and a market development facility.
iWOW swings to $700,000 loss in H1 2027
Datacomm revenue fell 41%, whilst wireless engineering declined 35%.