Singpass never sends QR codes or web links by SMS or messaging apps like WhatsApp or Telegram. You should only scan Singpass QR codes on the login page when accessing digital services using the Singpass app.

Singpass app has stringent security measures in place and will check for the QR codes' legitimacy and validity before you can complete the authentication. You may see an error message on the Singpass app if you have scanned an invalid QR code, and you will not be able to proceed.

When logging in to a service using Singpass, you should also check that the web domain of the Singpass login page is singpass.gov.sg.