What option allowed for misuse of the eCOA service?

Question

Accepted Answer

The "Others" Option Enabled Misuse of the eCOA Service

The "others" option within Singapore's electronic change of address (eCOA) service facilitated unauthorized updates to residential addresses. This feature allowed individuals to use their Singpass accounts to modify addresses on behalf of other people, leading to approximately 80 detected cases of misuse. The Immigration and Checkpoints Authority (ICA) has since suspended the service to investigate and prevent further exploitation.
Misuse Through Third-Party Address Updates

The eCOA service, which was launched in October 2020, offered three options for address changes: "myself," "myself and my family members," and "others." It was this "others" option that was exploited. This functionality was initially intended to assist residents who might not be digitally adept, by permitting proxies with Singpass accounts to manage address updates for them, averaging about 900 such proxy updates monthly.
Detection of Unauthorized Changes

The ICA identified around 80 instances where addresses were changed without the consent of the account holder. While initial cases appeared isolated, a growing number surfaced recently, prompting a deeper investigation. By December 2024, the ICA had uncovered the methods used for these unauthorized address changes and their subsequent purposes.
Service Suspension and Resumption Timeline

In response to the identified misuse, the ICA suspended the eCOA service on Saturday morning. The authority has indicated that the service is expected to resume operations on January 14, 2025. This temporary halt aims to address the security vulnerabilities that allowed for the unauthorized modifications.

Reading history

Hide →

This history is cleared when the page is closed.

What option allowed for misuse of the eCOA service?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends