If CAD or the police have been in touch, read this
If you’re reading this at 1am because CAD asked you to come in, or because the police seized your laptop, or because a bank has frozen your account and mentioned a police report, you’re not alone. Cybercrime matters in Singapore land hard, often on professionals who’ve never been in trouble in their life. The fear isn’t just about the charge. It’s about your name, your job, and who will hear about this.
I’m Hasif, an Associate Director at A.W. Law LLC in Chinatown. I act for clients through Commercial Affairs Department (CAD) and police investigations, and at plea and trial in the State Courts and High Court.
This page is for you if you’ve been contacted about a computer-related offence and want to know, honestly, what happens next. The first 10 minutes are free, and nothing commits you.
What a cybercrime charge in Singapore actually is
“Cybercrime” isn’t one offence. It’s a basket of charges under different laws, usually brought together. The main ones:
- Computer Misuse Act 1993. This is the core statute. It covers unauthorised access (logging into something you shouldn’t), unauthorised modification (changing or deleting data), unauthorised interception (reading someone’s messages), and unauthorised use or supply of personal information for cybercrime.
- Penal Code 1871. Online fraud is usually charged as cheating under section 420, “dishonestly inducing delivery” (tricking someone into sending money or property). Maximum 10 years’ jail plus fine.
- CDSA (the Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act). If money from the alleged cybercrime has moved through bank accounts, money laundering charges are common, and the Police can freeze assets.
- Sector-specific statutes. For insider dealing or market manipulation via computer, the Securities and Futures Act applies. For data theft from regulated sectors, the Personal Data Protection Act may be in play.
Most cybercrime cases in Singapore start with CAD, which is the specialist financial-crime arm of the Singapore Police Force. Serious matters are heard in the State Courts. Matters with large sums or complex facts go to the High Court.
You can be charged even if no money was lost, if the alleged act was abroad but affected Singapore systems, or if you were only part of a larger operation. Intent matters, but so does what the digital evidence says about what you did and when.
When to get a cybercrime lawyer involved
Right away. If you’ve had any of these, the window for shaping the outcome is open now, not after an interview:
- A letter or call from CAD asking you to attend for questioning.
- A seizure notice or production order for your phone, laptop, or cloud accounts.
- Frozen bank accounts or a bank calling to say a transfer is being investigated.
- A police report filed against you by an employer, ex-partner, business partner, or victim of a scam.
- Charges filed (you’ve been handed a charge sheet at a police station or in court).
The three situations we see most often:
- First-time accused, caught up in a scam ring. Money runner, mule account holder, someone who “lent” their bank account. Often the client didn’t know the full picture. Early legal advice and cooperation can change everything.
- Professional, work-related allegation. IT staff, bankers, account managers accused of misusing credentials, taking client data, or moving funds. Reputation and future regulatory standing matter as much as the charge.
- Online fraud and romance scams. Multiple victims, digital trail across apps and banks, CDSA charges layered on top. These run long and contested.
If the matter is still at investigation stage, see our page on criminal investigation defence. If bail is the urgent issue, we cover that on bail applications.
What to expect from a Singapore cybercrime case, honestly
How long it takes.
Investigations run 6 to 18 months, sometimes 2 years. Digital forensics is slow, and CAD often waits until the full picture is clear before charging. Once charged, a plead-guilty case finishes in 3 to 6 months. A contested case at the State Courts takes 6 to 12 months or more. High Court matters stretch longer.
How much it costs.
A plead-guilty matter where facts aren’t disputed typically starts at S$10,000 all-in. Contested cases at the State Courts run S$25,000 to S$100,000 or more, depending on the number of charges, the volume of digital evidence, whether expert witnesses are needed, and how long the trial runs. We quote a written cap before any paid work, so you know what you’re committing to. The 10-min Cybercrime Discovery Session is always free. If your income qualifies, the Legal Aid Bureau may help, though it doesn’t cover every category of criminal matter.
What’s the hard part.
Three things, consistently.
One, reputation. Cybercrime cases often involve professionals whose careers depend on a clean record. Employers, professional bodies, and regulators often find out before the case ends. We help clients plan for that conversation.
Two, asset freezing under the CDSA. If police suspect the money is criminal proceeds, they can freeze your bank accounts at the start of the investigation, not the end. You may not be able to pay bills for weeks. We work on getting funds released where we can.
Three, disclosure to regulators. If you hold a financial licence (MAS), a compliance role, or a directorship, you likely have an obligation to report an investigation or charge. Getting that right is part of the defence, not a footnote. Our white-collar crimes page goes deeper on the regulatory side. Our blog on white-collar crime defences in Singapore walks through the common strategies we use.
How we handle cybercrime at A.W. Law
A few things we do differently:
- One lawyer, from start to end. Whoever takes your first meeting handles the case through to verdict or plea. No handovers.
- Letters you can actually read. Every document we send you is explained in simple terms.
- We reply at night. WhatsApp us until 10pm on weekdays. Cybercrime cases often move on police time, not office time.
- Speak your language. English, Malay, or Tamil.
- Honest calls. If the right move is to plead and focus on mitigation, we’ll say so. If the right move is to fight a weak case, we’ll say that too.
We’re at 133 New Bridge Road, #20-03 Chinatown Point. Two minutes’ walk from Chinatown MRT, Exit E. Walk in most afternoons between 2pm and 5pm on weekdays.
What happens next
If CAD or the police have been in touch, or if you’ve been charged, the next step is simple. Book a free 10-min Cybercrime Discovery Session using the form on this page, or message us on WhatsApp using the button anywhere on the screen.
Nothing commits you. By the end of the session, you’ll know roughly what stage the matter is at, what to say and not say at your next interview, and what a realistic timeline and cost will be.
