🧔♂️ A friendly human may check it before it goes live. More news here
SG orders Meta to expand anti-scam facial recognition on Facebook
Singapore’s Ministry of Home Affairs and police have ordered Meta to expand measures against impersonation scams on Facebook.
This follows a 2025 directive under the Online Criminal Harms Act requiring facial recognition and other steps to protect certain government officials.
Reports show a decline in scams involving those officials, but scammers now target others not covered before.
The new order requires Meta to enhance facial recognition and prioritize local user reports.
Compliance deadlines differ: measures for government officeholders by January 31, for high-risk individuals by February 28, and phased facial recognition for notable Singaporean Facebook users with full implementation by June 30.
Non-compliance risks fines up to S$1 million (US$793,000) and daily penalties.
🔗 Source: CNA
🧠 Food for thought
Implications, context, and why it matters.
### The mandate’s technical details will determine its true impact
- The exact technical standards for the “enhanced facial recognition measures” in Singapore’s Online Criminal Harms Act (OCHA) implementation directive need to be checked.
- The rules for who is treated as a “high risk of impersonation” need to be clarified, including people with police reports, along with the meaning of a “notable Facebook user”.
- Those definitions will be used to gauge Meta’s workload under the Jan 31, Feb 28, and Jun 30 deadlines, plus the changes Facebook users in Singapore may face.
### Identity verification vendors may see demand, but the directive is about facial recognition on Meta’s side
- Vendors that sell biometrics (automated identification using physical traits like facial features) or liveness detection (checks designed to ensure a real person, not a photo or video, is presenting their face) could get more requests if Meta or other platforms hire outside help.
- Public descriptions say Meta must add enhanced facial recognition measures in Singapore and speed up reviews of end-user reports from Singapore. They do not lay out mandatory third-party identity checks for government officials, high-risk individuals, or notable users.
- Any vendor setup still needs to follow Singapore’s Personal Data Protection Act (PDPA), which governs organisations’ handling of personal data, including biometric data.
