In this guide · 8 sections
- 01What the Online Safety Commission does
- 02Which online harms the OSC covers today
- 03Can a business report to the OSC?
- 04If a staff member is doxxed or harassed: what to do
- 05Where to report harms the OSC does not cover yet
- 06Prepare your team before it happens
- 07Do it yourself or get help?
- 08Frequently asked questions
Short answer
The OSC helps individual victims of five harms: online harassment, doxxing, online stalking, intimate image abuse and image-based child abuse. A company cannot report harm to itself yet, but it can help an employee report, or report on their behalf with written authorisation.
What the Online Safety Commission does
The OSC supports the Commissioner of Online Safety created by the Online Safety (Relief and Accountability) Act 2025, known as OSRAA. According to its launch media release of 28 June 2026, it gives victims a dedicated route to get harmful content stopped quickly. After assessing a report, the Commissioner can direct the person who posted it, the administrator of a group or page, or the platform to remove access to the content or restrict an account. Ignoring a direction is a criminal offence.
Six services carry extra obligations as prescribed online service providers: Facebook, Instagram, YouTube, X, TikTok and HardwareZone Forums. Directions can also go to messaging services. Reports are free. Decisions can be reconsidered within 14 days, and then appealed to an independent panel for a S$200 fee.
Which online harms the OSC covers today
OSRAA lists 13 categories of online harm, but the OSC is rolling them out in phases. Its What you can report page lists five for now.
| Online harm | Status | How to report |
|---|---|---|
| Doxxing | Open since 29 Jun 2026 | Directly to the OSC |
| Intimate image abuse | Open since 29 Jun 2026 | Directly to the OSC |
| Image-based child abuse | Open since 29 Jun 2026 | Directly to the OSC |
| Online harassment | Open since 29 Jun 2026 | Platform first; OSC if no adequate reply in 24 hours |
| Online stalking | Open since 29 Jun 2026 | Platform first; OSC if no adequate reply in 24 hours |
| Online impersonation | Later phase | Not yet accepted |
| Statement harmful to reputation | Later phase | Not yet accepted |
| Publication of false material | Later phase | Not yet accepted |
If you write in about a harm that is not yet covered, the government said during the Bill's debate that OSC officers will still point you to the right channel, such as the platform, the police or a community partner. The OSC also runs a no-wrong-door policy across agencies.
Can a business report to the OSC?
Not for harm done to the business itself, at least not yet. Section 22 of the Online Safety (Relief and Accountability) Act 2025 lets a victim who is a Singapore citizen, a permanent resident or a person with a prescribed connection to Singapore make a report. The five harms open today are all harms to a person: harassment, stalking, sharing someone's identity information, and image abuse.
The Act also allows a report to be made on a victim's behalf by a person or organisation the Commissioner is satisfied has the victim's written authorisation. In the Bill's second reading debate, the Minister of State confirmed that victims can authorise another individual or entity, and gave unions and professional bodies as examples.
The OSC can help when
- A customer posts an employee's home address or phone number to target them
- A staff member is harassed or stalked online because of their job
- Intimate images of a staff member are shared without consent
- An employee authorises the business in writing to file for them
Use another channel when
- Scammers impersonate your business or run fake ads
- Someone posts a negative or false review of your company
- Your business social media or WhatsApp account is hacked
- Customers are cheated through a lookalike website
If a staff member is doxxed or harassed: what to do
Frontline staff in retail, F&B, clinics and customer service are the people most likely to be filmed, named and targeted online after a dispute. A clear process protects them and shows you take it seriously.
Make sure the person is safe
If there is a threat to physical safety, call the police on 999 first. Adjust their shifts or location if their workplace has been posted.
Capture evidence before it disappears
Screenshot each post with the URL, account name, date and time. Save links to the profile and any group or page where it appeared.
Report to the platform for harassment or stalking
Use the platform's report tool and note the time. If there is no adequate response within 24 hours, the OSC can take the case.
Report doxxing directly to the OSC
For doxxing, intimate image abuse or image-based child abuse, the victim can report at osc.gov.sg straight away. There is no fee.
Get written authorisation if the business will file
If the employee prefers that HR files the report, get their written authorisation first and let them review what is submitted.
Offer support beyond takedown
The OSC lists community partners such as Samaritans of Singapore and TOUCH Community Services for counselling and practical help.
Where to report harms the OSC does not cover yet
Most online problems a business faces are about fraud, impersonation or account takeover, which already have their own routes.
| Problem | Where to report |
|---|---|
| Fake ads or pages impersonating your business | The platform's impersonation or trademark form; police if customers lost money |
| Scam sites or listings using your name | Police report; OCHA lets police direct platforms to act on scam content |
| Hacked business Facebook, Instagram or WhatsApp | Platform recovery process, then secure the account |
| Harassment of an individual staff member | Platform, then the OSC; POHA remedies remain available |
| Negative or false reviews | Platform review policy; legal advice for defamation |
Our guides cover each of these in detail: fake social media ads impersonating your business, hacked social media or WhatsApp accounts, and the OCHA e-commerce code of practice for sellers. The OSC's launch release notes that victims of harassment, doxxing or stalking can still use the Protection from Harassment Act, including Protection Orders.
This guide is general information, not legal advice. Speak to a lawyer before starting a civil claim under OSRAA's new statutory torts or POHA.
Prepare your team before it happens
A short written process saves hours when a post goes viral. It also helps staff know they will be backed up, and stops well-meaning colleagues from replying publicly.
Online harm readiness for small teams
Do it yourself or get help?
Reporting to the OSC is free and designed for victims to do on their own. What most businesses lack is the preparation: who keeps evidence, which accounts are shared, how staff spot a scam or harassment campaign early.
Our Security Awareness Training (S$390) covers phishing, account security and how to handle online abuse and impersonation, with a one-page incident sheet your team can follow.
Frequently asked questions
Not at the moment. The OSC currently handles five harms to individuals: online harassment, doxxing, online stalking, intimate image abuse and image-based child abuse. Publication of statements harmful to reputation and false material are listed for later phases. For reviews, use the platform's review policy, and get legal advice if you believe a statement is defamatory.
Not yet. Online impersonation is one of the harms OSRAA lists for progressive implementation, and it was not open in October 2026. Report fake pages and ads to the platform using its impersonation or trademark forms, and make a police report if customers have lost money. The police can act on scam content under the Online Criminal Harms Act.
Yes, with the employee's written authorisation. OSRAA allows a person or organisation to report on a victim's behalf if the Commissioner is satisfied it has the victim's written authorisation or consent. The employee must still be the victim and meet the eligibility rules, such as being a Singapore citizen, permanent resident or having a prescribed connection to Singapore.
The government has said response times will be shorter for more severe harms, and doxxing, intimate image abuse and image-based child abuse can be reported straight to the OSC. For harassment and stalking, you report to the platform first and can go to the OSC if there is no adequate response within 24 hours. The OSC does not publish a fixed turnaround.
No. There is no fee to report to the OSC or to apply for reconsideration of its decision, which must be done within 14 days. If you still disagree after reconsideration, an appeal to the independent Online Safety Appeal Panel costs S$200 and must be filed within 14 days of the reconsidered decision.