In this guide · 8 sections
Short answer
An email from "SGNIC" asking you to pay for your .sg domain is a scam. SGNIC never requests payment for domain transactions; renewals are billed by your registrar. Check your domain's status with the WHOIS search on sgnic.sg, then contact your registrar directly.
What SGNIC's scam alert says
SGNIC's Scam Alert & Advisory, dated 21 September 2026, covers two kinds of fake email.
| Scam type | What the fake email asks | What SGNIC says |
|---|---|---|
| .sg domain name scam | Click a link, give personal information or pay to keep your domain | SGNIC will never request payment for domain transactions; renewal notices come from your registrar or provider |
| SMS Sender ID Registry (SSIR) scam | Click a link to pay a set-up or listing fee | SGNIC emails will not contain a payment link; SSIR fees are paid only in the SSIR portal |
This matches SGNIC's domain registration FAQ, which says SGNIC does not charge registrants directly. You pay your registrar; the registrar deals with SGNIC.
How .sg domain renewal really works
Knowing the normal flow makes fakes easy to spot.
- You buy from a registrar or reseller. SGNIC keeps a list of accredited registrars. Your web designer or IT provider may have bought the domain for you through one of them.
- The registrar bills you. Renewal reminders and invoices come from that company, usually to the email you gave when registering.
- Renewal terms are short. SGNIC's FAQ says .sg renewals are for 1 or 2 years, and the new expiry date cannot be more than 3 years ahead.
- Changes go through the registrar. Contact details, nameservers and transfers are handled in your registrar account, not by email links from the registry.
If you do not know who your registrar is, that is the first thing to fix. Our guide to the best domain registrars in Singapore explains how to find and move it, and what to do if your domain has expired covers the worst case.
How to check a suspicious domain email in five minutes
Do not use any link, phone number or QR code in the email. Check independently.
Look at who is asking for money
If the sender claims to be SGNIC and asks for payment, stop: SGNIC does not bill registrants. A real bill names your registrar.
Check the sender's real address
Open the full sender details. Look-alike domains, free email addresses and reply-to addresses that differ from the sender are warning signs.
Look up your domain on sgnic.sg
Type sgnic.sg into your browser yourself and use the WHOIS search at the top right. It shows the registrar and expiry date, so you can see whether a renewal is even due.
Log in to your registrar directly
Go to your registrar's website from a bookmark or search, sign in and check the renewal status and any invoices there.
Report and delete
Report the email as phishing in Outlook or Gmail. If unsure, call the ScamShield Helpline at 1799. Warn colleagues who handle invoices.
Our guide on how to spot a phishing email covers the general signs, which apply here too.
Why scammers target domain owners
A domain is the key to your website and email. Criminals use fake renewal emails for three things: collecting a "renewal fee" for nothing, stealing your registrar login, and harvesting personal details for later scams.
A stolen registrar login is the dangerous one. With it, an attacker can change your nameservers and redirect your website and email. That is called domain hijacking, and it can mean customers see a fake site and emails to your staff go to the attacker.
How to lock down your .sg domain
Five settings protect a domain against both scams and hijacking.
Domain security checklist
SGNIC's RegistryLock is free as of October 2026. When enabled, SGNIC rejects nameserver and DNSSEC changes until your administrative contact unlocks the domain through the VerifiedID@SG portal with Singpass or Corppass. It adds a step when you genuinely change providers, so plan for that, but it stops a stolen registrar password from redirecting your domain.
SMS Sender ID scam emails
If your business sends SMS under a registered Sender ID, the same alert applies. SGNIC runs the SMS Sender ID Registry (SSIR), and scammers are sending fake payment links for the set-up fee and the annual Sender ID listing fee.
SGNIC says its emails never contain payment links, and SSIR fees are paid only by logging in to the SSIR portal at smsregistry.sg. Type that address yourself and check it before entering any login or card details.
Do it yourself or get help?
Checking a suspicious email and turning on 2FA at your registrar are quick jobs you can do now. Finding a lost registrar account, moving a domain into your own name or setting up RegistryLock with the right administrative contact takes longer.
Our Domain & DNS Setup service (S$99, paid upfront) sorts out ownership, auto-renewal and DNS records. If staff keep falling for invoice and renewal scams, Security Awareness Training (S$390) covers how to check before paying.
Frequently asked questions
No. SGNIC says it will never request payment from you for any domain name transaction. Renewal notices and invoices come from the registrar or service provider you registered the domain with. An email claiming to be SGNIC and asking for payment should be treated as a scam.
Type sgnic.sg into your browser yourself and use the WHOIS search at the top right of the site. It shows the domain's status, registrar and expiry date. You can also log in to your registrar account. Never rely on a date given in an unexpected email.
RegistryLock is an SGNIC feature that rejects nameserver and DNSSEC changes on a .sg domain until the administrative contact unlocks it in the VerifiedID@SG portal using Singpass or Corppass. SGNIC provides it free of charge as of October 2026, though it says it may charge in future with advance notice.
If you only clicked, close the page and run a malware scan. If you entered a password, change it at once on the real site and turn on two-factor authentication. If you paid, call your bank immediately. Then check your registrar account for changes and make a police report.
Run a WHOIS search on sgnic.sg for your domain; the result names the registrar. If a web designer or IT provider bought it, they may hold the account. Ask them to transfer the account, or the domain, into your company's name so renewals and security settings stay under your control.