Singapore — MAS E-Payments User Protection Guidelines and the Shared Responsibility Framework

The clocks it starts

• Institution must complete its investigation (21 business days)The Guidelines expect a straightforward case to be completed within 21 business days, and a complex or cross-border case within 45 business days, with written reasons and the option of an independent review. Hold them to the timetable and ask for it in writing. (Period: 21 business days. We need the start date to work out your exact deadline.)MAS E-Payments User Protection Guidelines (PSN07) — Duties of the account holder and the financial institution; liability allocation for unauthorised transactions; investigation timeframes of 21 business days for straightforward cases and 45 business days for complex or cross-border casesResponse due
• Complex or cross-border investigation (45 business days)Where the institution says the case is complex, ask it to say so in writing and to explain why. The longer period is not available by default. (Period: 45 business days. We need the start date to work out your exact deadline.)MAS E-Payments User Protection Guidelines (PSN07) — Duties of the account holder and the financial institution; liability allocation for unauthorised transactions; investigation timeframes of 21 business days for straightforward cases and 45 business days for complex or cross-border casesResponse due
• Limitation period (6 years)Fatal if missedSection 6 of the Limitation Act 1959 gives six years for an action founded on contract or tort. FIDReC has its own, much shorter, practical expectation: complain to the institution first and refer to FIDReC promptly after its final reply.Limitation period

What it entitles you to, beyond money

• Check whether the bank actually notified youThe Guidelines require the institution to provide transaction notifications for every outgoing transaction on a protected account, in a form you have chosen and can reasonably be expected to receive. A missing, delayed or suppressed notification is a duty failure that puts the whole loss on the institution. Ask for the notification logs.Duties of the account holder and the financial institution; liability allocation for unauthorised transactions; investigation timeframes of 21 business days for straightforward cases and 45 business days for complex or cross-border cases
• The Shared Responsibility Framework for phishingFor phishing scams involving a spoofed digital message, the Framework imposes a waterfall: the financial institution bears the loss where it breached its prescribed duties, then the telecommunication operator where it breached its own. It is separate from, and additional to, the Guidelines.Waterfall of responsibility: financial institutions first, then telecommunication operators, where prescribed anti-scam duties were breached

What the other side will say

Each of these is a refusal this regime lets a counterparty attempt, paired with the answer to it. Reading them before you write is worth more than any amount of polish on the letter itself.

Where to take it next

1. 01Report to the financial institution and confirm in writingUse the reporting channel the institution is required to provide, obtain the reference, then confirm in writing. Ask expressly for the transaction notification logs and for the institution's assessment of which duty, if any, it says you failed.Claim direct·typically 21 days
2. 02Request an independent reviewThe Guidelines contemplate the account holder being able to seek a review of the institution's determination. Ask for it and for the reasons in writing before going further.Internal appeal·typically 21 days
3. 03FIDReCBinding on themThe Financial Industry Disputes Resolution Centre handles disputes with Singapore financial institutions. Mediation is free to consumers and adjudication carries a nominal fee; an adjudicator's award binds the institution if you accept it. FIDReC's claim limit was raised in recent years — check the current figure on its website.Alternative dispute resolution·typically 90 days·official page
4. 04Monetary Authority of SingaporeMAS does not resolve individual disputes but does supervise compliance with the Guidelines and the Shared Responsibility Framework. A report costs nothing and matters when the failure is systemic.Regulator·typically 90 days·official page
5. 05Small Claims TribunalsFor claims against a merchant the Small Claims Tribunals are fast and cheap, with a limit of SGD 20,000 (raised to SGD 30,000 where both parties consent). Lawyers are not permitted, which keeps costs down.Small claims·typically 60 days·official page