Persona launches Singpass integration to help companies scale in APAC
Singapore has one of the world's most mature national digital identity ecosystems, with nearly universal adoption of the Singpass digital identity and regular use of the Singpass app. Singpass-based verification flows offer a secure, compliant, and low-friction option for onboarding and reverification.
Persona registered a Singapore entity, established local directorship, completed CorpPass provisioning, and secured Government Technology Agency (GovTech) approval to operate as an aggregator on behalf of companies that rely on Singpass to verify a user’s identity. Now, organizations can go live and start verifying with Singpass through Persona in days.
"Singpass's MyInfo helps extract personal information for onboarding in literally seconds. With this added operational efficiency, businesses get an additional layer of authentication during KYC and can boost revenue by increasing conversion rates," says Eugene Goh, Persona's regional manager for ASEAN. "I use Singpass regularly through many avenues, and it definitely helps keep access to sensitive information seamless and secure, especially for identity verification use cases."
What is Singpass?
Singpass is Singapore's national digital identity system, operated by GovTech. It authenticates Singapore citizens, permanent residents, and qualifying foreign nationals to government services, healthcare, banks, and a growing range of private platforms.
More than 97% of Singapore's eligible population holds a Singpass account, making it one of the highest-saturation national digital IDs in the world. For organizations operating in Singapore, the practical implication is direct: if your product doesn't accept Singpass, you're asking users to do something they no longer do anywhere else.
Singpass at a glance | |
|---|---|
Operator | Government Technology Agency of Singapore (GovTech) |
Launched | 2003 (Singpass app launched in 2018) |
Adoption | Nearly universal and most people regularly use the Singpass app. |
Data source | MyInfo, a government-run service that pulls from authoritative government registries. |
Singpass authentication | QR-based initiation to authenticate through Singpass, which includes face/finger scan or SMS OTP. |
What's the difference between Singpass and MyInfo?
Singpass also underpins MyInfo, the government-operated attribute-release API that returns verified personal data (e.g., legal name, date of birth, identification number, and registered address) after a user authenticates with Singpass and consents to share specific fields.
The data is pulled directly from Singapore's authoritative civil and immigration registries and processed within seconds. The result is higher conversion, less frustration, and increased revenue.
How does Singpass reduce friction?
Singpass can reduce onboarding friction because it may be a more familiar and simpler process than alternative routes.
Nearly every eligible Singaporean has a Singpass, and many use it monthly. As of mid-2026, GovTech reports that Singpass facilitates over 41 million transactions monthly and that over 84% of users use the Singpass app. Asking users to complete Singpass authentication is asking them to do something they’re already familiar with.
Alternatively, document-based verification steps often require users to upload a picture of their government ID and take a selfie. While it’s not an especially difficult process, it can certainly feel like more of a burden than the familiar Singpass route.
How does Singpass prevent identity fraud?
Singpass-based authentication can also help deter identity fraud because the Singpass app enforces device binding, supports QR-based authentication, and uses hardware-based verification.
Spoofing a Singpass authentication requires compromising the user's registered device. And tampering with MyInfo data requires altering Singapore's civil registries. Both are difficult to do and nearly impossible to scale.
Traditional GovID and selfie verification are susceptible to additional types of attacks. Although multi-layered verification and fraud prevention systems will stop the vast majority of attacks, the risk is still slightly higher than when you’re using Singpass.
What can you do with Singpass through Persona?
Persona lets you accept Singpass authentication across any inquiry flow to improve fraud prevention, reduce friction during onboarding, and consolidate processes into a single, orchestrated workflow.
Through Persona, you can:
Accept Singpass authentication in any Persona inquiry flow.
Add MyInfo-released attributes to the verification records, such as the user’s full legal name, National Registration Identity Card (NRIC) number, date of birth, and registered address.
Pre-fill forms within seconds by copying user-approved MyInfo data to improve the onboarding experience.
Combine Singpass with Persona's screenings, including PEP and watchlist checks, adverse media reports, and risk scoring.
Maintain a complete audit trail of the authentication, released fields, and downstream checks for government and internal reviews.
In short, Singpass answers, "Who is this person, according to Singapore's government?” Persona's reports answer "What do we know about this person's risk profile?"
For regulated financial institutions, lenders, payments platforms, and crypto operators onboarding Singapore users, this combination produces a defensible, documented verification record covering both identity confirmation and risk assessment.
If you're onboarding users in Singapore, Persona is now accepting early access requests for Singpass-based identity verification. Contact us to join the early access list.
FAQs
Who can use Singpass?
Toggle description visibility
Singpass is available to Singapore citizens, permanent residents, and qualifying foreign nationals (including most work pass holders and certain long-term visit pass holders). Almost every eligible Singaporean has a Singpass account, and most use the Singpass app every month. Qualifying foreign nationals can register for a Singpass account. There is also a Singpass Foreign user Account (SFA) for foreign individuals who need to transact with specific Singapore government agencies.
What MyInfo fields does Persona return?
Toggle description visibility
Standard fields include full legal name, National Registration Identity Card (NRIC), date of birth, nationality, gender, and registered address. Additional fields, such as mobile number or email address, can be requested based on the specific MyInfo dataset you require and that your users consent to share.
How long does Singpass verification take?
Toggle description visibility
Singpass verification can take several seconds or minutes, depending on the authentication method (e.g., face or finger scan versus an SMS one-time password). Once the user authenticates with the Singpass app and approves the requested MyInfo fields, the data is returned, and the verification can be completed almost immediately. Unlike with traditional verification processes, users don’t need to take a selfie or upload pictures of their government ID.
Does Singpass replace document verification?
Toggle description visibility
A Singpass and MyInfo verification can verify a user’s identity against government registries without requiring additional documents. For users without a Singpass account, Persona's dynamic routing allows you to create and offer several fallback flows, including more traditional government ID and selfie verification.
Does Singpass satisfy MAS KYC requirements?
Toggle description visibility
Singpass-authenticated verification can satisfy the identity verification standard that the Monetary Authority of Singapore (MAS) expects for regulated financial institution onboarding. This is important because the MAS has progressively raised its expectations, and MAS AML/CFT notices (including AMLD 01/2018 and Notice 626) and Technology Risk Management Guidelines set specific requirements for identity verification.
Is Singpass compliant with Singapore's PDPA?
Toggle description visibility
The Singpass and MyInfo consent flow is designed to comply with Singapore's Personal Data Protection Act (PDPA) requirements. For product and compliance teams, that means you don't need to build a separate consent layer or engineer a PDPA-compliant workflow on top of an approved integration.
The PDPA requires organizations to have clear and specific consent from users who understand exactly what data is being collected and why. With Singpass, users see the specific fields and have to tap "Agree" before MyInfo releases any data. GovTech’s interface also records the consent and what was shared at the point of release.
