
Singapore’s war on scams has mostly been fought far from the victim: in police operations centres, bank back offices and, more recently, in rulebooks telling platforms what they must block. Now the city-state wants part of that fight to happen inside the phone itself.
Google on Wednesday announced two initiatives with the Singapore Government, unveiled on the sidelines of Singapore International Cyber Week (SICW) 2026. The first brings Singapore into Google’s Fairwind Programme, a gated scheme that gives vetted defenders the company’s most capable cyber models, including its new frontier model, Gemini 4 Argon.
The second pairs GovTech Singapore with Google DeepMind to build an on-device AI model for Android that flags scam attempts in real time without sending private conversations to the cloud.
Also Read: Singapore’s cybersecurity paradox: Leading in digital, lagging in defense
Both deals are framed as defensive. Both also deepen Singapore’s reliance on a single US tech giant at a time when access to frontier AI has become a geopolitical lever.
An unguarded model for trusted hands
Fairwind launched on September 2 as a limited access programme for governments and trusted partners, starting with Gemini 3.8 Flash Cyber paired with Google’s CodeMender agent. Argon, announced on September 30, has since become the programme’s headline act. Fairwind partners and internal Google teams get a version of Argon without its cyber guardrails, the filters that normally block requests that look like hacking.
Organisations may only grant Argon access to internal cybersecurity, incident response, or penetration testing teams, and must track employee access and use.
Google’s pitch is speed. Instead of spending weeks manually fixing vulnerabilities, it says defenders can generate verified, deployment-ready patches in minutes inside their own secure cloud environment. On Google’s own leaderboard, Grok 4.7, Gemini 4 Argon and GPT-6 Astra tie at 68 per cent on the CWE-bench v1 remediation benchmark, which also means the model still misses roughly a third of the test’s tasks.
“Minutes, not weeks” is a vendor claim, not a measured outcome. Analysts have pointed out that the clearest evidence would be merged-patch or time-to-remediation results from Fairwind partners, which Google has not published. An AI that finds bugs faster than humans can review fixes risks lengthening the backlog, not shortening it.
There is also the question of who sees what. Google says it monitors Argon’s chain of thought and its actions and stops execution when necessary. That is a sensible safety measure, though it implies a foreign company has some line of sight into how a government’s defenders probe their own systems. Google does say Argon supports zero data retention when used as a managed model on Gemini Enterprise, but the terms of Singapore’s participation were not disclosed.
A crowded, fragile club
Google is not the only lab rationing its sharpest cyber tools. Anthropic launched Project Glasswing on April 7, 2026, deploying its restricted Claude Mythos Preview model to a vetted consortium, and OpenAI responded with Daybreak on May 11. Each programme decides which governments and companies qualify, making access itself the product.
That access can disappear overnight. In June, US export controls forced Anthropic to suspend its Mythos and Fable models before Washington lifted the restrictions at the end of the month, an episode e27 has argued created a hydra rather than containing risk. For a small state building critical defences on American models, the lesson is clear: the off switch sits in another capital.
The scam problem is a human problem
The second initiative targets a more personal threat. Singapore’s scam-related losses fell 19 per cent to S$913.1 million (about US$715 million) in 2025, but the composition of those losses explains why the government is looking at devices. In 81.8 per cent of 2025 scam cases, victims transferred the money themselves rather than having their accounts taken over. Takedowns and bank freezes mostly come too late; the decisive moment is when a manipulated person presses “send”.
Also Read: Deepfake fraud losses hit US$3.7B as scams spread beyond social media
The GovTech-DeepMind model is designed for that moment. Lightweight Gemma models are fine-tuned on local scam narratives, including impersonation of public institutions, banks and local figures, and run entirely on the handset. When a conversation shows the high-pressure patterns of social engineering, a warning pops up on screen.
“Fighting scams shouldn’t mean sacrificing personal privacy,” said Mark Chen, Director of Trust and Safety at GovTech Singapore, adding that the approach keeps personal communications completely private.
The announcement leaves key questions unanswered. There is no launch date, no accuracy or false-positive data, and no explanation of how the model reads conversations inside end-to-end encrypted apps like WhatsApp or Telegram, which by design hide content from everyone but the sender and recipient. The model is also Android-only in a market where iPhones are hugely popular, leaving a large share of users uncovered.
The timing is not accidental. Singapore has tightened scam rules for messaging, social media and e-commerce platforms, with Google Messages and Google Meet among the designated services that must comply by January 31, 2027, under threat of fines of up to S$10 million (US$7.83 million). Meta has already disrupted 3.7 million scam-linked assets alongside police, and authorities have taken down 30,000 iMessage accounts. A government-endorsed on-device shield is as much Google’s compliance story as its public-safety one.
It also enters a crowded field. Singapore’s ScamShield app already filters calls and messages, and caller-ID players such as Taiwan’s Gogolook (Whoscall) and Truecaller have built large regional followings. Google’s edge is distribution: a model built into Android reaches people who would never download a separate app.
Grading its own homework
Google surrounded the announcement with supporting statistics. It says Google Play Protect has blocked more than 3.3 million installation attempts of potentially malicious apps across more than 770,000 devices, without specifying the period. It also cites studies showing that ten minutes of its Be Scam Ready game reduced players’ estimated scam risk by 20 per cent, and is launching a 2.0 version that halves playtime. These figures come from Google, and the effects of a quiz on behaviour months later are hard to measure. Its earlier work with the region, such as the US$5 million ASEAN Foundation drive, followed a similar mix of philanthropy and product.
Also Read: Should cybersecurity be nationalised?
If the on-device model works, the stakes reach well beyond Singapore. Malaysia ranked highest in the region for scam prevalence, with 32 per cent of adults losing money to scams, followed by the Philippines at 31 per cent. In those markets, as e27 has argued on Thailand’s scam epidemic, the problem is now technological and so must be the response, especially as AI phishing turns trust into the weakest link.
Singapore has once again cast itself as the region’s test bed. Whether this test produces a public shield or a deeper dependency will depend on details neither side has shared yet.
The post Singapore wants Google’s AI to catch scammers before victims hit send appeared first on e27.








