Singapore's digital public infrastructure: Singpass, Myinfo and PayNow
Singapore built its digital public infrastructure in a different way from Estonia or India: a strong central government agency, a single national login that was gradually turned into an identity platform, consent-based reuse of government-verified data by private firms, and an instant payments layer built by banks with public encouragement.
Singpass: from shared password to identity platform
Singpass went live on 1 March 2003 as a single password for government e-services, replacing separate logins for each agency. For its first fifteen years it was essentially an authentication service for public websites.
The shift came with the National Digital Identity (NDI) programme, one of the strategic projects of Singapore's Smart Nation initiative launched in 2014. Key steps include:
- the creation in 2016 of the Government Technology Agency (GovTech), the statutory board that runs Singpass and much of the government's digital infrastructure;
- the Singpass mobile app in October 2018, adding biometric login on the phone;
- the opening of Singpass login to private-sector services such as banks, insurers and telecoms operators, so that residents use the same government-backed identity to open accounts or sign up for services;
- digital signing services based on Singpass, letting residents sign documents electronically with the national identity.
The approach is platform plus participants: the state runs the identity and authentication layer, and public and private service providers integrate it through documented APIs, as described on the Smart Nation programme site and in the Singpass developer documentation.
Myinfo: "tell us once", with consent
Myinfo, launched by GovTech in 2016, lets residents share government-verified personal data (such as name, address, date of birth and, where relevant, income or housing data) with a service, after explicit consent in the Singpass flow. Forms are pre-filled and the receiving organisation does not have to ask for scanned documents.
Myinfo was later opened to approved private-sector organisations. A bank onboarding a customer can, with the customer's consent, retrieve verified data directly instead of checking photocopies, which reduces both effort and fraud risk.
A related system, SGFinDex (the Singapore Financial Data Exchange), launched in December 2020 under the Monetary Authority of Singapore and the Smart Nation programme. It uses Singpass to let individuals consolidate, with consent, financial information held by participating banks and government agencies, so they can see their finances in one place.
The consent-based pattern is close to what India later formalised with its Account Aggregator framework. We compare the models in data exchange layers explained.
PayNow: instant payments by phone number
PayNow, launched in July 2017 by participating banks under the Association of Banks in Singapore, is an overlay on the country's existing instant payment system (FAST). It lets people and businesses send money using a mobile number, national identity number or business registration number instead of a bank account number. Standardised QR codes (SGQR) later brought merchant payments onto shared rails.
Singapore then linked PayNow to other countries' fast payment systems. A link with Thailand's PromptPay started in April 2021, and a link between PayNow and India's Unified Payments Interface launched in February 2023, allowing person-to-person transfers between the two systems using a phone number or virtual payment address. These bilateral links are early examples of what the G20 and the Bank for International Settlements discuss as interlinking fast payment systems. See UPI and instant payment systems for the wider context.
What makes the Singapore model distinctive
| Feature | Singapore | Contrast |
|---|---|---|
| Identity | A login that evolved into an identity platform used by public and private services. | India's Aadhaar started as a biometric identity number; Estonia's started with a chip card. |
| Data sharing | Centralised consent service (Myinfo) for government-verified data. | Estonia's X-Road is a federated exchange between registers. |
| Payments | Bank-led overlay with public encouragement, then cross-border links. | India's UPI is run by NPCI, a not-for-profit owned by banks, under the central bank's oversight. |
| Operator | A single, well-resourced government agency (GovTech). | More distributed institutional arrangements in larger federal states. |
Strengths
- Coherence. One agency, one identity, one consent experience: users see a consistent pattern across hundreds of services.
- Private-sector reuse. Opening identity and verified data to banks and others multiplied the value of public investment.
- Consent as the default for data sharing with private parties, with the transaction visible to the user.
- Incremental evolution over two decades instead of a single big-bang launch.
Limits and questions
- Scale and context. Singapore is a compact city-state with high connectivity and strong state capacity. Many of its choices depend on that context.
- Centralisation. A single identity and consent hub is convenient, but it concentrates risk and power. Its safety depends on security engineering and on legal limits on how the state itself uses data.
- Two legal regimes. The Personal Data Protection Act 2012 governs private organisations, while the public sector is governed by separate rules, notably the Public Sector (Governance) Act 2018. Observers have asked whether oversight of public-sector data use is as independent as that of the private sector.
- Fraud and scams. As more of life runs on one credential, account takeover becomes more damaging. Singapore has added protections over time, which shows that identity systems need continuous investment, not a one-off build.
Lessons
- An identity system becomes infrastructure when others can build on it: publish APIs and onboard private services.
- Consent flows for sharing verified data reduce friction and fraud, provided users can see and control what is shared.
- Payments overlays using aliases (phone, ID number) can sit on existing bank rails rather than replacing them.
- Cross-border links are easier once domestic systems are standardised.
Sources
- Smart Nation Singapore, smartnation.gov.sg (National Digital Identity programme and milestones), and Singpass.
- Singpass, developer documentation.
- Monetary Authority of Singapore, Singapore Financial Data Exchange (SGFinDex).
- Association of Banks in Singapore, PayNow.
- Monetary Authority of Singapore, mas.gov.sg (media releases on the PayNow–UPI linkage, February 2023).
Case studiesEstonia's X-Road
The federated data exchange layer launched in 2001, how it works, how it went open source and cross-border, and what transfers elsewhere.
Case studiesUPI and instant payments
How UPI works, why it grew, how it compares with Pix and Europe's rules, and the questions that remain open.
GuidesDigital ID privacy safeguards
Minimisation, sector-specific identifiers, selective disclosure, access logs and the court cases that shaped the field.