Artificial Intelligence1 min read

Singapore authorities warn of privacy, security risks from personal AI agents

By · Published by Everything Blog

In short

A joint advisory from Singapore's top digital and cybersecurity agencies warned that scammers can trick background-operating AI agents into transferring funds or leaking private data. Consumers must avoid treating these automated systems like trusted human assistants or granting them broad, unmonitored privileges. Officials outlined five key protective measures, emphasizing that permissions must be configured directly within application settings rather than through conversational chat prompts. To prevent exploitation, the guidance urges individuals to maintain strict oversight and require explicit approval before tools carry out impactful real-world tasks.

Key points

  • Consumers remain legally liable for any harmful or unintended actions carried out by pers…: Consumers remain legally liable for any harmful or unintended actions carried out by personal AI agents on their behalf.
  • Permissions should be strictly managed through application settings rather than relying o…: Permissions should be strictly managed through application settings rather than relying on chat instructions that may fail.
  • Critical platforms involving banking, healthcare, and government authentications like Sin…: Critical platforms involving banking, healthcare, and government authentications like Singpass must remain completely disconnected from personal AI agents.

Sources checked by our analysis pipeline: 1

"AI agents can be very useful, but you cannot treat them like human assistants and give them the same broad access to your information and implicit trust," said the authorities.

SINGAPORE: Consumers using personal artificial intelligence agents should be cautious when giving them access to apps and online accounts as scammers could manipulate the technology into transferring money or revealing sensitive information.

"AI agents can save you time, but they also bring new privacy and security risks," said the Cyber Security Agency (CSA), GovTech and the Infocomm Media Development Authority (IMDA) in a joint advisory issued on Friday (Nov 6).

Unlike AI chatbots, personal AI agents can take actions on users' behalf to help with everyday tasks.

For instance, they can connect to apps and online accounts, browse websites, manage emails and make bookings. They can also store users' preferences and information they have shared.

Examples of AI agents include Dots, Hermes, Muse, Grok Bot and OpenClaw.

"Depending on the access you give them, AI agents may read and reveal sensitive personal information, make mistakes, or take actions that you…

Artificial Intelligence