Is AI cold calling legal in Singapore?
Yes. No Singapore law prohibits using an AI voice agent to make marketing calls. What is regulated is the call, not the technology making it. The obligations are the same ones that apply to a human telemarketer, and they sit with your business rather than with your vendor.
That is the short answer, and it is where most articles stop. The useful part is what those conditions actually are, which ones people get wrong, and the practical problem that stops a legally compliant AI call from ever reaching the phone. That last one is covered further down and almost nobody mentions it.
This guide covers the wider legal picture. For the Do Not Call Registry mechanics specifically, which register to check and how long a check lasts, see the PDPA and Do Not Call guide.
What actually makes a marketing call unlawful
Not the AI. These are the things that get organisations into trouble:
| The problem | What it means in practice |
|---|---|
| Calling a registered number without a basis | Dialling a number on the No Voice Call register when you hold neither clear and unambiguous consent nor a valid check within the last 21 days. |
| Relying on the wrong exemption | Assuming an existing customer relationship permits a call. That exemption covers text and fax only. |
| Concealing who is calling | The caller's identity must not be hidden. The opening line should identify your organisation. |
| Ignoring opt-outs | Once someone asks to stop, you have 21 days to make it effective. With an automated dialler, that needs to be immediate. |
| Using personal data without a basis | The PDPA governs how you obtained the list, not just whether you screened it. A purchased list with unclear provenance is a problem before you dial. |
| Misrepresentation | Claiming to be someone you are not, implying an endorsement you do not have, or making claims about a product that are not true. |
Penalties for breaching the Do Not Call provisions are up to S$1 million for an organisation, or S$200,000 for an individual. The turnover-based penalty often quoted alongside the PDPA applies to the data protection provisions rather than these ones.
The problem almost nobody tells buyers about
You can do everything above correctly and still find that a large share of your calls never ring. This is not a compliance failure but an infrastructure one, and it comes from Singapore's anti-scam measures.
Telcos here have progressively tightened what they will let through:
| Since | Measure | Why it matters for AI calling |
|---|---|---|
| 2017 | Verification of domestically originating calls | Local calls are checked, so spoofed local origin is harder |
| 2019 | Blocking of commonly spoofed trusted numbers | Government and emergency numbers cannot be displayed |
| 2020 | Robocall blocking using pattern recognition | High-volume automated dialling can look like a robocall pattern |
| Dec 2022 | Blocking of international calls showing +65 3, +65 6, +65 8 and +65 9 | Overseas infrastructure displaying a Singapore number gets blocked |
The scale of that last measure is worth understanding. IMDA reports that international calls arriving with a +65 prefix fell by 97% in a year, from around 700 million in the first nine months of 2022 to 18 million over the same period in 2023, a fall of 682 million calls. Of the 18 million that still arrived, 12 million were assessed as spoofed and blocked. So the route almost entirely closed, and what little traffic still uses it is mostly stopped.
Source: IMDA, Annex B, IMDA and Telcos' Anti-Scam Measures, January 2024. Checked 4 August 2026.
Many AI voice platforms are not based in Singapore. If your provider routes calls through overseas infrastructure while displaying a Singapore caller ID, those calls can be blocked before they connect. You would see it as a terrible connect rate rather than as an error, and you would probably blame the list.
Three questions this makes essential
- Where do calls physically originate? Domestic Singapore interconnection, or overseas routing?
- How is the Singapore number provisioned? A properly allocated local number, or a display value attached to a foreign call?
- What connect rate do existing Singapore customers see? If a provider cannot answer this, they may not have any.
This is one of the reasons a provider that works well elsewhere can perform badly here, and it is why "we support Singapore" deserves a follow-up question. More on evaluating providers.
Do you have to say it is an AI?
There is no specific Singapore rule at present requiring you to announce that the caller is an AI. Anyone telling you it is legally mandatory is overstating the position, and anyone telling you it therefore does not matter is missing the point.
Three practical reasons to disclose anyway:
- People work it out. Synthetic voices are recognisable, especially once a conversation goes off-script. Being caught concealing it damages trust far more than disclosing ever costs.
- Concealment edges towards misrepresentation. Not saying "I am an AI" is one thing. Actively claiming to be a named human employee is a different and worse thing.
- Expectations are moving. Disclosure requirements have been appearing in other jurisdictions. Building the habit now costs nothing and avoids a rebuild later.
A workable opening identifies the organisation and does not pretend to be a person. Ask any provider to show you their standard opening line before you sign.
Recording calls
You can record calls in Singapore, and for AI calling you will want to, since transcripts and summaries are much of the value. But a recording that captures personal data brings the PDPA's obligations with it.
- Notify and obtain consent. Tell the person the call is being recorded and why, at the start, in the call itself. A clause in your website terms is not notification to someone you rang.
- Use it only for the stated purpose. Recording for quality assurance and then mining it for a different campaign is not what they agreed to.
- Keep it secure. Recordings of sales calls contain a lot of personal information, sometimes financial.
- Do not keep it forever. Retain no longer than reasonably necessary for the purpose, then delete.
- Be able to produce it. People have access and correction rights over their personal data, and that includes recordings.
- Know where it is stored. If your provider stores recordings overseas, transfer obligations apply.
The last point catches people out. Ask any provider which country recordings sit in, how long they are kept by default, and whether you can export and delete them yourself.
Voice cloning: where this gets genuinely risky
Using a synthetic voice is ordinary. Cloning the voice of a specific, identifiable real person is not, and it is the area where AI calling moves from a compliance question to a serious one.
- Cloning your own agents' voices needs their documented permission, and they should be able to withdraw it when they leave.
- Cloning anyone else's voice without clear permission risks misrepresentation and passing off, and if it implies an endorsement that does not exist, it is worse.
- Impersonating a specific person on a call is the behaviour Singapore's anti-scam measures exist to stop. Do not go near it.
A generic, professional synthetic voice that does not claim to be any particular individual avoids all of this and performs just as well.
Calling hours, and rules for regulated sectors
Hours are industry practice, not law
Nothing in Singapore law sets permitted telemarketing hours. The widely followed standard comes from the Contact Centre Association of Singapore's guidelines: Monday to Friday 8:00am to 9:00pm, Saturday 9:00am to 6:00pm, no calls on Sundays or public holidays. Following them is expected, but the enforceable requirement is the Do Not Call screening.
Financial advisers and insurance representatives
An additional layer applies. MAS consulted in 2023 on requiring representatives to state upfront that the purpose of a call is to market financial products, and on banning gift offers as an inducement. As at the review date below that was a consultation proposal rather than a rule in force, so confirm the current position with your compliance team. Restrictions have also historically applied to soliciting or closing the sale of certain Medisave-approved policies over the telephone.
Separately, most insurers and licensed advisory firms require internal approval of outreach scripts, recording arrangements and third-party tools. That is a firm rule rather than a legal one, but it will stop your project just as effectively. More for insurance agents.
Healthcare
Appointment reminders and recall calls are ordinary operational communication. Anything that touches a person's medical condition raises the sensitivity of the data considerably, and an AI voice agent should not be giving clinical information or advice. More for clinics.
Property
Salespersons are subject to their own industry regulation and agency policies alongside the PDPA. Check what your agency permits before deploying anything.
Legal is the floor, not the goal
Everything above describes what you can do without breaking a rule. It says nothing about whether people will want to hear from you.
Singapore is a small market with a long memory. An AI voice agent that calls a screened list within permitted hours, identifies itself, handles an objection gracefully and stops when asked, is a reasonable thing to receive. One that calls the same person weekly, cannot understand a request to stop, and hangs up when the conversation leaves its script, is a compliant way to damage your brand.
The compliance questions and the quality questions are the same questions asked twice.
Common questions
Is AI cold calling legal in Singapore?
Do I have to tell people they are speaking to an AI?
Can I record AI calls?
Why do some of my AI calls never seem to connect?
Can an AI voice agent clone a real person's voice?
Is my vendor responsible if something goes wrong?
What hours can AI calls be made?
Sources
Checked 4 August 2026. Rules change, so verify before relying on any of this.
- PDPC, Advisory Guidelines on the Do Not Call Provisions. Consent standard, sender identification, and the 21-day prescribed duration.
- IMDA, Anti-Scam Measures (Annex B, January 2024). Domestic call verification from 2017, spoofed trusted number blocking from 2019, robocall blocking from 2020, and international +65 prefix blocking from December 2022, with the volume figures quoted above.
- PDPC, Do Not Call Registry and Your Business. Obligations overview and opt-out handling.
- MAS, Consultation Paper P002-2023. Proposals on prospecting and telemarketing safeguards for financial advisers. Consultation, not a rule in force at the review date.
- PDPA data protection obligations relevant to call recording: notification, consent, purpose limitation, protection, retention limitation, access and correction, and transfer limitation.
- Contact Centre Association of Singapore, Personal Data Protection and Telemarketing Guidelines. The calling hours standard. The association's public resource page was unavailable at the time of writing, so this is cited from secondary sources pending the primary document.
This is general information, not legal advice. It does not account for your circumstances, your sector's rules, or changes made after the date above. Get advice from a Singapore-qualified lawyer before relying on it for a live campaign.
Related reading
PDPA and the Do Not Call Registry
The screening mechanics in full: three registers, the 21-day rule, and the exemption that does not cover voice.
Read guideHow to choose a provider
Testing compliance controls, localisation and latency instead of taking a vendor's word.
Read guideAI calling for insurance agents
Where the MAS layer sits on top of the PDPA, and what your compliance team will ask.
Read more