AI9OS Blog
Singapore's Online Safety Commission: What You Can Report Now, and What Still Goes Elsewhere
Since 29 June 2026 Singapore's Online Safety Commission takes reports on five online harms. Which ones go straight to it, which need the platform first, and what it cannot handle yet.
2026-10-19Becoming a Private Investigator in Singapore: What the Licence Actually Requires
Two eligibility tests, one training certificate, a S$16 fee and five years of validity. Then the rule most people miss, a licensed investigator cannot take clients on their own. What the Singapore Police Force licence page says, checked at source on 12 October 2026.
2026-10-16The Delivery Is Evidence Too
Everything upstream of the send was careful. Collection was fingerprinted, the pack audited, every file sealed. Then it was attached to an email and the chain simply stopped. The only record that a particular bundle reached a particular solicitor on a particular day lived in the sender's own mail client, which is the practice's uncorroborated account of its own conduct.
2026-10-12How a Conflict-of-Interest Matter Should Actually Start
Someone bound by a restrictive covenant is suspected of running a competing venture. The investigation is usually straightforward. What decides whether it is worth doing happens before a single search: whether the clause exists as text, whether it is still running and enforceable, which half of the likely defence open sources can reach, and which one unknown fact decides the whole matter.
2026-10-09Passed at Build Time Is Not Passed at Send Time
A delivery pack passed every check it had, and a folder of finished documents sat ready to attach. Then days went by. Someone re-saved a PDF, dropped in a late document, fixed a typo. The folder still looked like the folder that passed. Nothing checked again, because the check had already happened. The assurance covered one set of files at one moment, and what shipped was a different set at a different moment.
2026-10-05What a Matrimonial Asset Trace Actually Costs You in Dead Ends
A matrimonial asset trace is sold on what it might find. What it actually spends most of its time on is dead ends, and the expensive ones are not the searches that return nothing. They are the ones that look like findings and are not: a lot number that will not buy a title, a bill that shows who pays and not who owns, a meter that reads zero for reasons that have nothing to do with anyone moving out.
2026-10-02Three Audiences, One Investigation, Three Different Reports
The instructing solicitor, the lay client and the person who introduced the matter all want an update. They need different things, and each can be harmed by the wrong things. Sending one report to all three is the most common output mistake in the trade, and it is almost never recognised as one.
2026-09-30The Tool That Removes Client Data Is the Last Place Anyone Looks for It
A tool was built to keep client identifiers out of shared work. To prove it worked it needed test data, and the quickest correct-looking test data was the real identifiers already on the desk. They went into the tool's own test file, where nobody would ever read them as content, because everyone reads a test file as scaffolding. It was caught one step before it would have become permanent.
2026-09-28The Signed Declaration That Contradicted Its Own Free Text
A provenance declaration certified that everything had been obtained lawfully. The free-text table on the same page described documents obtained without the subject's knowledge. One sheet, one signature, one date, and the two halves said opposite things.
2026-09-16Check the Dates Before You Write the Story
A deposit was assumed to have been funded by two large transfers into the same account. It looked right, everyone involved wanted it to be true, and it was wrong. The deposit predated the transfers by three days. The story only survives if the dates run in the order it needs, and nobody had actually laid them on a line before writing it down.
2026-09-16Forfeited Is Not Recovered
Luxury items from Singapore's largest money laundering case went to public auction this month, the first of a series of sales running into mid-2027. The Minister for Home Affairs and Minister for Law told Parliament where the value goes, and it is the Consolidated Fund. Forfeited and recovered are different words for different things.
2026-09-11A Frozen Account Is Not Recovered Money
Singapore's newest anti-scam statute says in its own long title that it exists to stop transactions, not to return funds. The freeze is section 35 of the Criminal Procedure Code. The route home is section 370, and its test is not "the victim". What the provisions actually say, checked at source on 11 September 2026.
2026-09-11A Filename Is an Assertion
A screenshot arrived named for a date in August. The transactions inside it were from June. Nobody re-opened the file, because the name had already answered the question. A filename is a claim authored by a person, it travels into schedules and exhibit lists without the document attached, and it is the one piece of evidence in a bundle that nothing in the process checks.
2026-09-11An Empty Result and a Failed Read Look Identical
A move script hashed the source, copied it, hashed the destination and deleted the source when the two matched. An unreadable folder returned an empty set on both sides, so the comparison passed and the delete was authorised. Nothing crashed. Five instances of the same pattern surfaced in a single day, including a sync client reporting success while withholding 153 of 264 files.
2026-09-10A Blank Field Is Not a No
An intake pack came back with the company-interests section empty. It was read as no company interests. Two questions earlier the same form named the subject's employer, and the contact address given was a live corporate email at that employer. The blank was not an answer, and nothing in the process could tell.
2026-09-10Closed as "No Links Found". The Links Were in the File.
A matter arrived for a second look marked closed, no connection established. The graph export sitting in the same folder held direct edges to both the registered and the beneficial owner of the other company. Nobody had lied. The summary had dropped the fields before the analysis ever ran, and that is a failure mode no amount of care during collection will catch.
2026-09-08Cataloguing an Exhibit Is Not Reading It
Eleven client exhibits were referenced, provenance-checked, graded, hashed and locked away over four days. None had been read line by line. When they were, three material facts came out at once, including a bank account nobody knew existed. All of it had been in custody since day one.
2026-09-08A Nil Result Is Not a Finding Until You Prove You Could Have Found Something
Seven searches of an official register returned the firm's name. All seven were false, and the register had never been searched at all. Why an evidenced negative is the most valuable thing an investigation produces, why it is also the easiest to fake accidentally, and the two controls that separate a real nil from a broken interface.
2026-09-08How to Check the Investigator You Are About to Instruct Is Licensed, in Singapore and Four Neighbours Where the Answer Is Different
A licensed Singapore investigation agency is required by statute to take identification documents from you. If nobody asked, that is your first signal. The provisions that decide who may investigate for reward, the four questions to ask before you instruct, and why the same questions produce different answers in Japan, Hong Kong and across ASEAN.
2026-09-07Why We Will Not Run a Breach-Database Lookup, and It Is Not Squeamishness
Breach data is a statutory exposure under the Computer Misuse Act, and anything found that way is unexhibitable, so the risk buys nothing. The harder point is that a red line enforced by the operator's memory is not a red line. If the tool offers the query, the control has already failed.
2026-09-02The Bill Proves Who Pays, Not Who Owns
A utility or assessment bill names an account holder, never an owner. What a bill actually shows, why the value on a tax notice is not a valuation, why a bill and a title search do not run on the same key, and the wording to use until a search comes back.
2026-08-29Doxxed by an Anonymous Account in Singapore: Getting a Name Before You Can Get an Order
A Protection Order under POHA runs against a respondent. If the account that posted your address is a throwaway, you have a remedy you cannot yet use. What Singapore law offers to put a name to an anonymous doxxer, what the court will and will not grant, and the line where trying to unmask them yourself becomes the offence.
2026-08-26Confidence Ladders vs. Gut Feel: Why "Probably True" Needs a Number
How a four-rung confidence ladder — raw, corroborated, cross-verified, confirmed — replaces "probably true" in an OSINT report, what evidence each rung actually requires, and why the top rung must stay human-gated.
2026-08-11AI9OS vs. Hiring a Research Team: The Real Cost Comparison
A structural comparison of an OSINT platform against headcount for a licensed investigation practice — what each actually buys, where a platform is the wrong answer, and why the honest comparison is about capacity versus judgment rather than a price per seat.
2026-08-11AI9OS vs. Manual OSINT — What Actually Changes
A straight comparison of what a licensed investigator gains and gives up moving from manual, browser-tab-by-tab OSINT to an AI-native platform — collection speed, evidentiary integrity, and exactly where human judgment still has to sit.
2026-07-25Is Doxxing Illegal in Singapore? The Three POHA Offences — and the Line Where Lawful Investigation Becomes One
Yes. Since 1 January 2020, doxxing has been a crime in Singapore under POHA: three offences, up to a $5,000 fine and 12 months' jail. What victims should do first.
2026-07-18PDPA Lawful Bases for Investigators — Three Doors Into Personal Data, and Where Each One Stops
A Singapore investigator can almost never use the PDPA's default basis — consent. Lawful open-source collection walks through one of three other doors in the First Schedule, and each door has a wall around it. A practitioner's walkthrough, and how a platform can enforce the boundary in software.
2026-07-16The Five Distortions of OSINT Verification — and the Questions That Defeat Them
Anyone can collect more data faster. The scarce skill is judgment. Five predictable distortions corrupt open-source findings — authority, lawyered language, consensus, AI offloading and motivated reasoning — and each one falls to a specific written question, asked before a finding is ever called confirmed.
2026-07-16Chain of Custody in the Deepfake Era — Why OSINT Evidence Has to Prove Its Own Integrity
When any image, voice or document can be fabricated convincingly, a finding is only as good as the record of how it was obtained and whether it has been altered since. This is how a tamper-evident, hash-chained evidence locker turns open-source findings into evidence that can survive cross-examination.
2026-07-16Why We Say No: Inside a Case-Acceptance Protocol for OSINT Investigators
The seven gates, eight red lines and a 30-point rubric an OSINT practice runs before accepting any case — and why the most valuable deliverable is sometimes a smaller, lawful engagement instead of the one the client asked for.
2026-07-15The Singapore OSINT Legal Checklist: 12 Statutes to Screen Before Any Investigation
The twelve Singapore statutes every investigator should screen against before accepting an OSINT case — PSIA, PDPA, POHA, CMA, sub judice and more, with the leading cases.
2026-07-13