Before You Instruct an Investigator, Check the Paperwork They Owe You

10 September 2026 · Spyrrus Tech Pte Ltd

A capability deck tells you what a provider wants you to know. The Private Security Industry Act tells you what they owe you. Several of those duties are visible from your side of the table before any work starts, and checking them takes minutes rather than diligence.

This is not an argument that regulated is always better. It is narrower than that. It is that the Act creates a small set of observable behaviours, and their absence is information you can act on.

It is two licences, not one

An individual who carries out any function of a private investigator for reward needs a private investigator's licence under s 6(1)(a). A business that engages in supplying, for reward, the services of private investigators to other persons needs a private investigation agency's licence under s 7(1)(a).

Those are separate requirements with separate penalties, and a sole operator selling investigative services to clients engages both. The licensing officer is appointed under s 4(1) and the regime is administered in practice by the Police Regulatory Department of the Singapore Police Force.

So "we are licensed" is an incomplete answer. The useful question is which licences, held by whom.

The duties you can see from where you are sitting

Section 10 requires an agency to obtain identification documents from its client. That is the one you will notice, because it happens to you. If a provider has taken your instructions and your money and never asked who you are, there are two possibilities and neither is comfortable: they are not licensed, or they are licensed and not complying. The second is not obviously better than the first.

Section 8 says a person must not employ another as a private investigator unless that person is a licensed private investigator. This is the question behind the question. A licensed agency can still put unlicensed hands on your matter. So ask who will actually do the work, not only whose name is on the engagement letter.

Section 12 imposes a duty to keep records. It sounds administrative and it is the provision you will care about most if the matter is ever examined. A record-keeping duty is what makes it possible, months later, to say what was done, when, and on whose instruction. Without one you have a conclusion and no way to stand behind it.

Why this is more than form-filling

The penalties sit on the provider. An unlicensed individual faces a fine of up to $10,000 and imprisonment of up to two years under s 6(2). An unlicensed agency faces up to $50,000 and up to two years under s 7(2).

One provision points the other way, at you. Section 35 means an unlicensed private investigation agency cannot recover its fees. That is usually read as a penalty on the provider, and it is. Read it from the client's side and it says something less comfortable: the engagement you thought you had is one the Act does not recognise well enough to enforce, and the work sitting on top of it was produced by someone committing an offence while producing it. That is not a billing problem. It is a problem with the evidence.

A polished website proves nothing

Sections 6(1)(b) and 7(1)(b) are independent limbs. It is an offence to advertise, or in any way hold out, that you carry out or supply such services for reward, whether or not any work is ever performed.

Two things follow. Marketing is not evidence of a licence, because the marketing is available to anyone. And for a provider without one, the service page is not a step towards the offence; it is the offence, already complete, before a single instruction arrives.

The definition catches more than people expect

Section 5(1) is the provision everything turns on, and it says nothing about how the information is obtained. Open sources, closed sources, public registries: the source is irrelevant to the definition. Someone paid to compile information about a person is performing a function within it.

Which means the common line, it is only open-source research, so no licence is needed, is wrong in Singapore. It may be right elsewhere. Japan's Detective Business Act turns on method and expressly leaves out work carried out solely by telephone enquiry or internet collection, which is close to the inverse. We wrote about that difference in the question we answer before we accept a cross-border matter.

The exclusions in s 5(2) are real but narrower than they look, and each is anchored to a specific relationship or profession rather than to a type of work: an employer's own staff, in-house checks for the employer's own venture, advocates and solicitors, public accountants, financial standing, insurance. None of them is a general due-diligence exemption.

The checks, in the order they are easiest to run

1. Notice whether you were asked for identification. This one costs nothing because it either happened or it did not.
2. Ask which licences are held, and by whom. The agency's and the individual's are different licences.
3. Ask who will do the work. Not who will manage it.
4. Ask what record will exist afterwards, and what it will show about what was done and what was not.

A provider who is comfortable with all four is telling you something about how the file will look if it is ever read by somebody hostile. So is a provider who is not.

The statutory positions above are summarised from the Private Security Industry Act 2007 (2020 Revised Edition). The provision-by-provision working, with the verification date and the limits of what was checked, is on the free registry at ai9os.com/jurisdictions/singapore.