5 Best Email Databases for Singapore in 2026 (PDPA-Compliant)
By Kushal Magar · October 14, 2026 · 13 min read
Key Takeaway
An email database Singapore teams can rely on is judged by verified, genuinely local addresses, not headline counts. The PDPA's business contact information exclusion does not remove your duties under the Spam Control Act 2007, which requires an unsubscribe facility and an <ADV> label on bulk unsolicited commercial email and bans sending to harvested or guessed addresses. Use a database to find and verify named contacts, then send within those rules.
TL;DR
An email database Singapore sellers can use well is one that returns verified work addresses for people who actually sit in Singapore, because the market is small and padded regional records waste a large share of any list. We did not run these tools on Singapore data. This guide compares their published pricing pages and sets them against the text of Singapore's statutes.
- Best for waterfall coverage and pre-send verification: SyncGTM, 50+ providers queried in sequence
- Best for LinkedIn-first lookups: Lusha, free plan with 40 credits a month
- Best finder for a known list of Singapore domains: Hunter.io, from $49/mo or $34/mo billed yearly
- Best all-in-one finder, verifier and sender: Snov.io, Starter at $39/mo
- Best for filter-based list building on a free plan: Apollo.io, check current pricing
Email Database Singapore: What the Spam Control Act and PDPA Mean for a List
Two Singapore statutes touch a purchased or enriched email list, and they answer different questions. The Personal Data Protection Act 2012 (PDPA) asks how an organisation may collect, use and disclose personal data. The Spam Control Act 2007 asks what you must do when you send unsolicited commercial email. Passing the first does not pass the second. We read the current text of both on Singapore Statutes Online. The regulators' own pages, at pdpc.gov.sg and imda.gov.sg, blocked our automated fetch, so we have not reviewed their guidance or individual enforcement decisions. This section is general information, not legal advice.
Spam Control Act: what counts as unsolicited
Section 3 defines a commercial electronic message by its primary purpose, such as offering or promoting goods or services. Section 5 says a message is unsolicited if the recipient did not request it or consent to it, and section 5(2) adds that a recipient is not treated as having consented merely because their address was given or published. A work address on a company website is therefore not consent. In the sections we read, nothing carves out a message because the recipient is a business. The Act reaches messages with a Singapore link under section 7, which includes a recipient entity that carries on business in Singapore.
Bulk thresholds and the Second Schedule
The detailed sender duties apply to messages sent in bulk. Section 6 deems messages bulk at more than 100 with the same or similar subject matter in 24 hours, more than 1,000 in 30 days, or more than 10,000 in a year. A modest daily sequence can cross the 30-day line quickly. For bulk unsolicited commercial email, the Second Schedule requires:
- An unsubscribe facility: for email, an email address the recipient can use, plus a clear statement in English explaining how, kept valid for at least 30 days after sending, at no more than the usual cost of that kind of address
- Honouring an unsubscribe request: no further unsolicited commercial messages after 10 business days from the day it is submitted
- The letters <ADV> with a space before the title in the subject field, to identify the message as an advertisement
- A subject that is not false or misleading, and header information that is not false or misleading
- An accurate and functional email address or telephone number by which the sender can be readily contacted
Dictionary attacks and address harvesting
Section 9 is blunter. A person must not send, cause to be sent or authorise the sending of an electronic message to addresses generated or obtained through a dictionary attack or address-harvesting software. The Act defines a dictionary attack as automated generation of possible addresses by combining names, letters, numbers or symbols into permutations. That matters for email finders: a tool that guesses firstname.lastname@company.com and then sends without confirming the address exists is close to the definition in spirit, though whether a given product is caught is a legal question. Verified addresses from named people are safer than guessed patterns, and a bulk send to unverified guesses is the pattern to avoid.
What happens if you get it wrong
Sections 13 and 14 let a person who suffered loss from a breach of section 9 or 11 sue the sender. The court can grant an injunction, damages, or statutory damages of up to S$25 per message, capped at S$1 million in aggregate unless the claimant proves actual loss above that. In the sections we read, the Act creates civil claims rather than a regulator fine. Section 16 separately lets internet access and telecommunications providers issue a code of practice, with the Info-communications Media Development Authority's approval, on technical measures to control unsolicited messages.
PDPA: the business contact information exclusion
Section 2 of the PDPA defines business contact information as an individual's name, position or title, business telephone number, business address, business email address or business fax number, and similar information not provided solely for personal purposes. Section 4(5) says Parts 3, 4, 5, 6 and 6A do not apply to it, except where it is expressly mentioned. In practice that takes a named person's work email out of the PDPA's main consent obligations in section 13. It does not cover a personal Gmail address, and it does not touch the Spam Control Act, which is a separate statute.
For personal data outside that exclusion, consent can be deemed. Section 15A allows deemed consent by notification if the organisation first assesses that the use is not likely to have an adverse effect on the individual, tells the individual what it intends and why, and gives a reasonable period and manner to opt out. Section 15 separately deals with deemed consent in other situations; we did not review its detail. Section 48J allows the Personal Data Protection Commission to require a financial penalty for intentional or negligent contraventions, capped at 10% of annual Singapore turnover for organisations above S$10 million, and S$1 million otherwise.
Do Not Call is a phone rule
Section 43 restricts sending a specified message to a Singapore telephone number without valid confirmation that it is not on the relevant register. It speaks of telephone numbers, so it does not govern email. If your plan includes calls or texts, our Singapore phone number database guide covers that side.
How APAC-Wide Databases Pad Singapore Counts
A vendor can say it has hundreds of thousands of Singapore contacts and still hand you a short list of usable ones. We have not measured any vendor's Singapore data, so treat the following as patterns to test rather than findings. For scale, one data seller's landing page cites more than 400,000 registered Singapore business entities and 17,884 LLPs, figures that carry no source or date and say nothing about reachable people.
- Country field set by the company, not the person: a regional director in Jakarta or Sydney can be tagged Singapore because the entity is registered here
- Regional-HQ records: executives listed against a Singapore office who are based elsewhere in APAC, counted once for every market they cover
- Stale roles: a contact who left months ago stays in the count until a refresh, and Singapore professionals move between regional roles often
- Shared inboxes such as info@ or sales@ counted as contacts, and accept-all domains that return a positive server response for any mailbox
- Counts of records, not verified deliverable addresses, so the headline number mixes both
A 100-record test before you buy
Pull 100 Singapore records from each vendor for the same ICP. Check each person's listed location on LinkedIn, confirm the employer on the ACRA register for registered entities, count shared inboxes, then run all addresses through one independent verifier in the week you plan to send. Compare verified, in-country, named-person addresses per credit spent. That ratio is the number worth comparing, and it takes an afternoon. For the wider market, see our best B2B databases for Singapore roundup.
1. SyncGTM
SyncGTM is a GTM data platform best suited for teams that already know which Singapore accounts and roles they want and need one verified address per contact. It waterfalls email finding across 50+ providers, so when one source has no result for a contact, the next provider is tried.
In a small market that sequencing matters, because no single database holds every Singapore company, and regional databases often thin out beyond the largest names. A waterfall raises the chance that at least one provider has the person, and each address is verified before export so unverified emails never reach a sequence. That lines up with the section 9 concern above, since you send to confirmed addresses rather than guessed patterns. We have not published a Singapore-specific match rate, so test it on your own account list.
Results sync to Salesforce, HubSpot, Pipedrive, Attio and Close, where you can store the source and date for each contact. See how the method works in what waterfall enrichment is or compare approaches in our waterfall email finder roundup. For other APAC and Gulf markets, read the India and UAE guides.
Pros
- Queries 50+ providers in sequence for higher fill rates on named contacts
- Verifies every address before it reaches a sequence
- Native sync to Salesforce, HubSpot, Pipedrive, Attio and Close
- Free tier to test on your own Singapore account list
Cons
- It enriches contacts you specify rather than selling a static downloadable list
- It does not add the unsubscribe line or the <ADV> label; your sending tool does
Best for: Teams with a named Singapore account list who want verified addresses from several sources.
Pricing: Free tier available. See the pricing page for current plans, or estimate spend with the credits estimator.
2. Lusha
Lusha is a contact lookup tool best suited for individual reps and small teams who find prospects on LinkedIn and want a verified work email beside each profile.
The pricing page lists a permanent free plan with 40 credits a month, Starter at $49.90 monthly ($37.45 a month on annual billing) for 400 credits, Pro at $69.90 for 600, and Premium at $399.90 for 3,400. A verified email reveal costs 1 credit and a phone reveal costs 5. All prices are in USD, and no Singapore dollar pricing is published.
The page makes no claim about Singapore or APAC coverage and names no compliance framework, so the only way to learn how it performs here is a trial. Its one accuracy datapoint is a customer testimonial about 95% deliverability, which is a single customer's account rather than a measured benchmark.
Pros
- Permanent free plan to test Singapore profiles
- Browser-extension workflow suits LinkedIn-first prospecting
- Monthly plans roll unused credits over, up to twice the plan limit
Cons
- Small credit pools on Starter and Pro (400 and 600 a month)
- No Singapore coverage statement or SGD pricing on the page we read
- Annual plan credits reset at the end of the cycle
Best for: Reps who build Singapore lists by hand on LinkedIn and need one address per profile.
Pricing: Free (40 credits/mo). Starter $49.90/mo or $37.45/mo annual (400 credits). Pro $69.90/mo (600). Premium $399.90/mo (3,400). Scale is quote-based. USD, excluding tax.
Read the full Lusha review.
3. Hunter.io
Hunter.io is a domain-based email finder best suited for teams that already hold a list of Singapore company websites and need the address behind a name.
Hunter charges 1 credit per email found and nothing when a search returns no email. Verification costs 0.5 credit per address, and failed verifications are free. Its paid plans start at Starter, $49 monthly or $34 a month billed yearly for 2,000 credits, with Growth at $149 ($104 yearly) and Scale at $299 ($209 yearly).
That model fits Singapore well in one respect: many local companies publish a clean domain, often a .com.sg or .sg site, and a name plus domain is enough input. It fits less well if you need to discover who to contact by title across an industry. The pricing page states no accuracy percentage and links to a separate page on how its data is sourced, which we did not review for this article.
Pros
- No credit used when no email is found
- Free plan with 50 credits a month
- Verifier available on every plan; auto-verification on Starter and above
Cons
- Needs a domain or company as the starting point
- Credits reset monthly and do not roll over
- No Singapore coverage statement on the pricing page
Best for: Teams with a target-account list who want a low-cost address finder and verifier.
Pricing: Free (50 credits/mo). Starter $49/mo or $34/mo annual (2,000 credits). Growth $149/mo or $104/mo annual (10,000). Scale $299/mo or $209/mo annual (25,000). Enterprise is custom. USD.
Read the full Hunter.io review.
4. Snov.io
Snov.io is an all-in-one outreach suite best suited for small teams that want an email finder, a bulk verifier and a sending tool under a single subscription.
The Sales Suite starts with a free trial of 50 credits, then Starter at $39 a month for 1,000 credits and 5,000 recipients, and Pro S at $99 for 5,000 credits. The page says annual billing saves 25% and bulk verification of up to 100,000 addresses per file is available outside the trial.
Snov.io describes its verification as seven tiers with 98%+ accuracy and says its data is reverified monthly. Those are vendor claims, and the page gives no method or Singapore sample. Because the suite also sends mail, it puts the sender duties from the Spam Control Act in your hands directly, so build the unsubscribe line and subject labelling into the template before the first send.
Pros
- Finder, verifier and sequencer in one subscription
- Bulk verification for cleaning an imported Singapore list
- Cheap entry price at $39/mo
Cons
- Trial plan excludes integrations, bulk search and export
- Annual prices above Pro S are not listed on the page we read
- 98%+ accuracy is a vendor claim with no published method
Best for: Small teams that want to find, verify and send from one tool and will check results themselves.
Pricing: Trial free (50 credits). Starter $39/mo (1,000 credits). Pro S $99/mo (5,000). Higher tiers from $189/mo. Annual billing saves 25% per the page. USD.
Read the full Snov.io review.
5. Apollo.io
Apollo.io is a filter-based prospecting database with built-in sequencing, best suited for startups and agencies that want a large self-serve contact pool and are willing to verify before sending.
Apollo's pricing page cites 240M contacts and 30M companies, which are vendor figures with no Singapore breakdown. It lists Free, Basic, Professional and Custom tiers but shows no prices on the page we read, so check current pricing before budgeting. Credits are pooled across a team and expire at the end of each cycle.
The free plan is the useful part for this guide: you can run your Singapore ICP filters and see how many records match before paying. The only accuracy datapoint on the page is a customer testimonial about deliverability rising from 72% to 94%. Treat that as one account, and run Apollo's addresses through a separate verifier on a 100-record Singapore sample.
Pros
- Free plan to test Singapore filters
- Search, enrichment and sending in one product
- Credits pooled across a team
Cons
- Prices not shown on the page we read
- Unused credits expire each cycle
- No Singapore coverage or accuracy figure published
Best for: Early-stage teams that want to filter by title and industry and send from the same tool.
Pricing: Free plan, then Basic, Professional and Custom tiers. Check current pricing on the vendor page.
Read the full Apollo.io review.
Side-by-Side Comparison
| Tool | Singapore angle | Verification | Compliance notes | Pricing |
|---|---|---|---|---|
| SyncGTM | Waterfall across 50+ providers for named Singapore contacts | Every address verified before export | Enriches contacts you name; you own the sending rules | Free tier; see pricing page |
| Lusha | LinkedIn-style lookups; no Singapore figure on pricing page | Verified email reveal costs 1 credit | No compliance statement on pricing page | Free (40 credits); Starter $49.90/mo |
| Hunter.io | Domain search for company sites you supply | Built-in verifier, 0.5 credit each | Public-web sourced; sourcing page linked | Free (50 credits); Starter $49/mo |
| Snov.io | Finder plus verifier plus sequencer; no Singapore figure | 7-tier verification, 98%+ (vendor claim) | GDPR and security pages linked | Trial free; Starter $39/mo |
| Apollo.io | Filter-based database, 240M contacts (vendor claim) | Email status labels; no accuracy rate published | No Singapore statement on pricing page | Free plan; check current pricing |
Prices come from each vendor's own pricing page, were read in October 2026, and change often. None of the five publishes Singapore dollar pricing, so figures are in USD. Accuracy and coverage numbers are vendor claims, not independent test results, and no database vendor can discharge your own duties as the sender.
What Compliant Singapore Outreach Looks Like
The point of an email database in Singapore is precision: the right named person, at a deliverable address, with a message that carries the required elements. These practices follow from the statute text above. None of them is legal advice.
- Put <ADV>, a space, then an honest subject in every bulk unsolicited commercial email
- Include a working unsubscribe address and a plain English line explaining it, and keep it live for at least 30 days
- Suppress anyone who unsubscribes within 10 business days, and across every tool you use
- Send only to verified addresses of named people, never to guessed or scraped-in-bulk patterns
- Use accurate sender names and headers, and a reachable contact address or phone number
- Keep a record of source and date per contact in your CRM
- Prefer opt-in routes where you can, such as event sign-ups, content downloads and warm intros, because consent removes the unsolicited question
- Exclude shared inboxes and personal webmail, and re-verify the list in the week you send
How to Choose
If you have a named Singapore account list, start with SyncGTM or Hunter.io and compare verified, in-country addresses on 100 contacts. If you prospect from LinkedIn, trial Lusha's free plan. If you want filters, finding and sending in one place, test Apollo.io and Snov.io, and put the <ADV> label and unsubscribe line in the template first.
Ask every vendor the same questions: where is this person based, how was the address sourced, and when was it last verified? Then take your sending plan, not a vendor badge, to a Singapore lawyer.
