I have dealt with this exact situation across a few of my client accounts, so let me share what I found.
The first thing I checked was the session quality, not just the country. Go into GA4 and filter by Singapore as the country, then look at engagement rate, average session duration, and pages per session. If you are seeing thousands of sessions with 0 second duration and 100% bounce, that is almost certainly bot traffic or crawler activity, not real users.
The second thing worth checking is the channel breakdown for that Singapore traffic. A lot of the Singapore traffic I have encountered on UAE-focused sites came through Direct or Referral, not Organic. That is a red flag. Genuine search traffic from a country you are not targeting tends to be low volume and scattered, not a sudden spike from one specific location.
Some common reasons I have seen this happen:
Datacenter and cloud traffic - Singapore is a major AWS and Google Cloud hub for Asia Pacific. Crawlers and bots often route through Singapore servers even if the bot itself is not based there.
VPN users - Some UAE residents use VPNs that exit through Singapore nodes. These sessions usually look like normal human behaviour because they are.
Referral or spam traffic - Pull the Acquisition report filtered by Singapore and check the Source column. If you see random domains you do not recognise sending traffic, that is referral spam with zero bearing on your actual performance.
For verification, cross-reference GA4 with Search Console. GSC only records verified search clicks, so if Singapore barely appears there but dominates GA4, that traffic is not coming from organic search. On the SEO side, bot traffic does not affect rankings, but it can distort your conversion rate and funnel analysis. I usually create a segment in GA4 that excludes those sessions so the core UAE metrics stay clean.