How to Spot Online Scams in Malaysia and What to Do If You Are Hit

Online scams are one of the fastest-growing threats to Malaysians' savings. Scammers impersonate banks, police officers, courier companies, government agencies and even friends and family. They are organised, persuasive and quick, and many victims are smart, careful people who were simply caught at a bad moment.

Knowing the common tricks and the right steps to take can protect your money and help you act fast if something goes wrong.

Common Scams to Know

The government's official portal lists the types of scams that can be reported to the National Scam Response Centre, including:

• Macau scams: calls from people claiming to be police, court officials or bank staff, saying you are involved in a crime or owe money, and pressuring you to transfer funds.
• Love scams: online relationships built over weeks or months that end in requests for money, gifts or help with "customs fees".
• Investment scams: promises of high, guaranteed returns from trading, gold, crypto or "exclusive" schemes, often promoted through social media and chat groups.
• Online shopping scams: fake sellers, fake stores and items that never arrive.
• Impersonation scams: messages pretending to be banks, government agencies or enforcement officers.

Other tricks include fake parcel or delivery notifications with links, job offers that ask you to "top up" before you earn, and messages from hacked accounts of friends asking for urgent loans.

Red Flags

• Urgency and fear: "Act now or your account will be frozen" or "You will be arrested today."
• Requests for secrecy: being told not to tell family or bank staff.
• Requests for codes: anyone asking for your OTP, TAC, PIN or password. Banks and agencies will not ask for these.
• Unusual payment methods: transfers to personal accounts, gift cards or crypto.
• Too-good-to-be-true offers: guaranteed profits, prizes you did not enter, or jobs that pay a lot for little work.
• Links and APK files: messages asking you to click a link or install an app outside the official app store.

Hang up and call back using a number you find yourself, such as the one on the back of your bank card or the agency's official website. A real officer or bank will not mind; a scammer will.

What to Do If You Have Been Scammed

Speed matters. According to the government portal on the NSRC 997 hotline:

1. Call 997 immediately, ideally within 24 hours of discovering the scam, so authorities can try to block accounts and transactions. Also contact your bank's 24-hour fraud hotline.
2. Lodge a police report at the nearest police station.
3. Gather evidence: transaction details and receipts, the scammer's phone numbers or accounts, website links and screenshots of conversations.
4. Change your passwords and log out of banking apps on other devices if you think your accounts were accessed.
5. Warn family and friends if your social media or messaging accounts were hacked.

Recovery of funds is not guaranteed, which is why prevention is so important. But reporting quickly gives the best chance and helps stop scammers from hitting others.

Scams That Target Small Businesses

Business owners face their own versions. Watch for fake "supplier" emails announcing changed bank details, bogus invoices for services you never ordered, messages pretending to be from a platform asking you to verify your shop account, and buyers who send fake payment screenshots before collecting goods. Always confirm a change of bank details by phone using a number you already have, and check that money has actually arrived in your account before releasing stock.

Everyday Habits That Protect You

• Turn on transaction alerts and set daily transfer limits in your banking app.
• Use strong, unique passwords and a password manager.
• Only install apps from official app stores.
• Check websites and links carefully before entering details. When in doubt, type the address yourself.
• Talk to older parents and relatives about common scams; they are often targeted.
• Be careful when checking your credit or EPF online. Use only official sites, as our guides on checking CCRIS and EPF Akaun Fleksibel explain.

Being scammed can be deeply upsetting and embarrassing, and many victims blame themselves. If the stress is affecting your sleep or mood, talking to someone helps. Professional support is available through services such as PsyCore.

FAQ

Will the bank refund money I transferred to a scammer?

It depends on the case and the bank's investigation. Report immediately to give the best chance of blocking the funds.

Is NSRC 997 available every day?

The official government portal states the hotline operates daily. Your bank's fraud hotline is also available around the clock.

How do I check if a phone number or account is linked to scams?

PDRM's Semak Mule portal lets you check phone numbers and bank account numbers that have been reported. Use it before transferring money to someone you do not know.

Scams evolve, but the pattern is the same: pressure, secrecy and a request for money or codes. Slow down, verify independently, and if the worst happens, call 997 and your bank straight away.