Online Scams & Fraud in Malaysia

Header
May 4, 2023

Online Scams & Fraud in Malaysia

There has been a steady increase in the number of online scams post-covid period. This has led the Malaysian government to step up efforts to fight scams. The TakNakScam awareness campaign was launched in 2021 and has reached millions.

Though there are numerous campaigns to help fight fraud, scammers are still stealing millions. Read on to find out where you can report scams in Malaysia, how to check for scams, and where scam victims can get support.

Scam Statistics in Malaysia

The key statistics on online fraud in Malaysia, according to the Global Anti Scam Alliance.

 

  2018 2019 2020 2021
Population 32.4 million 32.8 million 33.2 Million 33.6  million
Internet Penetration 87.4% 87.5% 87.7% 88.5%
# of Scams     11,511 39,525
Scams / 1,000     0.4 1.21
Money Lost     € 56.8 million € 435.4 million
Money Lost / Capita     €1.76 € 12.96
Money Lost / Report     € 4934 € 11,015.8

The figures in the table will differ strongly per year as various sources have been used, pending on availability.

Where Can I Report a Scam in Malaysia?

  • Royal Malaysia Police RMP)- The Royal Malaysia Police is the primary law enforcement agency in Malaysia. They have a Cybercrime Investigation Division that deals with cyber-related crimes, including online scams.
  • Commercial Crime Investigation Department (CCID)- This is one stop report and response center where users can report scams. Call 03-2610 1559/1599.
  • Domestic Trade and Consumer Affairs Ministry (KPDNHEP)- They receive complaints about online scams and other types of fraud.
  • National Scam Response Centre (NSRC)- You can reach them at 997, which will operate from 8 am to 8 pm daily to report any online scam.
  • HLB Contact Centre- Report any banking-related scam by calling 03 7626 8899 or visiting any of their branches.
  • Malaysian Communications and Multimedia Commission (MCMC): The MCMC is the regulatory body for the communications and multimedia industry in Malaysia. They handle issues related to telecommunications, broadcasting, and online content, including online scams.

How to Report a Scam in Malaysia

Reporting a scam is crucial. At the moment, only 7% of all scams are reported. As a result, only 0.05% of all cybercriminals are caught. Reporting online fraud is not only essential if you want to try and get your money back. It is also needed to help law enforcement fight scammers better.

  • Gather info: Collect all information about the suspected fraud including the name, telephone, key web pages, emails, IP address, and any other information relevant. This is needed to file a complete report.
  • Report the incident: Always report to your local law enforcement and note the file number they might provide for your fraud report for future reference.
  • Stop the Money: Report the incident to the financial institution that transferred the money such as your bank, Paypal, credit card company, or the Internet payment service provider.
  • Protect yourself: Scammers often contact you again. Sometimes with the same scam. Sometimes to help you “recover your money”. Consider changing your email address/phone number. Also, install the ScamAdviser browser extension to warn you of scams.
     

Our article “How and Where to Report a Scam” gives you more detail and tips on how you can best report online fraud.

Scam Victim Support in Malaysia

How to check for a scam in Malaysia

Of course, you can always check for scams on ScamAdviser.com. However, there are several other sources where you can check if a website is registered as a company and if it can offer financial, gambling, or other regulated services as well.

  • Bank Negara Malaysia- When in doubt you can always call BNMTELELINK (Customer Service Call Centre) at 1300-88-5465.
  • The CCID- They have developed a portal to enable the public to check telephone and bank account numbers used by crime syndicates. The same functionality is also available via an app.
  • Malaysian Communications and Multimedia Commission (MCMC) - The MCMC is the regulatory body for the communications and multimedia industry in Malaysia. They have a website where you can check for scams related to telecommunications, such as phone and internet scams. Their website is https://www.mcmc.gov.my/
  • The Securities Commission Malaysia (SC)- You can check here for investment scams as well as trading frauds.


Anti-Scam Organizations & Consumer Authorities

  • CyberSecurity Malaysia- They help promote best practices, training, and awareness programs as well as providing cybersecurity information to the public.
  • MyCERT- Performs round-the-clock computer security incident response services to individuals, companies, government agencies, or organizations.
  • Cyber999- They provide response and management of cyber security incidents for all types of internet users.

Popular Scams in Malaysia

The "fake friend" scam

The success of this scam depends on people's willingness to lend a hand to a friend in distress. It frequently entails a fraudster posing as a friend and getting in touch with the potential victim via text messages or phone conversations.

The scammer then tells a depressing tale before eventually pleading for financial assistance. The scammer frequently adds to their false narrative by claiming to have misplaced their cell phone or had to change numbers in order to justify using an alternative phone number.

Before agreeing to any monetary loans, the Police advise that you confirm such requests by speaking with a common friend or family member.

Using a different communication method, such as a video call or in-person meeting, to contact the acquaintance is even better. Additionally, the friend will be made aware that their identity is being used fraudulently as a result of this.


Scam News From Malaysia

Image source: unsplash.com

Report a Scam!

Have you fallen for a hoax, bought a fake product? Report the site and warn others!

Help & Info

Top Safety Picks

Your Go-To Tools for Online Safety
Disclaimer: Some of the links here are affiliate links. If you click them and make a purchase, we may earn a commission at no extra cost to you.

  1. ScamAdviser App - iOS : Your personal scam detector, on the go! Check website safety, report scams, and get instant alerts. Available on iOS
  2. ScamAdviser App - Android : Your personal scam detector, on the go! Check website safety, report scams, and get instant alerts. Available on Android.
  3. NordVPN : NordVPN keeps your connection private and secure whether you are at home, traveling, or streaming from another country. It protects your data, blocks unwanted ads and trackers, and helps you access your paid subscriptions anywhere. Try it Today!
  4. Incogni : Incogni automatically removes your personal data from data brokers that trade in personal information online, helping reduce scam and identity theft risks without the hassle of manual opt-outs. Reclaim your privacy now!

Popular Stories

In a nutshell: A good VPN protects your privacy with strong encryption, a strict no-logs policy, and fast protocols like WireGuard. The best VPNs also offer wide server coverage, leak protection, and easy-to-use apps for all devices. For 2025, the top providers are NordVPN, ExpressVPN, Surfshark, Proton VPN, Private Internet Access, CyberGhost, and Mullvad—each excelling in speed, security, or value. In an age where every click is tracked, a Virtual Private Network (VPN) is no longer just a luxury—it's an essential tool for digital privacy and security. A VPN works by creating a secure, encrypted tunnel between your device and the internet, masking your real IP address and protecting your sensitive data from prying eyes. But with hundreds of providers out there, how do you sort the secure from the suspect? This guide breaks down the non-negotiable features of a quality VPN and highlights the 7 top-rated services for 2025. What to Look for in a Good VPN: The 4 Non-Negotiable Pillars 1. Ironclad Security Features Strong Encryption: AES-256, the gold standard. Secure Protocols: OpenVPN, WireGuard, NordLynx, Lightway. Avoid PPTP. Kill Switch: Ensures no accidental IP leaks. Leak Protection: Covers DNS, IPv6, and WebRTC. 2. Verified Privacy Practices No-Logs Policy: No activity or metadata tracking. Independent Audits: Verification by third parties. Safe Jurisdiction: Prefer countries outside the 5/9/14 Eyes alliances. 3. High-Speed Performance Fast Protocols: WireGuard and equivalents. Large Server Network: Less crowding, more reliable speeds. 4. Essential Usability Features Multi-Device Apps: Windows, Mac, iOS, Android, routers. Simultaneous Connections: One account, many devices. Unblocking Power: Netflix, Hulu, BBC

How to Protect Yourself and Your Family After a Data Breach When Your Data Falls Into the Wrong Hands Just received that terrifying notification? Or perhaps you've noticed suspicious activity in your accounts? Take a deep breath. A data breach, the unauthorized access or exposure of sensitive, protected, or confidential data, is a deeply unsettling event. It can plunge you into a world of worry, bringing risks from financial losses and identity theft to significant emotional distress and reputational damage. The numbers don't lie: according to a 2024 report, the number of data breach victim notices has grown by a staggering 211% year-over-year. This isn't just a distant threat; it's a stark reality many individuals face. This year alone, we've seen major organizations like Adidas and Qantas grapple with high-profile data breaches, affecting countless customers. This underscores a critical truth: nobody is untouchable. Subsequently, strategic action is the only way to minimize the risk and protect your future. This guide is your emergency action plan, designed to walk you through every crucial step—from confirming the breach to fortifying your digital life for the long term. Part 1: Confirming the Breach and Understanding the Damage The very first step is to answer the question definitively: Was my data compromised, and if so, how badly? Start with the basics: Check Official NotificationsReputable companies are legally obligated to inform you if your data was part of a breach. Look for official emails, letters, or public announcements. Check Verified Breach DatabasesPlatforms like HaveIBeenPwned help you see if