Did you know that Malaysians lost over RM11.2 billion to scammers in just five years? In today’s hyper-connected world, scams have evolved into sophisticated operations, targeting individuals across all demographics. From impersonating government officials to leveraging artificial intelligence (AI) for deepfake scams, fraudsters exploit both digital and non-digital platforms to steal money, personal data, and even emotional trust. Are you prepared to recognise the red flags of modern scams?

Recent Statistics and Trends

According to the Royal Malaysia Police (PDRM), Malaysians lost a staggering RM11.23 billion to scammers between 2020 and 2024. This alarming figure was revealed by Bukit Aman’s Commercial Crime Investigation Department (CCID) Director, Datuk Seri Ramli Mohamed Yoosuf, during a recent press conference. 

In 2024 alone, over 25,000 scam cases were reported, representing a 30% increase compared to 2023. Globally, the statistics are even more concerning, with the Global Anti-Scam Alliance estimating that scams caused a staggering USD 55 billion in losses worldwide in 2024.

To combat this growing threat, the Malaysian Communications and Multimedia Commission (MCMC) blocked a whopping 3.1 billion suspected scam calls as of December 2024. Despite these efforts, scammers continue to adapt, making public awareness and vigilance more critical than ever.

Image Source: UNODC

Common Scam Types and How to Protect Yourself

1. Legal Investigation and Money Transfer Scams

One of the most alarming scams involves fraudsters posing as law enforcement officers or government officials. They contact victims, claiming they are under investigation for crimes such as money laundering or tax evasion. The scammer then demands immediate payment to a “secure account” to avoid legal consequences.

Real-Life Example: In 2023, a Malaysian retiree lost RM150,000 after receiving a call from someone claiming to be a police officer. The scammer accused her of involvement in a money laundering ring and pressured her into transferring her life savings to a “safe account” for investigation.

Expert Insight: “Scammers often exploit fear and urgency to manipulate victims,” says Datuk Seri Ramli Mohamed Yoosuf, Director of PDRM’s Commercial Crime Investigation Department, in a 2023 press release.

How to Protect Yourself:

• Verify the Caller: Government agencies will never request money over the phone. Contact the relevant agency directly using official contact details.
• Do Not Share Personal Information: Never disclose sensitive details like bank account numbers or passwords to unsolicited callers.
• Stay Calm: Scammers use fear tactics to rush victims into making hasty decisions. Pause, think critically, and consult trusted individuals before acting.

2. Investment Scams Promising High Returns

Investment scams lure victims with promises of high returns with little to no risk. These schemes often involve fake investment opportunities in stocks, real estate, or digital currencies. Fraudsters use forged documents, fake testimonials, and even celebrity endorsements to appear legitimate.

Real-Life Example: In 2022, a group of Malaysian investors lost millions in a Ponzi scheme disguised as a cryptocurrency investment platform. The scam promised monthly returns of 20% but collapsed within months, leaving victims with nothing.

Expert Insight: “Investment scams thrive on greed and ignorance,” says Dr. Mohd Nasir Ahmad, Deputy Governor of Bank Negara Malaysia, in a 2022 statement on financial fraud.

How to Protect Yourself:

• Research Thoroughly: Investigate the company or individual offering the investment. Check for regulatory approvals and reviews on trusted platforms.
• Be Sceptical of High Returns: If an offer sounds too good to be true, it likely is. Legitimate investments carry risks and do not guarantee high returns.
• Consult a Financial Advisor: Seek advice from a licensed professional before committing to any investment.

3. Bitcoin and Digital Currency Scams

Cryptocurrency scams have surged in popularity, with fraudsters offering fake investment opportunities, phishing schemes, or fraudulent exchanges. Victims are often lured by promises of quick profits and flashy marketing.

Real-Life Example: In 2021, a Malaysian man lost RM50,000 after investing in a fake Bitcoin trading platform. The platform promised daily profits but disappeared after collecting funds from hundreds of victims.

Expert Insight: “Cryptocurrency scams are particularly dangerous because they are difficult to trace and recover,” says Dr. Nur Azaliah Abu Bakar, a cybersecurity expert at CyberSecurity Malaysia, in a 2023 report.

How to Protect Yourself:

• Use Reputable Exchanges: Only trade on well-known, regulated cryptocurrency platforms.
• Secure Your Wallet: Use hardware wallets and enable two-factor authentication to protect your digital assets.
• Beware of Phishing: Avoid clicking on suspicious links or sharing private keys.

4. Love Scams (Romance / Love Parcel Scams)

Love scams involve fraudsters creating fake profiles on dating sites or social media to establish romantic relationships. Once trust is gained, they fabricate stories requiring financial assistance, such as medical emergencies or travel expenses.

Real-Life Example: In 2023, a Malaysian woman lost RM80,000 after falling in love with a man she met on a dating app. The scammer claimed he needed money for surgery but disappeared after receiving the funds.

Expert Insight: “Romance scams prey on emotional vulnerability,” says Dr. Goh Chee Leong, a psychologist and Dean of the Faculty of Behavioural Sciences at HELP University, in a 2023 interview with The Star.

How to Protect Yourself:

• Be Cautious Online: Avoid sharing personal details with strangers and be wary of individuals who profess love too quickly.
• Verify Their Identity: Use reverse image searches to check for duplicate or fake profiles.
• Never Send Money: Refrain from transferring funds to someone you have only met online.

5. Advance Fee Scams (African Prince Scams)

The classic “advance fee” scam involves an email or message from someone claiming to be a wealthy individual or government official needing help transferring money. In exchange for your assistance, they promise a share of the funds but demand upfront fees.

Real-Life Example: In 2022, a Malaysian businessman lost RM30,000 after responding to an email from someone claiming to be a Nigerian prince. The scammer requested an upfront fee to release a multi-million-dollar inheritance.

Expert Insight: “Advance fee scams rely on greed and the promise of easy money,” says Dr. Amirudin Abdul Wahab, CEO of CyberSecurity Malaysia, in a 2023 press release.

How to Protect Yourself:

• Ignore Unsolicited Emails: Delete emails offering large sums in exchange for help.
• Do Not Pay Upfront Fees: Legitimate transactions do not require prepayments.
• Report Suspicious Emails: Forward such emails to authorities or email providers.

6. Phishing and Identity Theft

Phishing scams involve fraudsters impersonating legitimate organisations to steal personal information. These often occur through emails, texts, or fake websites that closely resemble genuine platforms.

Real-Life Example: In 2023, a Malaysian university student lost RM10,000 after clicking on a phishing link in an email claiming to be from her bank. The link led to a fake login page that captured her banking credentials.

Expert Insight: “Phishing scams are becoming increasingly sophisticated,” says Dr. Nur Azaliah Abu Bakar, a cybersecurity expert at CyberSecurity Malaysia, in a 2023 report.

How to Protect Yourself:

• Verify the Source: Check sender details before responding to requests for personal data.
• Use Strong Passwords: Create unique passwords for each account and update them regularly.
• Enable Two-Factor Authentication: Add an extra layer of security to your online accounts.

7. Work-from-Home Scams

Work-from-home scams promise easy income for minimal effort, such as posting on social media or liking pages. Victims are often asked to pay for registration or materials upfront and receive little to no payment in return.

Real-Life Example: In 2023, a Malaysian mother lost RM5,000 after signing up for a work-from-home scheme that required her to pay for “training materials.” She never received any work assignments or payments.

Expert Insight: “Legitimate employers do not ask for upfront payments,” says Ms. Siti Zaleha Ibrahim, Director of the Malaysian Anti-Scam Centre, in a 2023 interview with New Straits Times.

How to Protect Yourself:

• Research the Offer: Look for reviews and testimonials about the opportunity. Check whether the company is registered and has a legitimate presence.
• Avoid Upfront Payments: Genuine employers do not ask for registration fees or initial payments.
• Be Wary of Unrealistic Claims: Offers promising high salaries for minimal work are typically scams.

8. App Installation Scams

Scammers trick victims into downloading malicious apps that steal personal information or lock devices until a ransom is paid. These apps often masquerade as legitimate tools or games.

Real-Life Example: In 2022, a Malaysian teenager lost access to her smartphone after downloading a game from an unverified website. The app locked her device and demanded RM500 to unlock it.

Expert Insight: “Malicious apps can compromise your device and personal data,” says Dr. Amirudin Abdul Wahab, CEO of CyberSecurity Malaysia, in a 2023 press release.

How to Protect Yourself:

• Download from Official Stores: Use trusted platforms like Google Play or Apple App Store, and avoid downloading from unknown sources.
• Check Permissions: Be cautious of apps requesting excessive permissions unrelated to their functionality.
• Install Security Software: Use reliable software to protect devices from malicious apps and regularly update your operating system.

9. Impersonation Scams

Fraudsters impersonate friends, family, or trusted individuals to request money or sensitive information. These scams often occur through hacked social media accounts or cloned profiles.

Real-Life Example: In 2023, a Malaysian man lost RM20,000 after receiving a message from a cloned Facebook account of his close friend. The scammer claimed to be in urgent need of financial assistance.

Expert Insight: “Impersonation scams exploit trust and familiarity,” says Datuk Seri Ramli Mohamed Yoosuf, Director of PDRM’s Commercial Crime Investigation Department, in a 2023 press release.

How to Protect Yourself:

• Verify the Request: Contact the individual directly using a different communication channel to confirm their request.
• Be Sceptical of Urgency: Scammers often create a sense of urgency to pressure victims into acting quickly.
• Use Secure Channels: Avoid sharing sensitive information via social media or email.

10. Hacking into WhatsApp, Telegram, and Messenger Scams

Scammers are increasingly targeting messaging platforms like WhatsApp, Telegram, and Facebook Messenger. They hack into accounts or impersonate contacts to trick victims into sharing sensitive information or transferring money.

Real-Life Example: In 2023, a Malaysian woman lost RM15,000 after receiving a message from her “son” on WhatsApp. The scammer, who had hacked her son’s account, claimed to be in urgent need of money for hospital bills.

Expert Insight: “Messaging platforms are a prime target for scammers due to their widespread use,” says Dr. Nur Azaliah Abu Bakar, a cybersecurity expert at CyberSecurity Malaysia, in a 2023 report.

How to Protect Yourself:

• Enable Two-Step Verification: Use two-factor authentication (2FA) on all messaging apps to add an extra layer of security.
• Verify Unexpected Requests: If a contact asks for money or sensitive information, call them directly to confirm their identity.
• Avoid Clicking Suspicious Links: Scammers often send malicious links to hack accounts. Do not click on links from unknown or untrusted sources.
• Report Hacked Accounts: If you suspect your account has been hacked, report it to the platform immediately and notify your contacts.

11. Hacking into Online Shopping Apps (Shopee, Lazada, etc.)

Scammers are increasingly targeting online shopping platforms like Shopee, Lazada, and others. They hack into user accounts to make unauthorized purchases, steal payment information, or sell fake products.

Real-Life Example: In 2023, a Malaysian man lost RM3,000 after his Shopee account was hacked. The scammer used his saved payment details to purchase high-value electronics, which were shipped to an unknown address.

Expert Insight: “Online shopping scams are on the rise due to the convenience of e-commerce platforms,” says Dr. Amirudin Abdul Wahab, CEO of CyberSecurity Malaysia, in a 2023 press release.

How to Protect Yourself:

• Enable Two-Factor Authentication (2FA): Use 2FA on all online shopping accounts to add an extra layer of security.
• Use Strong, Unique Passwords: Avoid using the same password across multiple platforms. Consider using a password manager to generate and store secure passwords.
• Monitor Account Activity: Regularly check your purchase history and payment methods for any unauthorized transactions.
• Avoid Saving Payment Details: While convenient, saving payment details on shopping apps increases the risk of financial loss if your account is hacked.
• Report Suspicious Activity: If you notice unauthorized transactions or suspect your account has been compromised, report it to the platform immediately and contact your bank to block further payments.

12. Hacking into Online Bank Accounts

Scammers are increasingly targeting online banking platforms to steal funds directly from victims’ accounts. They use phishing, malware, or social engineering tactics to gain access to login credentials and bypass security measures.

Real-Life Example: In 2023, a Malaysian businessman lost RM50,000 after clicking on a phishing link in an email claiming to be from his bank. The link led to a fake login page that captured his banking credentials, allowing the scammer to drain his account.

Expert Insight: “Online banking scams are on the rise due to the increasing use of digital platforms,” says Dr. Mohd Nasir Ahmad, Deputy Governor of Bank Negara Malaysia, in a 2022 statement on financial fraud.

How to Protect Yourself:

• Enable Two-Factor Authentication (2FA): Use 2FA on all banking accounts to add an extra layer of security.
• Avoid Clicking Suspicious Links: Do not click on links in emails or messages claiming to be from your bank. Instead, log in directly through the official app or website.
• Monitor Account Activity: Regularly check your bank statements and transaction history for any unauthorized activity.
• Use Strong, Unique Passwords: Create complex passwords for your banking accounts and avoid reusing them across other platforms.
• Install Security Software: Use reputable antivirus and anti-malware software to protect your devices from hacking attempts.
• Report Suspicious Activity: If you notice unauthorized transactions or suspect your account has been compromised, contact your bank immediately to freeze the account and prevent further losses.

13. TikTok Scams

TikTok has become a breeding ground for scams, with fraudsters exploiting its popularity to deceive users. Common TikTok scams include fake giveaways, phishing links, and fraudulent investment schemes.

Real-Life Example: In 2023, a Malaysian teenager lost RM2,000 after participating in a fake TikTok giveaway. The scammer promised a luxury smartphone in exchange for a “processing fee,” but the prize never materialized.

Expert Insight: “Social media platforms like TikTok are increasingly being used to target younger audiences,” says Dr. Goh Chee Leong, a psychologist and Dean of the Faculty of Behavioural Sciences at HELP University, in a 2023 interview with The Star.

How to Protect Yourself:

• Verify Accounts: Look for verified badges on official accounts and be cautious of accounts with few followers or no content.
• Avoid Clicking Suspicious Links: Do not click on links in TikTok comments or direct messages, especially those promising prizes or rewards.
• Be Sceptical of Giveaways: Legitimate giveaways do not require payment or personal information.
• Report Suspicious Activity: If you encounter a scam on TikTok, report it to the platform immediately.

14. AI-Powered Scams

With advancements in AI, scammers can now create deepfake videos, mimic voices, and generate realistic messages. These scams are highly convincing and difficult to detect.

Real-Life Example: In 2024, a UK CEO transferred €220,000 after receiving a phone call from someone who sounded exactly like his boss. The call was later revealed to be an AI-generated voice clone.

Expert Insight: “AI-powered scams are the next frontier in cybercrime,” warns Dr. Amirudin Abdul Wahab, CEO of CyberSecurity Malaysia, in a 2023 press release.

How to Protect Yourself:

• Be Cautious of AI Fraud: Question unusual requests, even if they appear authentic.
• Verify Through Multiple Channels: Cross-check suspicious communications by contacting the supposed sender through different channels.
• Stay Informed: Keep up to date on the latest AI-related scam tactics.

15. Social Media Scams

Social media platforms are rife with scams, including fake giveaways, impersonations, and phishing links. Fraudsters exploit the trust users place in social media connections to steal money and personal information.

Real-Life Example: In 2024, a Malaysian influencer’s account was hacked, and the scammer used it to promote a fake giveaway. Followers were asked to pay a “processing fee” to claim their prize, resulting in losses of over RM100,000.

Expert Insight: “Social media scams are particularly dangerous because they exploit the trust users have in their connections,” says Dr. Nur Azaliah Abu Bakar, a cybersecurity expert at CyberSecurity Malaysia, in a 2023 report.

How to Protect Yourself:

• Verify Accounts: Look for verified badges on official accounts.
• Avoid Suspicious Links: Refrain from clicking on links from unknown sources.
• Enable Privacy Settings: Limit who can contact you and view your information.

16. Safeguarding Your Email Accounts from Hackers

Email account security is a cornerstone of digital safety. Compromised emails can lead to identity theft, financial loss, and further fraudulent activities. Understanding the methods and consequences of email hacking is crucial for comprehensive scam protection.

Common Methods of Email Account Hacking

• Phishing Emails: These deceptive emails mimic legitimate communications to trick individuals into revealing their login credentials.
• Keyloggers: Malicious software that records keystrokes to capture passwords and other sensitive information.
• Weak or Reused Passwords: Easily guessable passwords or those reused across multiple platforms are a significant security risk.
• Brute Force Attacks: Attackers use automated tools to guess passwords, often succeeding with weak or commonly used ones.
• Social Engineering: Manipulating individuals into divulging their credentials through deceit.

Real-Life Example: In 2022, a Malaysian professional fell victim to an email hack in 2022, leading to unauthorized access to financial accounts and personal data, resulting in financial loss and damage to professional relationships.

Expert Insight:  “Email accounts are often the gateway to an individual’s digital life. Securing them is crucial to prevent broader security breaches.” says Dr. Nur Azaliah Abu Bakar, a cybersecurity expert.

How to Protect Yourself:

• Use Strong, Unique Passwords: Avoid reusing passwords across platforms.
• Enable Multi-Factor Authentication (MFA): Add an extra layer of security.
• Be Cautious of Suspicious Emails: Avoid clicking on links or downloading attachments from unknown senders.
• Monitor Account Activity: Regularly check for unusual login attempts or changes.

Legal and Regulatory Context

In Malaysia, the Royal Malaysia Police (PDRM) and the Malaysian Communications and Multimedia Commission (MCMC) are actively working to combat scams. However, experts argue that stricter regulations and faster response times are needed to keep up with the evolving tactics of scammers.

Comparative Analysis:

While Malaysia has seen a significant rise in scam cases, countries like Singapore and Australia have implemented stricter regulations and public awareness campaigns, resulting in lower scam rates. For instance, Singapore’s Anti-Scam Centre has successfully recovered millions of dollars for victims through swift intervention.

Best Practices to Protect Yourself

To safeguard yourself from the 16 types of scams outlined in this article, adopt the following proactive measures:

1. Verify the Source: Always confirm the identity of the person or organisation contacting you.
2. Enable Multi-Factor Authentication (MFA): Add an extra layer of security to all your accounts.
3. Use Strong, Unique Passwords: Create complex passwords for each account and avoid reusing them across platforms.
4. Be Sceptical of Unsolicited Offers: Research any opportunity thoroughly and avoid upfront payments.
5. Protect Personal Information: Avoid sharing sensitive details with strangers online.
6. Monitor Account Activity: Regularly check your bank statements, purchase history, and email accounts for unauthorised transactions.
7. Stay Informed About Emerging Scams: Keep up to date on the latest scam tactics, such as AI-powered scams and deepfake technology.
8. Secure Your Devices: Install reputable antivirus and anti-malware software to protect your devices from malicious apps.
9. Educate Yourself and Others: Share information about common scam tactics with friends and family.
10. Report Suspicious Activity: If you encounter a scam or suspect fraudulent activity, report it to the relevant authorities immediately.

What to Do If You’ve Been Scammed

If you suspect you are being targeted by a scam or have been scammed, take the following steps immediately:

1. Contact the National Scam Response Centre (NSCR) or your bank: This can help reduce potential losses.
2. Make a police report: This will allow the police to start an official investigation.
3. Protect your identity and accounts: Change passwords and enable additional security measures.
4. Check your insurance coverage: Some policies may cover financial losses due to scams.

Key Organizations and Their Contact Details

1. National Scam Response Center (NSCR)
   • Hotline: 997
   • Website:  https://www.jangankenascam.com/
   • Role:  An emergency response number that helps victims of online financial scams. The NSRC’s hotline is available daily from 8 AM to 8 PM, including public holiday.
2. Royal Malaysian Police (PDRM) – Commercial Crime Investigation Department (CCID)
   • Hotline: 1-800-88-6733 (for non-emergency inquiries)
   • CCID Infoline: 013-211-1222 (only accepts complaints and enquiries via short message service (SMS) and the Whatsapp application).
   • Website:  https://www.pdrm.gov.my/
   • Website: https://semakmule.rmp.gov.my/ (official website to check on suspicious bank account numbers or telephone number prior to carrying out online transactions)
   • Role: Handles financial crimes and scams.
3. Malaysian Communications and Multimedia Commission (MCMC)
   • Hotline: 1-800-88-8000
   • Website: https://www.mcmc.gov.my/
   • Role: Manages online scams and digital communication-related fraud.
4. CyberSecurity Malaysia
   • Hotline: 1-800-88-2637 (1-800-88-CYBER)
   • Website: https://www.cybersecurity.my/
   • Role: Focuses on cyber-related fraud and scams.
5. Bank Negara Malaysia (BNM)
   • Consumer Protection Hotline: 1-300-88-6688
   • Website: https://www.bnm.gov.my/
   • Role: Handles financial scams and fraud related to banking services.

Conclusion

Scams are a growing threat in the digital age, but with awareness and vigilance, you can protect yourself from falling victim. Always verify unsolicited offers, guard your personal information, and seek advice from trusted sources before making financial decisions.

Call-to-Action:
“Scams can happen to anyone. Share this article with your friends and family to help them stay informed and protected.”

By staying informed and proactive, we can combat fraud and create a safer environment for everyone. Remember, the cost of complacency can be devastating—protect yourself today.

Stay vigilant, stay informed, and stay safe.

Ts. Dr. Manivannan Rethinam
Chairman
Majlis Gagasan