Guides

Practical, step-by-step guides — what to do first, how to verify, and where to report.

• How to check a scammer's phone number or bank account

  Use Semak Mule (semakmule.rmp.gov.my), PDRM's official portal, to check a bank account or phone number before you go any further.

• Scammed in Malaysia? The first 24 hours

  Call 997, freeze the receiving account, then lodge a police report — the exact order, and why speed matters most.

• I gave my TAC/OTP to someone — what now

  Call your bank's fraud hotline right away, use the in-app kill switch if needed, then follow up. Speed matters more than how it happened.

• Can I get my money back after a scam in Malaysia?

  Honest odds on scam recovery: fast NSRC freezes can work, layered mule transfers rarely do — plus the bank kill switch and the recovery-agent scam to avoid.

• How to report a scam in Malaysia — every channel

  Every Malaysian scam-reporting channel — 997, Semak Mule, MCMC, bank fraud lines and police reports — matched to your situation.

• I installed an APK from WhatsApp — what now

  Disconnect from wifi and data first to cut the malware's remote access, then call your bank from a different device. Don't just uninstall.

• Is this LHDN email real?

  LHDN mail always comes from @hasil.gov.my. Spot fake arrears, audit and refund emails, and the "safe account" trick, before you reply.

• Accused of being a mule account — what to do

  Your account may already be flagged, or was used without your knowledge. Evidence to gather, when to get a lawyer, and how to report it.

• How to verify an investment company is licensed in Malaysia

  SSM confirms registered, not licensed. Check BNM's and the SC's licensed-entity registers separately — and don't read a clean warning-list check as 'safe.'

• Verify a supplier's bank details before paying

  A supplier's bank account 'changed' by email? Call a number you already have on file — never one from the message — and verify verbally before you pay.