The honest starting point: it depends on speed
Getting your money back is possible, but it isn't the norm, and how much comes back depends heavily on how fast the receiving account is frozen relative to how far the scammer has already moved the funds.
- Frozen fast — if the National Scam Response Centre (NSRC) reaches the receiving bank before the scammer withdraws or moves the money onward, some or all of it can be held and potentially returned.
- Already layered — once money has been split and passed across a chain of mule accounts (a tactic used specifically to defeat freezes), each additional hop makes recovery less likely. Cases that reach this stage are rarely recovered.
This isn't pessimism for its own sake — it's why speed matters more than almost anything else once you realise you've been scammed. For the exact call-and-report sequence, see the first 24 hours guide — this page won't repeat those steps.
Freeze your own accounts first
If the scammer has your banking login, TAC/OTP, or app password — not just the account number you paid into — freeze your own accounts and cards immediately. Banks are required by BNM to provide an in-app kill switch that freezes your own accounts and cards — use it if the scammer has your login details. Scope varies by bank; check yours on the banks directory.
This step protects you from further loss. It's separate from, and doesn't replace, reporting the transfer itself.
Ask your bank for a recall — and understand its limits
A "recall" is a request your bank sends to the receiving bank asking it to hold or return the funds. Banks can only act on what's still there: if the receiving account still holds the money, a recall has a real chance of working; if it's already been withdrawn or moved further downstream, there is often nothing left to recall.
Why an authorised transfer is harder to reverse
Malaysian banks generally treat two situations differently:
- Unauthorised transaction — someone moved your money without your consent, for example your card or account credentials were stolen and used without you acting at all. Banks have clearer dispute processes for this.
- Authorised transaction obtained by deception — you personally approved the transfer, even though you were tricked into doing so (an investment scam, a fake official demanding "payment," and similar). This is much harder to reverse. There is no general chargeback-style right to a refund for a transfer you yourself authorised, even once deception is later proven — each bank assesses these cases individually, and outcomes vary.
Knowing which situation you're in changes what to realistically expect, not what to do next. Either way, report immediately and let your bank make the assessment.
Beware "recovery agents" — this is often a second scam
If someone contacts you (often on WhatsApp or Telegram, sometimes claiming to be a "recovery agent," a "hacker," or even a "lawyer") offering to recover your lost money for an upfront fee, treat this as its own scam. It follows the same advance-fee pattern seen in loan scams, where a fee is demanded before anything is released. No legitimate recovery channel — your bank, the NSRC, or the police — will ever ask you to pay a fee upfront to get your own money back.
FAQ
Will I definitely get my money back if I report quickly?
No — reporting quickly improves your odds, it doesn't guarantee a result. A fast freeze can recover money that hasn't moved on yet; money already withdrawn or layered through mule accounts is often gone for good. Report immediately regardless, because speed is the only thing that gives you a real chance.
I authorised the transfer myself — can I dispute it like a card chargeback?
Not in the way a card chargeback works. Malaysian banks don't offer a general right of reversal for a transfer you personally authorised, even if you were deceived into making it. Some banks may still attempt a recall or review the case individually, so report it anyway — but keep your expectations realistic.
Someone is offering to recover my money for a fee — is that legitimate?
Treat it as a scam. Legitimate recovery happens through your bank, the NSRC, and the police — none of which will ever charge you an upfront fee to return your own money. Paying a "recovery agent" upfront is a well-known advance-fee scam pattern.