Scam types

The patterns behind Malaysia’s most common scams — how they work, the warning signs, and what to do.

• APK sideload / fake app malware

  A fake courier, bank or refund message asks you to install an .apk file outside the app store. It then reads your OTPs and takes over your banking apps.

• E-commerce scams

  Fake sellers push you to pay off-platform then vanish; fake buyers claim overpayment or fake a payment screenshot. Recognise both before you lose money.

• Investment scams: fake guaranteed returns & clone firms

  Guaranteed-return pitches, private Telegram groups and clone brokerage firms. How to spot investment scams and verify a firm before you invest.

• Invoice scams & fake bank-detail changes

  A supplier email claims their bank account changed, or sends an invoice from a hijacked account. Always verify by phone before paying a new account.

• Part-time job scams: task apps that ask you to pay

  Easy "tasks" pay small amounts at first, then ask you to deposit money to unlock bigger rewards that never arrive. How to spot part-time job scams.

• LHDN impersonation scams

  Fake tax-arrears calls, audit notices and refund messages impersonate LHDN. Genuine LHDN correspondence never asks you to move money to a safe account.

• Loan scams: fake lenders & upfront fees

  Ah Long moneylenders and deposit-first loan scams target cash-strapped borrowers — how they work and what a real lender never asks you to pay first.

• Love scams

  A romantic partner met online — often claiming to work overseas — asks for money for a "crisis," gift fee, or investment. Recognise the pattern early.

• Macau scam: fake police, LHDN & court calls

  Callers pose as police, LHDN, Bank Negara or a court and pressure you to transfer money to "clear your name". How it works, warning signs, what to do.

• Mule accounts: don't rent out your bank account

  Recruiters pay you to lend, sell or share OTP access to your bank account — it's used to move scam money and you can face criminal liability.

• Parcel scams: fake delivery fee texts

  A text says your parcel is stuck at customs or delivery failed, with a link to pay a fee or install an app. It's phishing, not a courier.

• Phishing/smishing, including fake bank TAC/OTP messages

  Fake bank SMS, email or WhatsApp messages push a fake login link or ask you to share a TAC/OTP. A message that only notifies you of a code is normal.