Spotting money scams in Malaysia before they cost you
MoneyMama · 23 June 2026 · 4 min read
Scams in Malaysia have moved on from the obvious “you’ve won a lottery” emails. Today they arrive as a polite SMS about a parcel, a call that sounds like your bank, or a link that looks almost exactly like a real login page. The technology changes, but the playbook underneath stays remarkably the same. Learn the pattern once and you’ll spot most scams long before they cost you anything.
Here is the short answer. Almost every money scam in Malaysia leans on at least one of three signs: false urgency, a link or phone number the sender gives you, and a request for a secret like your OTP, TAC, or password. Real banks and agencies never rush you or ask for those codes. So when a message pushes you to act fast, pause, ignore the link, and reach the bank through the number on your card or its official app. You can also forward anything suspicious to MoneyMama with /semak to check it against the police mule database.
The three signs that show up again and again
Almost every money scam leans on at least one of these:
- Urgency. “Your account will be frozen in one hour.” Real banks and agencies don’t rush you like this. Panic is the goal, because rushed people skip the checks they’d normally make.
- A link or a number they gave you. Scammers want you on their turf: a link in the message, or a “hotline” they provide. Always reach the bank using the number on the back of your card or the official app, never the one in the message.
- A request for secrets. A TAC, OTP, full card number, or password. No legitimate bank or government officer will ever ask for these. Sharing a TAC is like handing someone the key to your account.
Common scams to watch for
A few that are especially active in Malaysia right now:
- Parcel and delivery scams: an SMS says there’s a “customs fee” or a failed delivery, with a link to pay. The link harvests your card details.
- Fake bank alerts: a message claims a suspicious transaction and asks you to “verify” by logging in through their link.
- Impersonation calls: someone claims to be from a bank, the police, or Bank Negara, and pressures you to move money to a “safe account.” There is no such thing as a safe account they control.
- Investment groups: a WhatsApp or Telegram group promising guaranteed high returns. If it’s guaranteed and urgent, it’s a scam.
When in doubt, slow down and ask
The single best defence is a pause. Close the message. Don’t tap the link. Reach the company through a channel you already trust and ask if the message was real. Scammers rely on you acting before you think.
If something feels off, you can forward it to MoneyMama on WhatsApp and ask. Checking a dodgy link or message takes seconds, and it’s a lot cheaper than finding out the hard way. A little suspicion is healthy, lah.
See a /semak check in action
Not sure about a number, account, or link? Send it to MoneyMama with /semak and she checks it against the PDRM (CCID) mule database in seconds:
Number: 01161051865
Total Reports: 14
Total Times Checked: 637
Aiyo, be very careful ah! This phone number has been reported to the authorities before. Please do not transfer any money.
Check for yourself at the official PDRM portal: semakmule.rmp.gov.my/4:02 PM
Three official lists worth bookmarking
You do not have to take anyone’s word for it, including ours. Malaysia’s regulators keep free, public lists that anyone can check in under a minute. When something feels off, these are the places to look first.
- Semak Mule, by the Royal Malaysia Police (PDRM, CCID). Check whether a bank account number or phone number has been reported for scams or money-mule activity. This is the same official database MoneyMama’s
/semakchecks against. - Investor Alert List, by the Securities Commission Malaysia (SC). See whether an “investment opportunity”, company or person is unlicensed or flagged for illegal capital-market activity. If it is on this list, walk away.
- Financial Consumer Alert List, by Bank Negara Malaysia (BNM). Spot unauthorised websites and entities pretending to be licensed banks, insurers, or money-services businesses.
Make it a habit: before you pay, invest, or share any detail, run the name, number, or account through the right list above. MoneyMama is glad to help you check, but these official sources are always the final word.
