Skip to main content

Malaysia (MY)

Multicultural, English-friendly Malaysia offers affordable living, world-class street food, tropical lifestyle, and a well-developed expat infrastructure in Kuala Lumpur and Penang.

Capital: Kuala Lumpur
Region: Asia
Language: Malay
Currency: MYR (RM)
Cost of living: Very affordable (index 40)
Emergency: 999
Premium

Scam Warnings

Common scams targeting expats in Malaysia.

Malaysia faces a severe and worsening scam crisis. The Royal Malaysia Police (PDRM) Commercial Crime Investigation Department (CCID) recorded over 74,744 online scam cases and RM2.9 billion in losses in 2025 — more than double 2024 figures. Experts warn that underreporting may inflate true losses to RM54 billion annually. Golden rules: no legitimate government agency, police, or bank will ever ask you to transfer money to a "safe account"; verify any investment platform with the Securities Commission before transferring funds; treat any unexpected OTP as a scam attempt.

Macau Scam (Penipuan Macau)

critical

Malaysia's most reported and financially devastating phone scam. In 2025, telecom fraud including Macau scams led all categories with 28,698 incidents and RM715 million in losses. A caller impersonates a customs officer, police, immigration officer, Bank Negara official, or court representative and claims you are under investigation for money laundering or have an outstanding warrant. The goal is to cause panic and extract an immediate bank transfer to a "safe account." Operations run for hours with multiple fake officers on the line to prevent you from thinking clearly.

How to spot it
  • - Unsolicited call claiming to be from police, customs, immigration, Bank Negara, or a court — no real authority initiates urgent investigations this way
  • - Caller insists you are under investigation and must act immediately or face arrest
  • - Asked to transfer funds to a "safe account" (akaun selamat) to protect your money during the supposed investigation
  • - Told not to tell anyone — family, friends, or your employer — about the call: this secrecy instruction is the hallmark of the Macau Scam
  • - Caller keeps you on the line continuously, preventing you from calling back on a known official number
  • - Calls from spoofed landline numbers that appear to be official government numbers
What to do: Hang up immediately. No legitimate authority requests money transfers. Call the agency back using the number on their official website — not the number that called you. Report to the CCID Scam Response Centre: 03-2610 1559 (24-hour). Tell a trusted person immediately.

Job scam and human trafficking to Myanmar, Cambodia, and Laos

critical

A critically dangerous scam with documented human trafficking consequences. In 2025, PDRM received over 8,484 job scam reports involving RM202.58 million in losses, and over 750 Malaysians were rescued from scam compounds in Myanmar and Cambodia. Victims are recruited via Facebook, Instagram, Telegram, or job platforms with offers of high-paying remote work (data entry, customer service, cryptocurrency roles). On arrival, their passports are confiscated and they are forced to run online scams under threat of violence and debt bondage.

How to spot it
  • - Job offer with unusually high salary (RM5,000–20,000/month) for basic or unspecified work requiring no formal qualifications
  • - Employer arranges all travel, visa, and accommodation and pressures you to travel quickly
  • - Job location is described as Myanmar, Cambodia, Laos, or Thailand border regions
  • - Recruiter found you on WhatsApp, Telegram, or Instagram rather than a formal, verifiable employment platform
  • - Role involves managing cryptocurrency wallets, customer accounts, or online sales for unnamed clients
  • - Recruiter avoids answering direct questions about the company name, registration, or office location
What to do: Do not travel. Contact the Anti-Trafficking in Persons and Anti-Smuggling of Migrants (ATIPSOM) unit: 03-8000 8000 or Talian Kasih: 15999. If already trapped overseas, contact the nearest Malaysian Embassy or High Commission immediately. Report via CCID: 03-2610 1559.

Love scam (Penipuan Cinta / pig butchering)

critical

Romance scammers create fake profiles on dating apps (Tinder, Bumble, Coffee Meets Bagel, Facebook) and spend weeks building emotional trust before introducing a fake cryptocurrency or investment platform. Victims see fabricated profits on small amounts, invest larger sums, and lose everything. Malaysia recorded over RM400 million in love scam losses in 2024, with 2025 figures expected to be higher. Scammers typically use stolen photos of attractive foreign nationals, military officers, or business executives.

How to spot it
  • - Online relationship where the person has never met you in person despite weeks or months of daily communication
  • - Person claims to be overseas — on an oil rig, military base, international construction project, or similar unreachable location
  • - Introduces an investment platform or "trading group" with guaranteed high returns after building trust
  • - Asks you to invest on their behalf, send money for a visa, or help with an "emergency"
  • - Profile photos look like professional model or stock photos — do a reverse image search on Google
  • - Conversation rapidly moves off the dating app to WhatsApp or Telegram
What to do: Stop all transfers immediately. Do not send money to or invest on behalf of anyone you have not met in person and verified. Report to CCID: 03-2610 1559. If you have already transferred money, contact your bank's fraud team immediately — some transfers can be reversed within 24 hours.

Investment scam (Pelaburan haram / Skim Cepat Kaya)

critical

Unlicensed investment schemes promise guaranteed high returns of 3–10% per month, promoted via WhatsApp groups, Telegram channels, and Facebook. Common formats include cryptocurrency trading pools, forex syndicates, gold investment, and "fixed income" property schemes. In 2025, cryptocurrency investment scams remained the highest-value fraud category in Malaysia. The Securities Commission (SC) and Bank Negara Malaysia (BNM) regularly publish lists of unlicensed operators.

How to spot it
  • - Guaranteed returns above 2–3% per month — sustainable market returns average well below 1% monthly
  • - Referral commissions for bringing in new investors — classic pyramid structure
  • - Platform is not listed on the SC investor registry (sc.com.my) or BNM's licensed institutions list (bnm.gov.my)
  • - Company cannot be found in SSM's business registry (ssm.com.my)
  • - Pressure to invest quickly or you will miss the opportunity
  • - Withdrawals are restricted, delayed, or require an additional "tax payment" or "release fee"
What to do: Check the SC investor alert list at sc.com.my/investor-alert-list and BNM's consumer alert at bnm.gov.my before any transfer. Never invest without verifying the operator's licence. Report to SC: 1-300-88-5465 and to CCID: 03-2610 1559.

SIM swap and OTP interception scam

critical

A scammer convinces your mobile operator to transfer your phone number to a new SIM card under their control. All OTPs (one-time passwords) from your bank are then routed to the scammer's phone, enabling complete emptying of accounts within hours. Also occurs via malware that intercepts OTPs on your device. The Macau Scam often terminates with OTP theft when victims are convinced to share their code to "verify identity."

How to spot it
  • - Your phone suddenly loses all mobile signal in an area you know has coverage — a SIM swap may be in progress
  • - You receive an OTP you did not request from your bank
  • - Your bank balance changes without any action on your part
  • - Unknown applications on your device request SMS or notification access permissions
What to do: If you lose signal unexpectedly: call your telco immediately to check for unauthorised SIM activity. Enable Secure2u or biometric confirmation on all banking apps. Never share OTPs with anyone. Contact your bank's 24-hour fraud hotline immediately if you suspect a breach. BNMTELELINK for BNM-related financial fraud: 1-300-88-5465.

Business email compromise (CEO / boss scam)

warning

A scammer impersonates a company CEO, CFO, or senior manager via a spoofed email address (e.g. ceo@company-corp.com vs the real ceo@company.com) and instructs finance or HR staff to make urgent payments, purchase gift cards, or change payroll bank details. Particularly targets multinational companies with remote decision-making structures. Losses can run to millions of ringgit per incident.

How to spot it
  • - Email from a senior executive requesting urgent payment or a bank detail change
  • - Sender's email domain differs from the company's real domain by one letter, a hyphen, or a different top-level domain
  • - Request for secrecy: "Do not discuss this with others — it is confidential"
  • - Unusual urgency: "Process this payment before you leave today"
  • - Payment destination is a new, previously unused, or overseas bank account
What to do: Always verify payment instructions by calling the alleged sender on a known company phone number — do not reply to the email. Implement dual authorisation for all payments above a defined threshold. Report to CCID: 03-2610 1559.

Rental scam

warning

Fraudulent property listings on iProperty, PropertyGuru, Mudah, and Facebook Marketplace. Scammers post below-market listings, collect deposits from multiple victims, then disappear. Fake landlords sometimes show victims a property they do not own using a borrowed key. More common in KL expat areas (Mont Kiara, Bangsar) where new arrivals are unfamiliar with market rates.

How to spot it
  • - Rent significantly below market rate for the area and property type
  • - Landlord cannot meet in person or claims to be overseas and will mail the keys after payment
  • - Pressure to pay a deposit before signing any tenancy agreement
  • - No tenancy agreement provided or only a vague verbal arrangement
  • - Cannot verify ownership on e-Tanah (land title search) or through a property lawyer
  • - Payment requested to a personal bank account rather than a company or solicitor account
What to do: Verify ownership via a lawyer or land search before paying any deposit. Always pay by traceable transfer with a reference. Never pay to a personal account without a signed tenancy agreement. Report to CCID: 03-2610 1559 and flag the fraudulent listing on the platform.

Snatch theft (Ragut)

warning

Motorcyclists or on-foot thieves grab bags, phones, or jewellery from pedestrians. Prevalent in KL city centre, Chow Kit, Petaling Street, Brickfields, and busy commercial streets. Highest risk when using a phone while walking in high-traffic areas or wearing visible jewellery. Victims who resist can be seriously injured by being dragged.

How to spot it
  • - Motorcycles riding slowly near pedestrians in city areas or near bus stops
  • - Carrying a bag on the road-side shoulder rather than the building side
  • - Using a phone while walking in a high-risk area
  • - Wearing visible gold chains or necklaces in street markets or city streets
What to do: Do not resist — release the bag. Call police (999 or 112). Note the motorcycle plate number if possible. Lodge a report at the nearest police station (Balai Polis) within 24 hours — required for insurance and official records. Carry bags on the building side; use a phone strap.

E-commerce fraud (online shopping scam)

info

Fake seller listings on Facebook Marketplace, Carousell, and unofficial channels. Buyers pay for goods never delivered or receive counterfeit items. Also includes fake stores mimicking legitimate brands. Shopee and Lazada have buyer protection programmes but fraudulent third-party stores exist on both platforms.

How to spot it
  • - Seller insists on direct bank transfer rather than using the platform's protected payment system
  • - Price is significantly below market value for brand-name goods
  • - Seller provides only stock photos and cannot show the actual item on video
  • - Seller rushes you to confirm and pay before you can research the seller's rating or reviews
What to do: Always use the platform's own payment and escrow system. For Facebook Marketplace and Carousell, prefer cash on delivery for first purchases from new sellers. Report fraud to the platform and to CCID: 03-2610 1559 for any significant financial loss.

Reporting

Where to report: PDRM CCID Scam Response Centre: 03-2610 1559 (24-hour hotline). Online report: ccid.rmp.gov.my. Police emergency: 999 or 112. Securities Commission (investment scams): 1-300-88-5465 / sc.com.my. Bank Negara Malaysia BNMTELELINK (financial fraud): 1-300-88-5465 / bnm.gov.my. Human trafficking (ATIPSOM): 03-8000 8000 or Talian Kasih 15999. Lodge formal police reports at the nearest Balai Polis — required for insurance claims.

Consumer helpline: CCID Scam Response Centre: 03-2610 1559 (24-hour). BNMTELELINK — Bank Negara Malaysia financial fraud helpline: 1-300-88-5465. Securities Commission: 1-300-88-5465. KPDN consumer protection: 1-800-886-800. Malaysia's Consumer Protection Act 1999 provides a cooling-off right of up to 10 days for certain direct and distance sales contracts.