Online scams are a real worry in Malaysia. Scammers use phone calls, SMS, WhatsApp, fake websites and social media to trick people into handing over money or personal details. Knowing how to avoid online scams is now as normal a life skill as locking your front door.
Most scams follow the same few patterns, and that actually works in your favour. Once you know the warning signs, you’ll start spotting them early. Below you’ll find the common tricks and the simple habits that keep you, your family and your business safe.
Anyone Can Be a Target
It’s easy to think only older folks or careless people fall for scams. That’s not true. Scammers go after students, working adults, retirees and business owners alike.
Their real skill is creating strong feelings. Panic, fear or excitement all push people to act fast without thinking. So your first line of defence is surprisingly simple: slow down.
The Tricks Scammers Use Most
Phishing is one of the most common. You get an email, SMS or WhatsApp message that looks like it’s from your bank, a courier company or a government agency. It asks you to click a link and “confirm” your details. The link leads to a fake page that looks almost exactly like the real one.
Then there are impersonation calls. The caller claims to be a police officer, bank officer or some other official, and says you’re in trouble. Maybe your IC was used in a crime, or a parcel in your name was found with something illegal inside. To “clear your name”, you’re told to move your money into a so-called safe account.
Fake online shops pull people in with very low prices. You pay, and the item never arrives. Investment scams promise high, fast returns with “no risk”, usually backed by fake screenshots and success stories. Job scams offer easy work from home, then ask you to pay a fee first or complete “tasks” using your own money.
Love scams take longer. Someone builds a close relationship with you online over weeks or months, then suddenly needs money for an emergency. More recently, scammers have also been sending app files to install from outside the official app store. Once installed, these files can take control of your phone.
Signs That Something’s Off
Most scams share the same red flags. Stop and think if you notice any of these:
- You’re pushed to act right now or face serious trouble.
- You’re told to keep it secret from family, friends or your bank.
- The deal, prize or profit sounds too good to be true.
- Someone asks for your password, PIN or one-time password (OTP), which is the short code sent to your phone to confirm a transaction.
- You’re asked to pay into a personal account, buy gift cards or send cryptocurrency.
- The website address looks almost right but has a small spelling mistake.
A real bank or agency won’t mind if you hang up and check first. Only scammers get upset when you ask for time.
Everyday Habits That Make You Harder to Fool
Never share your password, PIN or OTP with anyone, even someone who says they’re from your bank. Don’t click links in messages you weren’t expecting. Instead, type the official website address yourself or open the bank’s official app.
Download apps only from official app stores, and keep your phone and computer software up to date. Use strong, different passwords for your important accounts, and turn on two-factor authentication wherever you can. That simply means logging in needs a second step, like a code sent to your phone, so a stolen password alone isn’t enough.
It also helps to set up transaction alerts with your bank, so you know the moment money moves. And think twice before posting your IC number, home address or other personal details on social media.
Unknown callers deserve a bit of caution as well. You can answer, but never give personal or banking details over the phone. If the caller says they’re from an agency or your bank, hang up and call the official number yourself. A genuine bank won’t ask you to share your OTP, so anyone who does is a scammer.
Shopping Online Without Getting Burned
Online shopping is convenient, which is exactly why scammers love it. Stick to well-known platforms such as Shopee or Lazada, or buy from a brand’s official website. Read seller reviews and ratings, and be extra careful with new shops that have no history.
Keep your payment inside the platform. If a seller asks you to transfer money straight to their bank account “for a better price”, walk away. The same goes for prices that are far lower than everywhere else. Before typing in card details, check that the website address is correct.
If You Run a Business
Small businesses are targets too. Scammers send fake invoices, pretend to be suppliers or email staff asking them to update the bank details for payments.
Train your team to double-check any request to change payment details. Call the supplier using a number you already have on file, not the one in the message. Set clear rules on who can approve payments, keep company logins private and remove access as soon as a staff member leaves.
Think You’ve Been Scammed? Act Fast
Speed matters here. The sooner you move, the better your chances of limiting the damage.
- Call your bank right away using the official hotline on its website or the back of your card, and ask them to block your account or card.
- Change your passwords, starting with email and online banking.
- Make a police report as soon as you can.
- Keep every piece of evidence, such as screenshots, messages, receipts and phone numbers.
- Warn your family and friends, because scammers may contact them next.
Please don’t feel ashamed. Scammers do this full time, and reporting helps protect the next person.
Scammers keep changing their stories, but the method underneath rarely changes. They rush you, scare you or tempt you. If you pause, check the facts and keep your details to yourself, most of their tricks simply stop working. Do forward this to your family group chat as well. It might save someone a lot of heartache, and we’ll keep sharing practical safety guides like this one here on Human Web.
