Malaysia Scams: Macau Scam, Investment & Online Fraud Guide
Common scams in Malaysia and how to report via PDRM, the NSRC hotline 997, and your bank.
Emergency number: 999 — verify on official sources.
Last reviewed: 1 August 2026
Malaysia sees a high volume of fraud including the 'Macau scam' (impersonation of police, banks, or government agencies), investment and crypto fraud, job scams, and parcel or prize-related smishing. The National Scam Response Centre (NSRC) operates a 997 emergency hotline that can assist victims in halting fraudulent bank transfers rapidly — calling 997 immediately after discovering a transfer is the single most impactful step. The PDRM Semak Mule portal allows the public to check whether a bank account or phone number has been linked to scam reports before you pay anyone.
The Macau scam deserves its own explanation because it remains Malaysia's most damaging phone fraud. It opens with an automated call or an officer from 'Bank Negara', LHDN (the tax office), the courts, or PDRM claiming you have an unpaid fine, an outstanding summons, or a parcel tied to money laundering. The call is then 'transferred' between convincing accomplices until a 'senior officer' instructs you to move your savings into a 'safe account' for investigation — a mule account. Variants target elderly victims for weeks, swearing them to secrecy. No Malaysian agency ever asks you to transfer money to clear your name.
Beyond that, everyday threats include phishing that harvests TAC/OTP codes for online banking, fake e-wallet top-up deals, Telegram and Facebook investment groups promising daily returns (often 'licensed' with forged SSM or SC documents), love scams that mature into gold or crypto 'opportunities', and job offers abroad that turn out to be scam-compound trafficking lures. Mule-account recruitment — selling or lending your bank account for a fee — is aggressively prosecuted. If money leaves your account, call 997 first, then your bank, then file a police report; check any account number in Semak Mule before transferring to a seller or 'agent'.
Common scams
- Macau scam (police, bank, or government impersonation by phone)
- Investment and crypto fraud
- Online job and task scams
- E-wallet phishing and account takeover
Tourist-specific scams
- Overcharging taxis and ride-hailing scams
- Fake tour packages
- Counterfeit goods
Online shopping scams
- Parcel and prize smishing
- Marketplace non-delivery
- Fake online shops
Job scams
- Task scams paying small amounts then requiring deposits
- Fake overseas job offers (some linked to regional scam operations)
- Mule-account recruitment offering payment for use of your bank account
Romance scams
- Dating-app romance and pig-butchering crypto investment grooming
- Love scams escalating into gold, parcel-fee, or crypto requests
- 'Stranded foreigner' personas asking for customs or hospital payments
Investment scams
- Fake trading platforms and 'guaranteed return' investment schemes
- Crypto 'AI bot' and pig-butchering scams
- Telegram/Facebook investment groups with forged SSM or SC 'licences'
How to report a scam here
- Call the NSRC hotline 997 immediately to attempt to freeze a fraudulent transfer
- Contact your bank to report and block transactions
- Report to PDRM at semakmule.rmp.gov.my or at a local police station
Local reporting & protection links
- Cybercrime reporting
- Consumer protection
- Police
- NSRC hotline — Dial 997 immediately if money was just transferred
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Call the NSRC 997 hotline and your bank immediately after discovering a fraudulent transfer - speed is critical for any chance of a freeze before funds are split across mule accounts. Use the number on your card or in the official app, never one given to you by a caller. Say that you were deceived into authorising the payment, ask for the receiving account to be reported and checked against Semak Mule, and keep the reference number for your police report — banks will ask for it. No legitimate police officer, Bank Negara official, or bank will ask for your banking credentials, TAC, or OTP by phone, and none will direct you to a 'safe account'; if you shared a code, change your credentials from another device and ask about blocking the card. Malaysian banks have also added kill-switch features and cooling-off periods for new devices, so ask what protections you can enable once the immediate incident is contained.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
What is the Macau scam?
It is a phone scam in which fraudsters impersonate police, bank officials, or government agencies and claim the victim is implicated in a crime. They pressure victims into transferring large sums to 'clear' their name. Real police and bank officials never request money transfers this way.
What is Semak Mule?
Semak Mule is a PDRM (Royal Malaysia Police) online portal at semakmule.rmp.gov.my where you can check whether a bank account number or phone number has been associated with fraud reports before making a transaction.
Is it illegal to let someone use my bank account for a fee?
Yes. Acting as a money mule — selling, renting, or lending your account or ATM card — is a crime in Malaysia even if you never touch the scam itself, and mule-account holders are actively prosecuted. Decline any 'easy money' offer involving your account details.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance