As fraud continues to evolve in today’s society, it is important to stay informed and vigilant. Below are some common scam tactics that are being used by fraudsters, along with practical safety tips you can follow to help protect yourself from becoming a victim of fraud.

1. Check OTP details before you authorize any transaction.
chevron

When performing online transactions, always remain vigilant when receiving a One-Time Password (OTP) for authentication. Before proceeding, please verify that the merchant name and transaction amount shown matches your intended purchase. In many scam cases, victims were unaware that the merchant details and transaction amount differed entirely from the transaction they were authorizing. If you encounter such a situation, please report it immediately to the National Scam Response Centre (NSRC) at 997 (operates 24 hours)

Be cautious when clicking on advertisements that seem too good to be true on social media platforms such as Facebook and Instagram. This has become a very common scam tactic. Fraudsters use sponsored ads or fake promotions to impersonate popular grocery shops and lure victims to fraudulent websites designed to steal personal, banking or card information. Always verify with the merchant’s official website. Do not click on unknown links, and never disclose your OTP, card details or login credentials on unverified websites. Please report them promptly through the relevant social media platform’s official reporting mechanism. 

Please review any transaction alert from UOB promptly upon receipt. Such alerts are sent when we detect a potential risk or suspicious activity involving your account, and we require your confirmation on whether the transaction was genuinely authorized by you.

Regularly review the transactions reflected in your account statements for any discrepancies or suspicious charges and report any irregularities without delay. If you have any doubts of a transaction alert you have received, please contact us using the number printed on the back of your card.

If you come across suspicious websites or social media posts, or blog content, please report them promptly through the relevant platform’s official reporting or abuse mechanism. If the issue remains unresolved, you may escalate the matter to the Malaysian Communications and Multimedia Commission (MCMC) via the MCMC Consumer Redress Portal at aduan.mcmc.gov.my or by contacting the MCMC Consumer Care Centre Hotline at 1-800-188-030 (Monday to Friday, 8.30am to 5.30pm). When submitting a report, please remember to provide supporting information such as the specific URL and screenshots of the content, including the date and time it was posted or uploaded, to facilitate investigations.

Be cautious of individuals in public places, such as shopping malls or train stations, who approach you to sign up in support of any causes. Do not disclose your personal information or contact details, as your information may be misused or sold to fraudsters without your knowledge. Remember you will never know who you are giving your information to.

If you receive an SMS claiming that your parcel has been placed on hold due to suspicious or criminal activity, remain calm and do not respond. Do not click on any links in the message or disclose any personal or banking information. This is most likely a scam. Take a screenshot of the SMS and lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) via its complaint portal at https://aduan.mcmc.gov.my or by calling 1800-188-030.

Be vigilant if you receive a call claiming that you have been scammed and are required to transfer your funds to a so-called “safe” or “holding” account. This is a known scam tactic, and members of the public should not follow such instructions. If you receive such a call, hang up immediately and do not disclose any personal, banking or security details, or transfer any funds. You should also block the number and report the suspicious call to the Royal Malaysia Police (PDRM) or to the National Scam Response Centre (NSRC) at 997. The NSRC operates 24 hours a day.

When making a QR payment, always verify that the payee or merchant name displayed in your banking app or e-wallet matches the seller you intend to pay. If the name does not match, do not tap “Confirm”. Stop the transaction immediately and verify the payment details with the merchant before proceeding. Always ensure that you are paying the correct merchant or beneficiary. Before making payment to a new seller or service provider, consider checking the bank account number, phone number or company name on PDRM’s official Semak Mule portal at https://semakmule.rmp.gov.my/. The Semak Mule platform, operated by the Commercial Crime Investigation Department (CCID) of the Royal Malaysia Police, allows members of the public to check bank accounts, phone numbers and company names linked to commercial crime cases.

When shopping online, use trusted e-commerce platforms or official merchant websites that offer customer support, return or refund options, and dispute resolution channels. Avoid making direct bank transfers to unknown sellers, especially if you are asked to complete the transaction outside the platform, make urgent payment, or transfer funds to a personal bank account that does not match the business name.

Take the time to review the applications installed on your device regularly and remove or disable any apps that you do not recognize or no longer use. In addition, ensure that your phone’s operating system and banking application are updated to the latest version, as software updates often contain important security patches and anti-malware enhancements.

Please ensure that your contact details, including your mobile number and email address, are kept up to date with us so that you can receive important security alerts and verification communications promptly. You can update your personal information through UOB’s digital banking services, including the UOB TMRW app and UOB Personal Internet Banking (PIB). For assistance, you could also contact our 24-hour UOB Contact Centre at +6 03-26128 121.

To help you respond quickly in the event of suspicious activity, we recommend saving the following contact numbers in your mobile phone for easy access:

  • UOB Malaysia 24×7 Fraud/Scam Hotline: +60 3 2612 8100
  • NSRC: 997 (available 24 hours)
  • MCMC Hotline: 1800-188-030 (Mon–Fri, 8:30am–5:30pm)
  • MCMC Complaint Portal: https://aduan.mcmc.gov.my/
  • PDRM Semak Mule Portal: https://semakmule.rmp.gov.my/
  • CCID Scam Response Centre: 03-2610 1559 / 03-2610 1599 

We encourage you to follow UOB Malaysia’s official communication channels, including our social media platforms to view our postings & videos to stay informed of the latest scam and fraud tactics used by criminals. to stay protected against the evolving threats.

We strongly encourage you to observe the following precautions to safeguard their cards, PINs and security credentials against misuse

  • Do not disclose your PIN or any security credentials to anyone
  • Do not permit any other person to use your card or PIN
  • Do not record or write down your PIN or security credentials on your card, or on any item kept in close proximity to your card.
  • Avoid using easily predictable PINs or security credentials, such as your date of birth, identity card number, passport number, driving license number or contact number
  • Keep devices used to authenticate banking transactions secure and protected at all times
  • Notify us immediately if your card is lost or stolen, if you detect any unauthorized transaction, or if you believe your PIN or security credentials may have been compromised. If you need to report a lost or stolen card, online fraud or suspected misuse, please contact UOB Malaysia’s 24-hour Fraud/Scam  Reporting Hotline at +6 03-2612 8100 immediately
  • If you suspect that you may have been scammed, you should quickly block the affected credit or debit card via the UOB TMRW app and activate the Kill Switch to disable access to your UOB Personal Internet Banking and UOB TMRW app. Please contact UOB Malaysia’s 24-hour Fraud/Scam Reporting Hotline at +60 3 2612 8100 immediately if you require any assistance.

Beware of scammers pretending to be a relative or a friend who is unable to perform payments. They may claim to have difficulties logging into their account to perform the transfer and need you to assist with a payment for their account.

 

What should you do?

 

  • In impersonation scams, the original phone number has already been compromised. Therefore, when you receive such a call, it’s best to contact a relative or a close contact to verify the caller. Do not call back the same number as you could be calling back the scammer. Never transfer out any funds no matter the urgency used in the call unless you have verified the identity of the caller. Remember, scammers will always panic you into making hasty actions.
  • Vigilance is your best defense against fraud if and when you receive these suspicious calls. Do not, under any circumstance entertain such requests.
  • Should you encounter any such suspicious calls, please report it immediately to the National Scam Response Centre at 997 (available 24 hours) and lodge a police report where necessary. If you are uncertain of a message and/or call that you have received, or if you may have inadvertently disclosed your personal or bank information, please inform our 24-Hour Contact Centre at 03-26128 100 immediately.

These are calls where victims have been informed that they have arrears that requires an immediate payment and account numbers (scammers accounts) are provided for the payments.

 

What should you do?

 

  • Ignore the call, hang up immediately and report their number to the authorities. As a rule of thumb, always remember, the authorities will never call for an investigation over the phone.
  • If you are doubtful whether it could have been a genuine call, please cross check the call using details from the government officials/LHDN official website.
  • Vigilance is your best defense against fraud if and when you encounter such suspicious calls. Do not, under any circumstance entertain these requests. If you encounter such a call, please remain calm and disconnect the call immediately.
  • Lodge a report to the Royal Malaysia Police (PDRM) at a nearby police station. The public can also contact the Royal Malaysia Police PDRM via the Commercial Crime Investigation Department (CCID ) Infoline at 013-211 1222 or the Commercial Crime Investigation Department ( CCID) Scam Response Centre at 03-2610 1559 or 03-2610 1599.

In these scam scenarios, victims are added into a chat group which could either be a WhatsApp or Telegram chat group. The chat participants would claim they have made huge returns as an enticement tactic. A link thereafter is provided to the victim to initiate a payment. This link installs an Android Package Kit ( apk ) file into unsuspecting victim’s phone. What should you do?

 

  • Always be wary of any unknown groups chats you have been added into.
  • Quickly exit the chat specially when it promises investments that seems too good to be true.
  • Never click on any links provided and never under any circumstances share your OTP or card details or any other personal banking details to anyone. Any request for your personal banking details should never be entertained.
  • When in doubt of whether an investment is genuine, you can check the validity of investors via SSM - Companies Commission of Malaysia and the SC - Securities Commission Malaysia.
  • To contact the SSM, you can reach them at their customer care line at 03-7721 4000 or alternatively you can email them at enquiry@ssm.com.my. To contact the SC, you can call their hotline at (603) 6204 8999 or email them at aduan@seccom.com.my.
  • If you suspect that you have encountered an investment scam, please contact the National Scam Response Centre at 997 (available 24 hours).

Victim contacts seller via Instagram to make the purchase. Seller is advised to transfer payment into the scammers account for the item to be delivered however the item is not sent post the payment arrangement. Victim tries to contact the seller but is unable to reach them and then victim realizes that they have been scammed.

 

What should you do?

 

  • Whenever you see an offer on high-value product going at unbelievably low prices please be wary. In most cases when an offer seems too good to be true it usually is.
  • Always verify the identity of the person you are aliasing with, especially when there are movement of your funds involved.
  • If you suspect that you have encountered an investment scam, please contact the National Scam Response Centre at 997 (available 24 hours).

The scammer offers the victims a commission-based job to perform certain tasks. Part of this task involves the victim transferring an initial amount of money. The victim is required to access a website provided to perform the tasks and he will earn money post completing this task. The victim completes the task and earns a certain amount for it. Subsequently the scammer advises the victim to top up the amount which he had initially transferred to move on to a bigger task with a higher return. This goes on until the victim ends up performing huge fund transfers only to realize that the final task ended up scamming them of all their money.

 

What can you do?

 

  • Always be wary when you have been added into any chat groups specially when it consists of people you don’ know of.
  • Always check the credentials of a company when you have been offered a job. Go to their official website and try to look for reviews to ensure it is legitimate.
  • Typically, in any job offer, it is unlikely that you would need to initiate a payment to commence the job.
  • If you suspect that you have been scammed, please do contact the National Scam Response Centre at 997 (available 24 hours) between 8am to 8pm daily and lodge a police report.

Victim applies for a job by clicking a link he found on Google Search. He is then directed to a WhatsApp group. The scammer then contacts the victim via mobile and informs him that he needs to make an upfront payment before the job commences and is promised that a refund will be provided upon the task completion. Victims performs the fund transfer and gets scammed of their savings.

 

What should you do?

 

  • Always be wary when you are added into a chat group. Research the company that is trying to recruit you and verify the recruiter’s contact information.
  • Do not arrange for any payments, you will never need to arrange for a payment to get a job. This should be a red flag when you see such a prerequisite.
  • Do not continue with any interaction. Quickly exit and report the chat group.

Victim receives an automated call purportedly from UOB that a huge unauthorized amount of funds in their savings account has been used and the victim needs to verify this by dialing 0 to be connected to a representative. As the amount stated in the call is high, this would create a sense of panic in the victim causing them to immediately follow the instructions stated in the call. These instructions involve the victim temporarily transferring out their remaining funds into a secure account which is provided by the scammer.

 

This alternate account is the account used to scam the victims out of all their funds. Once the funds have been transferred, the victim is informed that they would be contacted after a few days on an update of the investigation.

 

What should you do?

 

  • As a rule of thumb, please always be wary of such automated calls. This tactic is often used by scammers as automated calls tend to give a legit feel to the call.
  • Try not to panic and do not entertain such calls especially when you know you have not performed such transactions.
  • Hang up the call and directly call up the bank and verify this claim.
  • Check your accounts regularly and look at your purchases to verify if any transactions seem suspicious.

Victim finds an advertisement about a travel agent representing a known travel agency. The victim accesses the link provided to browse through all their travel packages that are currently being offered. It emphasized that it is for a limited time and the victim also notices several feedback have been posted on that fake website alleging how excellent the packages being offered are. The victim also notices that there is an endorsement on this site by the government.

 

This luring tactic of an irresistible package for a limited time is a common tactic used by scammers to entice their victims. The victim thereafter is required to download an application on their mobile which is provided by the scammer to purchase their boarding pass. Post downloading this unknown application, scammers are able to gain access to the victims mobile. Scammers will use this access to read and obtain your transaction alerts and/or OTP numbers.

 

What should you do?

 

  • Never download any unknown applications, especially when it is not from any known application store such as Play Store or Apps Store. Avoid clicking on any pop ups or links from any social media or any e-commerce platforms. You are putting yourself at risk.
  • Always verify these packages using the official websites or contact them using their official contact number.
  • Check the URL addresses to confirm that it is secure site.
  • Be wary of any offers that seem to be too good to be true specially when it is for a limited time only.
  • As a rule of thumb, always remember that government agencies will never endorse commercial entities.
  • If you suspect that you have encountered a travel scam or you have fallen victim to a travel scam, please submit a complaint via the Public Complaints Management System – SISPAA. To contact SISPAA, you can contact them via email at http://moh.spab.gov.my or you can reach them at either one of the two following numbers which are 1300 885 465 or 603 2174 1717.
  • You can also visit the Official Portal of the Ministry of Tourism, Arts and Culture Malaysia to obtain information regarding registered travel agencies.