Malaysia Scams: Macau Scam, Investment & Online Fraud Guide
Common scams in Malaysia and how to report via PDRM, the NSRC hotline 997, and your bank.
Emergency number: 999 — verify on official sources.
Last reviewed: 1 June 2026
Malaysia sees a high volume of fraud including the 'Macau scam' (impersonation of police, banks, or government agencies), investment and crypto fraud, job scams, and parcel or prize-related smishing. The National Scam Response Centre (NSRC) operates a 997 emergency hotline that can assist victims in halting fraudulent bank transfers rapidly — calling 997 immediately after discovering a transfer is the single most impactful step. The PDRM Semak Mule portal allows the public to check whether a bank account or phone number has been linked to scam reports.
Common scams
- Macau scam (police, bank, or government impersonation by phone)
- Investment and crypto fraud
- Online job and task scams
- E-wallet phishing and account takeover
Tourist-specific scams
- Overcharging taxis and ride-hailing scams
- Fake tour packages
- Counterfeit goods
Online shopping scams
- Parcel and prize smishing
- Marketplace non-delivery
- Fake online shops
Job scams
- Task scams paying small amounts then requiring deposits
- Fake overseas job offers (some linked to regional scam operations)
Romance scams
- Dating-app romance and pig-butchering crypto investment grooming
Investment scams
- Fake trading platforms and 'guaranteed return' investment schemes
- Crypto 'AI bot' and pig-butchering scams
How to report a scam here
- Call the NSRC hotline 997 immediately to attempt to freeze a fraudulent transfer
- Contact your bank to report and block transactions
- Report to PDRM at semakmule.rmp.gov.my or at a local police station
Local reporting & protection links
- Cybercrime reporting
- Consumer protection
- Police
- NSRC hotline — Dial 997 immediately if money was just transferred
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Call the NSRC 997 hotline and your bank immediately after discovering a fraudulent transfer - speed is critical for any chance of a freeze. Use the number on your card or in the official app, never one given to you by a caller. Say that you were deceived into authorising the payment, ask for the receiving account to be reported, and keep the reference number. No legitimate police officer or bank will ask for your banking credentials or OTP by phone; if you gave either, change them and ask about blocking the card.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
What is the Macau scam?
It is a phone scam in which fraudsters impersonate police, bank officials, or government agencies and claim the victim is implicated in a crime. They pressure victims into transferring large sums to 'clear' their name. Real police and bank officials never request money transfers this way.
What is Semak Mule?
Semak Mule is a PDRM (Royal Malaysia Police) online portal at semakmule.rmp.gov.my where you can check whether a bank account number or phone number has been associated with fraud reports before making a transaction.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance