Navigate Safely in Malaysia
Facing the rise in cyberattacks and sophisticated fraud, our comprehensive guide arms you against scams targeting expats. Learn to identify traps and protect your digital and financial assets.
"Fraudulent transfer order scams are up 15% this quarter."
In collaboration with prevention authorities
A National Task Force at Your Service for Protection
Since the health crisis of 2020-2021, digital transformation has accelerated, bringing with it a profound mutation in cybercrime. To meet these new challenges, a national task force against scams has been established. This inter-agency collaboration brings together regulatory authorities, law enforcement, and key ministries to ensure constant monitoring and effective repression.
For expats in Malaysia, understanding this mechanism is essential. Whether you manage your finances via local banks or look for a job in Malaysia, vigilance must be your first reflex. Prevention, supported by updated guides and tools like the Thésée platform, remains the most effective shield against web predators.
Fraud Types in 2026
A comprehensive overview of methods used by cybercriminals.
Advanced Phishing and Smishing
Phishing campaigns are no longer limited to poorly written emails. In 2026, impersonations of Malaysian or French administrative sites are common. Attackers use AI to generate highly personalized messages, often via WhatsApp or SMS (Smishing), prompting you to click links to "update your residency file" or "pay a transport fine".
Manage your formalities safelyE-Commerce & Dropshipping
Watch out for offers that are too good to be true on social media. Abusive dropshipping and fake shopping sites are rampant.
CPF Scams
Even from abroad, your Personal Training Account (CPF) remains a target. Never share your access codes.
Fake Transfer Orders (FTO)
Also known as "CEO fraud", this scam now targets individuals and small businesses created by expats. The operating mode: impersonating a supplier or an administration to request a change in bank details before a significant payment (rent, real estate investment).
Always confirm through a second channel (phone call to the official number).
Manage your finances via secure apps only.
Scam Risk Simulator
Received a suspicious offer or message? Assess the danger level in just a few clicks.
Analysis result
Massive Use of Social Media: The New Hunting Ground
Social media (Facebook, Instagram, LinkedIn, and TikTok) are no longer just sharing platforms; they have become the preferred vectors for fraud in 2026. Exploiting social trust is at the heart of romance scams or fake recruitment accounts for dream jobs in Malaysia.
Image Hijacking: Use of stolen photos to create profiles of credible financial experts or real estate agents.
Targeted Ads: Paid advertising campaigns for fake high-yield investment products.
Social Urgency: Hacking friends' accounts to ask for immediate financial help under the pretext of an accident or loss of a wallet.
THÉSÉE Platform
Harmonized Processing of Investigations and Reports for E-scams
Launched by the Ministry of the Interior, Thésée allows victims of e-scams to file a complaint or report fraud directly online, without having to go to a police station. A major success that facilitates the judicial follow-up of international cases.
What you can report:
- • Email hacking
- • Online blackmail (extortion)
- • Fake sales site scams
- • Romance scams (emotional)
- • Classified ad fraud
- • Fake administrative sites
Why use it?
Save time and help investigators cross-reference data to dismantle criminal networks operating between France and Southeast Asia.
Access ThéséeReal Scenarios & Best Practices
The fake 'Bank Negara' agent
"An expat receives a call from a supposed Malaysian central bank agent informing them that their account has been used for money laundering. To 'secure' their funds, they must transfer them to a temporary deposit account provided by the agent."
Housing scam on Facebook
"While looking for housing in Malaysia, a family finds a luxury condo at half price. The owner, 'currently abroad', asks for a deposit via a money transfer service to secure the viewing."
Frequently Asked Questions
How do I know if an email really comes from the administration?
Check the email address extension (e.g., @gouv.fr or @moha.gov.my). Administrations will never ask for your passwords or bank details via email.
I clicked on a suspicious link, what should I do?
Immediately change your sensitive passwords, enable two-factor authentication (2FA), and scan your device with an up-to-date antivirus.
Can I file a complaint in Malaysia for an online scam?
Yes, you can go to a local police station or use the reporting portals of the MCMC (Malaysian Communications and Multimedia Commission).
What is 'vishing'?
It's 'Voice Phishing': a phone scam where the fraudster uses social engineering to extract information from you by posing as a technician or a banker.
Are cryptocurrencies safe for payments?
Caution. Many financial investment frauds use cryptocurrencies because transactions are difficult to reverse.
Where can I find the official prevention guide?
You can consult the national task force's PDF guide.
Are there recruitment scams?
Yes, they are frequent. Never pay to get an interview or for "visa processing fees" requested by an unofficial agency. Consult our Jobs in Malaysia page for more advice.
How can I protect my elderly parents from these frauds?
Education is key. Explain to them to never give codes over the phone and to install a blocker for suspicious numbers.
What is identity theft?
It's when a scammer uses your documents (passport, bill) to open accounts or take out loans in your name. Be vigilant when sending copies of documents.
How to check the reliability of a sales site?
Check the legal notices, customer reviews (often fake if too perfect), and use tools like ScamAdviser.
Stay informed, stay protected
The fight against fraud is a daily battle. Subscribe to our newsletter to receive the latest security alerts in Malaysia.