Online scams are draining Malaysia’s economy, with RM5.62 billion lost, highlighting weak recovery systems and urgent need for stronger digital safeguards.
ONLINE scams have shifted from an occasional consumer risk to a structural drain on Malaysia’s households, businesses and confidence in the digital economy.
Police have said that around 90% of commercial crime is now online, with non-existent investment schemes a major contributor to losses. The scale is no longer anecdotal.
In a parliamentary written reply reported in January, the Home Ministry indicated that Malaysia suffered RM2.77 billion in losses from financial scams in 2025 while total losses linked to online and financial fraud across 2023 to 2025 were RM5.62 billion.
This is not only a crime story but also a competitiveness issue as it erodes trust in online transactions, discourages digital adoption and diverts savings away from productive use. What makes the situation more serious is not only the scale of losses but the weakness of recovery outcomes.
Another parliamentary briefing reported that only a small fraction of certain scam-related losses could be “saved” and separate official updates reported RM34 million recovered in 2025, with RM6.7 million returned to victims, even after significant operational improvements.
The exact figures vary by category and reporting channel but the overall direction is consistent: Malaysia is improving its response mechanisms, yet recovery remains low relative to the scale of harm.
When a problem repeatedly produces outcomes like this, it is no longer accurate to describe it simply as a matter of people needing to be more careful. Public education matters but it does not explain why scams continue to scale even as awareness has increased.
The more precise framing is that Malaysia faces a scam supply chain that exploits frictionless digital systems, while current countermeasures still leave too many weak links. A critical response, therefore, must focus on the design of the ecosystem, not only the behaviour of individual victims.
Treat the first hour as critical infrastructure
Most scam losses become irreversible because responses are slow, fragmented and inconsistent across institutions. Victims are often forced to navigate multiple steps, including contacting the bank, making a police report and reaching the National Scam Response Centre (NSRC). Government agencies have been expanding response capacity and officials have highlighted that increased NSRC operations have improved outcomes compared to earlier years.
However, “more capacity” is not the same as “system reliability”. For a response to work at scale, it needs service-level standards similar to emergency infrastructure. The public should not need to guess which hotline matters, what information to provide or which institution should act first. The system should aim for rapid freezes, faster tracing and fewer handoffs.
Malaysia has already built parts of the machinery. Bank Negara Malaysia and PayNet launched the National Fraud Portal, designed to improve coordination, scam reporting and the speed of tracing stolen funds. The Finance Ministry has also referenced protective measures such as “kill switch” mechanisms that allow users to freeze accounts when suspicious activity occurs.
The next step is to convert these initiatives into an accountable operating model with published targets, such as time-to-freeze, time-to-contact and time-to-trace. Without these targets, improvements will remain invisible and enforcement reactive.
Disrupt mule accounts as an industry, not as isolated offenders
Many scams succeed because stolen funds can be rapidly moved through mule accounts – bank accounts used to receive or transfer illicit proceeds, often opened by individuals recruited through cash offers or coercion.
The problem lies not only in criminal intent but also in how easily mule accounts are recruited, activated and reused.
Although new legal provisions have been introduced to curb mule account abuse, yet recoveries remain limited relative to losses. That gap signals that Malaysia needs a stronger operational focus on mule-account prevention and containment.
Banks already conduct risk controls but the scam environment is industrialised and controls must operate at a comparable speed. This is where system design matters more than slogans.
Malaysia needs to make mule accounts costly to operate by improving early detection, strengthening account-opening controls for high-risk profiles and tightening real-time monitoring of suspicious inbound transfers.
The National Fraud Portal provides an architecture for faster information-sharing across institutions but the ecosystem also needs aligned incentives.
The central weakness in many scam economies is that the cost of failure is often externalised onto victims. When losses fall primarily on victims, some institutions have limited commercial incentive to go beyond baseline compliance.
Bank Negara Malaysia’s policy direction on ensuring fair treatment for victims of unauthorised digital banking transactions signals that this burden-sharing conversation is already underway. A credible scam response system must continue moving towards greater transparency and accountability, consistent victim handling and stronger operational consequences for preventable failures.
Assign platform and telco accountability
Scams are not merely banking problems. They depend on distribution channels, including social media advertising, messaging apps, spoofed calls and convincing digital interfaces. Police have highlighted that non-existent investment schemes are the most significant contributor to certain losses, indicating that scams are not only about theft but also about persuasion and reach.
A system that only focuses on downstream money movement is reacting too late. Malaysia needs stronger upstream controls to reduce scam risk and improve traceability. This includes tighter advertiser verification, faster takedown protocols for fraudulent campaigns and stronger controls on call and SMS spoofing. It also includes more precise requirements for marketplaces and platforms that host high-risk financial promotions.
This is not a call for blanket censorship but for practical, scalable accountability, in the same way financial institutions are expected to manage fraud risks within their own systems.
The Digital Ministry has signalled a stronger policy and capability focus on combatting online scams, including guidance and training initiatives, which indicate that the government recognises the need to move beyond ad hoc warnings.
Scam response system should be judged by outcomes, not announcements
Malaysia will not solve this problem through scattered campaigns and periodic crackdowns alone. The scam economy adapts faster than public messaging cycles and it exploits predictable gaps. The response has to more measurable, integrated and performance-driven.
A practical improvement would be a quarterly public scoreboard that consolidates key metrics across agencies and financial institutions, such as total reported losses, funds intercepted, funds returned, average time-to-freeze, mule-account interdictions and platform takedown performance.
The goal is not public shaming but for continuous improvement through transparency because a system that cannot measure its response cannot optimise it. If Malaysia intends to grow its digital economy, raise productivity and build credible consumer confidence, scam prevention must be treated like shared national infrastructure.
The country has already laid essential building blocks, such as the National Fraud Portal and stronger victim protection policies. The next leap requires consistent standards, aligned incentives and accountability across the complete supply chain.
Galvin Lee Kuan Sian is a PhD researcher in marketing at the Asia-Europe Institute, Universiti Malaya and a marketing and economics lecturer as well as business programme coordinator at a private college in Malaysia.
Comments: letters@thesundaily.com
