Step 1 — Identify and Stop All Contact or Transactions

The first and most crucial step when you suspect you’ve been scammed is to immediately stop all contact or transactions with the scammer. Do not respond to calls, messages, or emails, as scammers may try to manipulate you further. If you’ve already made a payment or shared financial information, contact your bank immediately to request a transaction freeze or reversal, in line with Bank Negara Malaysia (BNM)’s advisory procedures.

You should also call the National Scam Response Centre (NSRC) at 997, a dedicated hotline that operates daily from 8 AM to 8 PM, or report the case to the Commercial Crime Investigation Department (CCID) via the CCID Infoline or Scam Response Portal. Acting quickly is critical — banks and enforcement agencies can only trace or freeze funds if action is taken soon after the scam occurs. The faster you respond, the higher the chances of recovering your money.

Step 2 — Gather and Preserve Evidence

Once you’ve secured your accounts and stopped communication with the scammer, the next step is to gather and preserve all possible evidence. Keep screenshots, chat logs, emails, bank transaction slips, phone numbers, and social media profiles connected to the scam. These records form the foundation of your police report and any potential legal or financial recovery process.

Organise your evidence chronologically — from the first contact with the scammer to the most recent transaction — to help investigators clearly trace the sequence of events. Under the Malaysian Evidence Act 1950, digital communications and electronic records are recognised as admissible evidence in court. Preserving every detail not only strengthens your claim but also increases the chances of identifying the perpetrators and recovering your losses.

Step 3 — Report the Fraud to Relevant Authorities

After gathering your evidence, you must report the scam to the proper authorities to initiate an official investigation and protect others from falling victim. In Malaysia, different agencies handle specific types of fraud:

• Royal Malaysia Police (PDRM) – Commercial Crime Investigation Department, CCID)
  Lodge a police report at the nearest station or online. The CCID investigates criminal elements of fraud, including online scams and financial deception. You can also verify suspicious bank accounts or phone numbers through the Semak Mule portal.
• Bank Negara Malaysia (BNM)
  Report cases involving unauthorised banking transactions, payment fraud, or financial institutions. BNM can coordinate with banks to trace or freeze fraudulent funds.
• Securities Commission Malaysia (SC)
  Handles investment and securities-related scams, including illegal investment schemes and unlicensed trading platforms.
• CyberSecurity Malaysia
  For online or cyber fraud, report incidents through their Cyber999 service for technical investigation and digital forensics support.

Filing a detailed police report is essential—it provides an official record for further legal or civil action, helps authorities track scam networks, and increases the likelihood of recovery or prosecution.

Step 4 — Seek Legal Assistance for Recovery or Civil Claims

Once you have reported the fraud to the authorities, you may also pursue civil legal action to recover your losses. Under Malaysian law, victims can file civil claims against the scammer or related parties for compensation or damages. One common remedy is obtaining a freezing order (Mareva injunction) to prevent the scammer from transferring or dissipating assets before judgment. If the court rules in your favour, enforcement actions such as a writ of seizure and sale can be used to recover funds or property.

Victims can also file suits for breach of contract, fraud, or misrepresentation, depending on how the scam occurred. Because fraud cases often involve complex evidence and cross-border elements, engaging an experienced fraud litigation lawyer is crucial to ensure the case is handled efficiently. Remember that under the Limitation Act 1953, most civil claims must be filed within six years from the date the cause of action arose, so acting promptly is essential.

Step 5 — Strengthen Personal and Business Cybersecurity

Prevention is the best defence against scams and fraud. After resolving a fraud incident, take proactive steps to strengthen your personal and business cybersecurity to reduce future risks. Always verify sellers, investors, or businesses through official registries such as the Companies Commission of Malaysia (SSM), Securities Commission Malaysia (SC), or Bank Negara Malaysia (BNM) before making any payment or investment.

Enable two-factor authentication (2FA) for all online banking and business accounts, and ensure payments are made only through secure, verified gateways. Avoid clicking on suspicious links, emails, or messages requesting confidential information such as passwords or OTPs. Regularly monitor your financial accounts for any unusual activity or unauthorised transactions.

Stay updated on scam prevention efforts through public awareness initiatives like BNM’s #TakNakScam campaign and CCID advisories, which provide timely alerts and educational resources to help Malaysians stay vigilant and protect their finances.

Conclusion

Taking immediate and structured action after encountering a scam — from reporting to the right authorities to pursuing legal recovery — significantly increases your chances of recovering lost funds and bringing offenders to justice. Malaysia has a strong framework of laws, enforcement agencies, and financial institutions dedicated to protecting victims of fraud and cybercrime. If you’ve been scammed, don’t remain silent or delay action. Report, document, and seek professional legal assistance as soon as possible to safeguard your rights and help prevent others from falling victim to similar schemes.

Victim of a scam or fraud? Contact Sim & Rahman team today for professional advice on recovery, reporting, and protecting your assets under Malaysian law.