Have you received an urgent email about a “suspended” bank account or a text promising prizes? You may have encountered phishing — a growing scam in Malaysia. Cybercriminals are constantly evolving their tactics, but with awareness and the right tools, you can protect yourself. Here’s what you need to know.
Phishing is a form of cybercrime where scammers disguise themselves as legitimate, trusted entities, such as banks, courier companies, or even telcos, to trick you into revealing sensitive personal information. This could include your IC number, online banking login details, or one-time TAC codes. The goal? To steal your identity, access your accounts, or drain your funds.
What makes phishing especially dangerous is that it doesn’t rely on complex technical skills. Instead, it exploits human psychology — counting on you to click on a fake link, download a malicious attachment, or respond to a convincing message.
Phishing can take many forms, often disguised as everyday communication. Here are some common tactics used by scammers:
Scammers send emails that appear to come from banks or service providers, warning of suspicious activity and urging recipients to click a link to “verify” their details. These links often lead to fake websites designed to steal sensitive information.
Example: An email saying “Your bank account has been restricted. Click here to update your information.”
Fake text messages may claim a prize has been won or a delivery has failed. These messages typically contain shortened URLs that redirect to malicious sites or install spyware on the device.
Example: “Your package could not be delivered. Please click this link to reschedule.”
Scammers may call while impersonating authorities such as the police, tax authorities, or banks. They often use fear tactics, claiming the victim’s identity has been linked to a crime, and pressure them into revealing personal or banking information.
Example: “Your IC is involved in money laundering. We need your banking details to investigate.”
Fraudsters create fake profiles mimicking brands, influencers, or public figures, often promoting giveaways, job offers, or easy loans. These are used to collect personal information or request “processing fees” from unsuspecting users.
Example: “Congratulations! You’ve won RM3,000. Just send us your IC and bank details to claim.”
Lookalike websites are created to mimic legitimate banking or telco platforms, often with subtle differences in spelling or URL structure. When users log in, their credentials are captured and used by scammers.
Example: Instead of www.celcomdigi.com, the site might be www.celcomd1g1.com
Phishing scams often follow certain patterns. Here’s how to spot one before it catches you:
If you receive a suspicious message or call:
Phishing attacks can be scary — but they can be prevented. Here’s how you can reduce your risk:
Phishing scams may be evolving, but so can your defences. A little digital awareness goes a long way. With some caution and a habit of double-checking before you click or share, you can build safer online habits and navigate the digital world with confidence. For more tips on staying safe online, visit CelcomDigi's S.A.F.E. Internet page.
By submitting this subscription request, I consent to altHR sending me marketing communication via email. I may opt out at any time. View CelcomDigi's Privacy Policy.
