How to Spot and Avoid Investment Scams in Malaysia (Skim Cepat Kaya and Beyond)

Investment scams cost Malaysians RM1.47 billion across 9,603 cases in 2025, up from RM848.6 million in 2024, according to data reported to Parliament in mid-2026. That figure does not include losses never reported to police, which fraud researchers estimate push the true total considerably higher. Understanding how these schemes work, and knowing exactly which tools to use before you transfer a single ringgit, is the most direct protection available.

For broader context on managing your money in Malaysia, see this topic and our guide on where to start investing in Malaysia.

---

Why investment scams are so effective in Malaysia

Scammers exploit two things: the real desire for better financial returns, and information gaps about what legitimate investments actually look like. They spread primarily through Telegram, WhatsApp, Facebook, and Instagram, where compliance enforcement is weak and fake testimonials spread rapidly.

The phrase “skim cepat kaya” (get-rich-quick scheme) is the local shorthand, but modern scams have evolved well beyond obvious pyramids. They now mimic regulated brokers, licensed fund managers, and even household-name banks through a technique called cloning: a scam platform takes the logo, regulatory licence number, and website design of a real, SC-licensed entity and uses it to appear legitimate.

---

The SC Investor Alert List: your first and most important check

The Securities Commission Malaysia (SC) maintains two public tools every Malaysian investor should bookmark.

1. The Investor Alert List (sc.com.my/investor-alert-list) lists unauthorised websites, companies, and individuals that are operating without a capital markets services licence. The SC updates it continuously: as of mid-2026, recent additions include names such as SFI Trading, Shark Invests (a clone impersonating OCBC Bank Investments), Everwise/EVERWISETRD, WLD Trading Investment, and Fengda Wealth, among dozens of others.

2. The SC Investment Checker (sc.com.my/investment-checker) lets you type in a company or individual name and verify instantly whether they hold a valid licence to offer, promote, or sell capital market products in Malaysia.

The Bank Negara Malaysia (BNM) runs a parallel Financial Consumer Alert List (bnm.gov.my/financial-consumer-alert-list) covering unauthorised deposit-taking, money-lending, insurance, and forex operators outside the SC’s scope.

Rule of thumb: check both lists before investing. If the entity does not appear on either licensed register, do not proceed.

---

Red flags that signal a scam

Red flag	Why it matters
Guaranteed high returns (e.g., “10% per month”, “double in 30 days”)	No legitimate investment can guarantee returns; capital markets involve risk
Recruited through a social media stranger or anonymous group	Scammers seed Telegram and WhatsApp groups with fake success stories
Asks you to deposit into a personal bank account	Licensed firms receive funds into company accounts with clear receipts
Urgency pressure (“slots closing tonight”)	Manufactured scarcity prevents you from doing due diligence
Cannot verify the entity on SC or BNM registers	The most reliable single signal of fraud
”VIP trading signals” or managed trading with a stranger	Unsolicited trading management is almost always a scam vehicle
Website or app with no physical address, no local phone number	Clone sites often copy logos but cannot copy physical presence
Withdrawal requests met with excuses or extra “tax” fees	Recovery scam layered on top: a second round of theft from the same victim

---

The five most common scam types in Malaysia right now

1. Investment clone scams

Fraudsters replicate the branding of a real SC-licensed broker or bank, right down to the licence number. They build a convincing-looking portal or mobile app. The SC’s April 2026 alert bulletin listed multiple active clones impersonating licensed entities. Always verify the URL independently and cross-check the licence number directly on sc.com.my/investment-checker.

2. Forex and crypto trading groups

A recruiter adds you to a WhatsApp or Telegram group filled with fabricated profit screenshots. You invest a small amount, see a “profit” on a fake dashboard, are encouraged to put in more, and eventually find you cannot withdraw.

3. Ponzi and pyramid schemes

Early participants genuinely receive payouts, funded by new entrants. Returns are impossible to sustain once recruitment slows. Malaysia’s Penal Code (Section 420) and Capital Markets and Services Act 2007 both cover these, but prosecutions often come years after the money has been moved offshore.

4. Gold and commodity investment fraud

Schemes offering gold, palm oil, or commodity-linked returns with a “guaranteed buyback” at a premium. These often operate briefly before disappearing.

5. Romance investment scams (pig butchering)

A long online relationship culminates in an “investment tip” from the new contact. Victims move large sums before realising the relationship was engineered. These cases carry some of the largest average losses per victim.

---

How to verify an investment in five minutes

1. Google the company name plus “SC Malaysia” or “BNM” to find any public alerts or news coverage.
2. Search the SC Investor Alert List at sc.com.my/investor-alert-list.
3. Run the SC Investment Checker at sc.com.my/investment-checker.
4. Check the BNM Financial Consumer Alert List for unlicensed deposit takers.
5. Look up the SC’s licensed intermediaries register to confirm the entity holds the correct licence category for what it is offering.

This takes under five minutes and eliminates the vast majority of scams.

---

If you have already been scammed: recovery steps

Speed matters. Here is the sequence to follow.

Step 1: Stop all further transfers immediately. Do not send more money for any reason, including to “pay tax to unlock your withdrawal” or to “reimburse processing fees.” These are recovery scam layers.

Step 2: Call your bank within the hour. Request an immediate transaction hold. Banks connected to the National Scam Response Centre (NSRC) can freeze receiving accounts quickly. The NSRC hotline is 997 (operated 24 hours a day). In 2025, total scam losses recorded by NSRC reached RM542 million, but only RM34 million was recovered, underscoring that early reporting dramatically affects outcomes.

Step 3: Lodge a police report. File a report at your nearest police station or via the PDRM online reporting portal. Request a copy of the report number for all subsequent follow-ups.

Step 4: Report to the SC. Email [email protected] or call +603 6204 8999. The SC can act quickly on unlicensed entities, including applying for asset freezes through the courts.

Step 5: Contact AKPK if financial distress follows. Agensi Kaunseling dan Pengurusan Kredit (AKPK) provides free financial counselling and can help you restructure debt if you borrowed money to invest. Their hotline is 1800-88-2575.

Step 6: Keep all evidence. Preserve screenshots of conversations, transfer receipts, website URLs, and any promotional materials. Do not delete them, even if the platform has already gone offline.

---

What the law says

The Capital Markets and Services Act 2007 (CMSA) makes it a criminal offence to carry on a capital markets business without an SC licence. Penalties include fines up to RM10 million and imprisonment up to ten years. The Penal Code Section 420 (cheating) and the Communications and Multimedia Act 1998 provide additional prosecution avenues. Amendments to the Penal Code that came into force in 2024 specifically addressed online financial crime, though Parliament was told in 2026 that most of the RM542 million lost in the first half of 2025 remains unrecovered despite these provisions.

---

Key takeaways

• Malaysians lost RM1.47 billion to investment fraud in 2025, across 9,603 reported cases.
• Always verify any investment entity on the SC Investor Alert List and the SC Investment Checker before transferring money.
• Bank Negara’s Financial Consumer Alert List covers sectors outside the SC’s scope (unlicensed forex, deposit-taking, insurance).
• Guaranteed returns, social media recruitment, and payments into personal accounts are the three clearest red flags.
• If scammed, call your bank immediately and the NSRC on 997: early reporting is the only realistic path to fund recovery.
• AKPK offers free counselling if you took on debt to invest and are now struggling.

---

Frequently asked questions

How do I check if an investment company is licensed in Malaysia?

Use the SC Investment Checker at sc.com.my/investment-checker to search by company or individual name. For non-capital-market entities such as unlicensed moneylenders or deposit takers, use the BNM Financial Consumer Alert List at bnm.gov.my/financial-consumer-alert-list. Checking both takes under two minutes.

What should I do if I think I am being approached by a scammer?

Stop all communication, do not transfer any money, and report the entity to the SC at [email protected] or +603 6204 8999. You can also report to PDRM via the CyberCrime portal. The SC regularly updates the Investor Alert List based on public reports.

Can I get my money back after an investment scam?

Recovery is difficult and time-sensitive. Banks can sometimes freeze receiving accounts if contacted within hours. The NSRC (hotline: 997) coordinates cross-bank freezes. In 2025, only about RM34 million of RM542 million in total scam losses reported to NSRC was recovered. Legal civil action is possible but expensive and slow when perpetrators are offshore.

Is the SC Investor Alert List comprehensive?

It covers entities flagged through complaints, monitoring, or enforcement. Absence from the list is not a green light: always confirm positive licensing via the Investment Checker rather than relying solely on absence from the alert list.

What is the difference between the SC and BNM when it comes to investment scams?

The SC regulates capital markets: stocks, bonds, unit trusts, derivatives, and related intermediaries. BNM regulates banking, insurance, takaful, and money services. Many scams blend both (e.g., fake forex brokers that also take deposits). When in doubt, report to both bodies.