Fake Customer Service Scam — Impersonating Banks & Telcos

Scammers are impersonating customer service representatives from major Malaysian banks, telcos, and government agencies. Using caller ID spoofing technology, the incoming call displays the official hotline number of Maybank, CIMB, Digi, Celcom, or even PDRM. The caller sounds professional and follows scripts designed to extract banking credentials.

This scam type is particularly dangerous because victims believe they are speaking with a legitimate representative and willingly provide sensitive information.

The scammer calls your phone, and the caller ID displays a recognised number — for example, Maybank's 03-5891 4744 or Digi's 016-221 1800. The caller identifies themselves as a fraud prevention officer and claims suspicious activity has been detected on your account.

To "verify your identity" or "secure your account," they ask for your username, password, TAC, or OTP. In some cases, they direct you to install a remote access app like TeamViewer or AnyDesk, which gives them full control of your phone.

Another variant targets telco customers. The caller claims your phone number has been used for illegal activities and you must verify your identity or face line disconnection. They then use the information to perform a SIM swap or access your banking apps.

Can scammers make their call appear to come from my bank's real number?

Yes. Caller ID spoofing technology allows scammers to display any phone number, including official bank hotlines. Never trust the number displayed — always hang up and call back directly.

What should I do if I already gave my banking details to a caller?

Call your bank's fraud hotline immediately to freeze your account. Then call 997 (NSRC) and lodge a police report. Time is critical — act within minutes.