Malaysians fell victim to online scams that cost them RM2.97 billion in 2025, nearly double the RM1.57 billion in losses recorded just a year earlier, according to data released by the Home Ministry. The alarming escalation underscores the accelerating sophistication and reach of digital criminal networks across the country. For the first five months of 2026, losses have already climbed to RM830 million, suggesting the problem continues unabated despite enhanced detection and prevention efforts.
The breakdown of fraud types reveals a clear pattern in criminal targeting. Investment-related scams emerged as the primary culprit, ballooning from RM848.62 million in 2024 to RM1.46 billion in 2025—accounting for nearly half of all online fraud losses. This category encompasses schemes promising unrealistic returns on cryptocurrency, forex, stocks, and other financial instruments, often leveraging deepfake technology and fabricated celebrity endorsements to build credibility with victims. The rapid growth in this category suggests criminals are refining their ability to manipulate victims' aspirations for quick wealth.
Telecommunications fraud constituted the second-largest category, with losses escalating from RM497.12 million in 2024 to RM802.47 million in 2025. These scams typically involve impersonation of authority figures, financial institutions, or delivery services, using sophisticated spoofing techniques and social engineering to trick victims into revealing personal information or transferring funds. Meanwhile, romance-based schemes, though smaller in monetary terms at RM47.44 million in 2025, remain particularly insidious because they exploit emotional vulnerability and can span months before financial requests materialise.
Geographical analysis reveals that developed urban centres with dense populations and higher disposable incomes bear the brunt of these crimes. Selangor recorded the highest losses, jumping dramatically from RM446.16 million in 2024 to RM986.79 million in 2025, more than doubling within a single year. Kuala Lumpur similarly saw a significant increase from RM293.30 million to RM782.86 million over the same period. These two jurisdictions alone accounted for roughly 60% of national losses in 2025, reflecting both the concentration of wealth and the prevalence of digital banking adoption in these regions.
Beyond the capital region, economically developed states are experiencing troubling increases. Johor, Penang, and Perak all registered substantial year-on-year growth between 2024 and 2025, indicating that scamming networks are successfully expanding their reach across major commercial hubs. Even East Malaysia has not escaped this trend—Sabah and Sarawak combined recorded losses exceeding RM110 million in 2025, representing a significant rise and suggesting that rural and remote areas lack sufficient awareness or protection mechanisms to counter these crimes.
The National Scam Response Centre, established in 2022 to provide round-the-clock monitoring and intervention, has frozen funds and implemented transaction restrictions to limit losses. Since its inception, the centre has successfully seized RM32.49 million in illicit proceeds and returned RM10.9 million to affected victims. However, these recovery figures highlight the scale of the challenge: even at maximum efficiency, the centre recovers only a fraction of stolen funds, leaving most victims with permanent losses.
Recovery rates have improved substantially in recent months, offering a glimmer of hope. Between 2022 and 2025, authorities seized RM25.2 million with a 29 per cent recovery rate of RM7.3 million. In contrast, the January to May 2026 period shows accelerated performance: of RM7.25 million seized, RM3.57 million—approximately 49 per cent—was successfully returned to victims. This near-doubling of the recovery percentage suggests that faster intervention protocols and improved inter-agency coordination are yielding tangible results, though the absolute numbers remain modest relative to total losses.
The improvement in recovery rates indicates that the Home Ministry's emphasis on strengthening NSRC operations is producing measurable outcomes. Swift account freezing and rapid coordination with financial institutions have created narrower windows for criminals to move stolen money offshore or through layered transactions. The ministry characterises these gains as evidence that public confidence in recovery mechanisms is justifiably growing, particularly as word-of-mouth success stories circulate among victims and their families.
However, the underlying trend of escalating losses suggests that preventive education and enforcement remain inadequate to match the rate at which criminal tactics evolve. Investment fraud, in particular, exploits the general population's limited financial literacy and desire for passive income during economic uncertainty. The rapid proliferation of deepfake technology and AI-generated content has lowered barriers to entry for scammers, enabling even minimally skilled criminals to create convincing impersonations of trusted figures. Telecommunications fraud similarly benefits from easily spoofed phone numbers and messaging systems that most ordinary users cannot reliably verify.
For Malaysian consumers, the data underscores the critical importance of scepticism when presented with unsolicited investment opportunities, requests for personal information, or pressure to act quickly in financial matters. Verification through official channels—directly calling banks or organisations rather than using contact details provided by the supposed requester—remains the most reliable defence. Many victims report that they were aware of general scam warnings but believed themselves immune because the criminals had created an apparently legitimate facade with professional websites, official-looking documentation, and sustained personal relationships built over weeks or months.
The regional implications are significant as well. Malaysia's scam losses now rival those reported in other major Southeast Asian economies, suggesting that organised scamming operations may have established regional hubs or networks operating across borders. The increasing sophistication and scale of these operations point toward involvement of professional criminal syndicates rather than isolated fraudsters, raising questions about whether existing law enforcement structures are adequately resourced to investigate and prosecute perpetrators operating from within and outside Malaysian jurisdiction.
Moving forward, addressing this crisis will require a multi-layered approach. Continued investment in NSRC capabilities and inter-agency coordination is necessary but insufficient. Banks and digital payment platforms must implement more robust authentication and transaction monitoring systems. Educational campaigns must target vulnerable demographics with culturally appropriate messaging. Critically, law enforcement agencies need enhanced capacity to conduct cross-border investigations and extradition proceedings against perpetrators, particularly those operating from jurisdictions with weak cybercrime enforcement. Only through coordinated action across financial institutions, government agencies, and an informed public can Malaysia hope to reverse the alarming upward trajectory of online fraud losses.
