How this scam typically works
The approach usually starts as an unsolicited pitch: a social media ad promising extraordinary returns, a message from a stranger on WhatsApp or Telegram, or social pressure from an acquaintance who's "already making money." The pitch always centres on a return that sounds too good to check carefully against — a guaranteed monthly percentage, a "fixed" profit regardless of market conditions, or a claim that the scheme is risk-free.
Once you show interest, you're typically moved into a private Telegram or WhatsApp group. Inside, "success stories," screenshots of rising balances, and a fake trading dashboard build a sense that everyone else is already profiting. Group admins or "mentors" answer questions quickly and warmly, and small early withdrawals may even be allowed to prove the platform "works" — right before larger deposits are requested.
A separate but related pattern is the clone firm: a scam that copies the name, logo, and branding of a real, licensed brokerage or fund manager to borrow its credibility. The victim believes they're dealing with an established, regulated company, when the website, app, or contact details are entirely separate from the real firm.
The one constant across almost every version of this scam: no licensed Malaysian investment firm can promise a guaranteed or fixed high return. All legitimate investments carry risk, and any pitch that removes that risk from the conversation is, on its own, close to a definitive warning sign.
Warning signs
- A guaranteed, fixed, or "risk-free" high return is promised
- You're moved from a public ad or first contact into a private Telegram/WhatsApp group
- The group is full of profit screenshots and pressure to deposit more, faster
- The firm's name closely resembles a real, well-known brokerage, but the contact channel is unofficial (a personal WhatsApp number, a Telegram handle, an app outside official app stores)
- Withdrawals become slow, blocked, or suddenly require an extra payment to "unlock" or "release" your funds
If you're being targeted right now
Stop before you transfer or top up anything further. Do not rely on the group chat, the "dashboard" balance, or anyone inside the group to confirm the firm is genuine — these are all things a scam operation fully controls. Instead, verify the firm independently using official sources, not a link or contact the group gives you.
Malaysia draws a firm line between three different checks, and mixing them up is exactly what these scams rely on:
- SSM (Companies Commission of Malaysia) confirms a company is registered — it does not confirm the company is licensed to take investment money from the public.
- BNM's and the Securities Commission's own licensed-entity registers confirm whether an entity is actually licensed to carry out the specific investment activity in question.
- BNM's Financial Consumer Alert List and the Securities Commission's Investor Alert List are warning lists of entities already flagged as suspicious — but BNM has stated that an entity's absence from these lists is not confirmation that it is licensed or legitimate. A new or lesser-known scam can simply not be listed yet.
For the full step-by-step verification walkthrough, see How to verify an investment company is licensed in Malaysia.
If you've already lost money
Act quickly — the chance of freezing or recovering a transfer drops the longer money sits in the receiving account. See Scammed in Malaysia? The first 24 hours for the exact steps to take and in what order.
FAQ
The company has a real-looking website and a Companies Commission (SSM) registration number — isn't that enough?
No. SSM registration only confirms a company legally exists in Malaysia — it says nothing about whether that company is licensed to solicit investment money from the public. Registration is a low bar that scam entities can clear too. Licensing to conduct investment business is a separate check, held by regulators such as the Securities Commission or BNM depending on the activity.
The company isn't on BNM's or the SC's alert list — doesn't that mean it's safe?
No. Alert lists only contain entities that have already been flagged as suspicious based on complaints or investigations received so far. BNM has been explicit that not being on the list is not proof an entity is licensed or legitimate — a scheme can operate for a period before enough reports accumulate to get it listed.
Can a licensed Malaysian firm ever promise a fixed or guaranteed return?
No genuine licensed investment firm can guarantee a fixed return on money invested in the market — all investments carry some risk, and regulators require this to be disclosed. Any pitch that promises a guaranteed or fixed high return, with no real risk, is one of the clearest single signals of a scam.