How to avoid loan scams in Malaysia: a borrower's guide

Loan scams cost Malaysians hundreds of millions of ringgit every year, and they've moved from lamp-post stickers to Facebook ads, Telegram groups and very convincing WhatsApp 'loan officers'. The good news: almost every scam trips over the same few red flags.

Red flag #1: money up front

No licensed lender in Malaysia asks you to pay a 'processing deposit', 'insurance fee' or 'account activation charge' before releasing your loan. This is the classic advance-fee scam: you pay RM500 to 'unlock' a RM50,000 loan, then another fee, then another — and the loan never comes. A legitimate lender deducts any fees from the disbursed amount, stated clearly in your agreement.

Red flag #2: WhatsApp-only 'approval'

Scammers approve you instantly over chat, with no document checks, no CCRIS or CTOS enquiry, and often a stolen logo from a real bank or fintech. Real lenders verify your identity (MyKad e-KYC), assess your income, and give you a formal agreement to sign. If approval feels too easy, it isn't approval — it's bait.

Red flag #3: rates too good to be true

Adverts promising '0.5% monthly, no checks, blacklist welcome' are targeting desperation. Compare that with the legal market: licensed moneylenders under the Moneylenders Act 1951 and banks price personal loans in a regulated range. If an offer beats every bank in the country while asking zero questions, walk away.

How to verify a lender in two minutes

• Licensed moneylender? Check the KPKT (Ministry of Local Government Development) online registry for the company name and licence number.
• Bank or fintech partner? Look them up on Bank Negara Malaysia's Financial Consumer Alert list — if they're on it, run.
• Check the company number (SSM registration) and search it on SSM's website.
• Call the official number from the company's website — never the one in the ad.

Anatomy of a WhatsApp loan scam, message by message

Almost every victim describes the same five-message arc. Message one: an ad or forward promising 'RM50,000, 1% interest, blacklist OK'. Message two: a friendly 'officer' sends a form asking for your MyKad photo and bank details — no income documents, because they don't care. Message three: instant approval, often with a fake bank letter bearing a real bank's logo. Message four: the trap — a 'takaful fee', 'processing deposit' or 'account activation' of RM300–RM2,000 must be paid before release. Message five: either they vanish, or worse, they claim the transfer 'failed' and ask for a second, larger fee. Recognise the arc and you can walk away at message one.

Licensed lender vs Ah Long: the tells

• Licence: a licensed lender displays a KPKT licence number you can verify online; an Ah Long has none, or shows a number that matches nothing.
• Premises: licensed lenders have a registered office address; scammers exist only inside WhatsApp and Telegram.
• Paperwork: legal loans come with a written agreement and stamp duty; Ah Long 'agreements' are verbal, or they hold your MyKad as 'collateral' — which is illegal.
• Rates: the legal market prices personal loans in single to low-double digits per annum; Ah Long rates run 10–20% per month, designed to be unpayable.
• Disbursement: legitimate funds arrive in YOUR bank account; scammers ask you to pay THEM first. Money never flows toward the lender before disbursement.

What a legitimate application actually feels like

For contrast: a real lender starts with a soft eligibility check that doesn't touch your CCRIS or CTOS. You verify identity through e-KYC — a live selfie matched against your MyKad, not a photo sent over chat. You'll be asked for income proof, because affordability assessment is a legal obligation. You receive a full agreement to read before signing, with every fee listed. And disbursement lands in your own bank account via DuitNow — never a third party's, and never after you've paid something first. Anything that deviates from this pattern deserves suspicion.

If you've been scammed

Act fast: call the National Scam Response Centre at 997 within 24 hours if money left your account, lodge a police report, and report the account to your bank. Speed matters — funds are often mule-hopped within hours.

Prime Credit will never ask for upfront payment, and our team only contacts you from official channels. When in doubt, hang up and reach us through the website.