The pattern matters more than memorising scam names
Scams change their story, but the mechanics are remarkably repetitive: someone creates urgency, claims the normal official route is unavailable, offers a special shortcut, distracts you while a second person acts, or pressures you to make a financial decision before you can verify it. If a stranger's pitch becomes more complicated the longer you listen, step away and check it yourself.
Unofficial money exchange
Malaysia regulates money-changing businesses through Bank Negara Malaysia. Use a licensed Money Services Business operator and look for the displayed licence or authorised-agent certificate. Do not hand over cash to a person offering a better street rate away from an established counter.
BNM maintains a current directory of licensed money-service businesses and explains how authorised operators should identify themselves.
Count cash and understand the final exchange amount
A legitimate-looking exchange can still become an expensive transaction if you do not understand the final rate or fee. Ask for the final MYR amount before handing over money, count what you receive at the counter and keep the receipt. If the staff member repeatedly distracts you while counting or changes the agreed amount, stop the transaction.
Transport pressure at airports and busy attractions
Be wary of anyone insisting that the normal train, taxi queue, ticket counter or booked-ride system is closed and that you must use their alternative. Verify closures through official signs, staffed counters or the transport operator. App-booked rides are useful because the driver, vehicle and trip are recorded; for taxis, use the normal regulated process rather than accepting an unsolicited private-car offer.
Ticket 'helpers' and fake scarcity
At popular attractions, a seller may claim tickets are sold out everywhere except through them, or that a special fast-track product is mandatory. Check the attraction's official website or ticket counter before paying a third party. Real sell-outs do happen; the red flag is the insistence that you cannot independently verify the claim.
Distraction and bag-opening attempts
In crowded areas, one person may create a distraction while another reaches for a bag or phone. Keep zipped bags in front of you on packed trains and escalators, and do not put your phone loosely on a table beside a busy walkway. If someone spills something on you or urgently points out a supposed problem with your clothes or bag, secure your valuables first.
Card and ATM traps
Use ATMs attached to banks or established commercial premises where possible. Shield your PIN, inspect the machine if anything looks loose or added, and do not accept help from a stranger who approaches while you are having trouble. If a card is retained, contact the bank through an official channel rather than a number handed to you by a bystander.
At payment terminals and ATMs, read currency-conversion prompts carefully. A transaction shown in your home currency can feel reassuring while hiding an unattractive conversion rate. Compare the options rather than pressing the brightest button automatically.
Never provide an OTP, TAC, PIN or password simply because a QR-linked page asks for it. If somebody claims they are paying you but tells you to scan their code, enter banking credentials or pay a fee to receive the money, stop. See our 3 September 2026 QR-code scam warning for the latest police figures and practical checks.
Malaysia has recorded a sharp rise in QR-code scams in 2026. Police warn that fake codes can hide phishing pages, redirect payments or prompt victims to enter banking credentials, approve transactions or install malicious apps. When paying by QR, use your normal banking/payment app and verify the recipient name and amount before approving anything.
QR-code and payment scams
Gambling, investment and 'easy money' stories
Walk away from strangers who quickly steer a friendly conversation toward gambling, an investment opportunity, a guaranteed bargain or a request to demonstrate how much cash you have. You do not need to decide whether the story is a known scam. The combination of a new acquaintance, money and urgency is enough reason to disengage.
Overpriced tourist experiences are not always scams
Some tourist traps are simply poor value rather than fraud: a mediocre restaurant on the busiest strip, a souvenir sold for several times the neighbourhood price, or a tour that spends more time in commission-paying shops than at the advertised sights. Read the inclusions, compare nearby options and decide whether convenience is worth the premium.
What to do when a situation feels wrong
- Stop the transaction before more money changes hands.
- Move to a staffed, public place.
- Verify through the official operator, bank, attraction or government source.
- Freeze a compromised card immediately.
- For a genuine emergency, Malaysia's government emergency number is 999.
Official emergency reference: Malaysia Government — MERS 999.
The 30-second rule
If someone says you must decide immediately, give yourself 30 seconds anyway. Open the official website, ask a uniformed staff member, check the price board, or simply walk away. Genuine transport, attractions, banks and government services do not depend on a random stranger preventing you from verifying basic facts.
When the official route is available, use it. Licensed money changers, official ticketing, recorded transport and bank-owned channels remove most of the opportunities a scammer needs.