KUALA LUMPUR, June 17 — With internet commerce becoming a prevalent method for Malaysians to purchase daily items, fraudsters are discovering innovative methods to take advantage of shopper behaviors and susceptibilities.
Currently raising alarms are COD scams and phishing efforts associated with bogus package alerts.
At a recent seminar organized by Ninja Van Malaysia, their chief sales officer Fariz Maswan mentioned thatCOD scams saw an uptick of five percent during the initial three months of this year. This rise can be attributed partly to Malaysia’s extensive internet usage and increasing dependence on online shopping.
Quoting statistics from the Bukit Aman Commercial Crime Investigation Department (JSJK), he mentioned that fraud-related monetary losses in Malaysia have amounted to around RM9 billion within the last ten years.
He mentioned that typically, approximately 1,000 scam reports surface each week, with fraudsters continuously refining their strategies to trick people.
COD scams
A cash-on-delivery (COD) scam is a form of deception related to packages that seem genuine—but are actually part of a plot designed to deceive recipients into paying for items they did not mean to purchase.
These cons typically occur through one of two methods:
- Unexpected packages — Recipients get deliveries they did not request, possibly thinking these were bought for another family member at home. Taken by surprise, they end up paying the delivery person without raising doubts.
- Fraudulent shipments -- Individuals make an online purchase, yet what they receive differs entirely from their ordered item or is of significantly lower value. As an illustration, inside the delivered package could be nothing more than a pack of instant noodles rather than the expected merchandise.
Fariz mentioned that numerous individuals come to realize they've fallen victim to scams only after making the payment and once the courier has departed.
He mentioned that delivery staff are not part of these fraud schemes because their job is just to drop off packages and handle payments—they neither look inside the items nor take responsibility for checking where the shipments come from.
Frequently, the individuals involved in such scams operate from foreign countries. They pretend to be vendors on sites similar to Lazada or Shopee, employing bogus advertisements to gather personal information and dispatch counterfeit packages.
Moreover, in numerous instances, these transactions do not genuinely occur on the recognized platforms.
Rather than being scammed directly, victims are attracted through advertisements on social media platforms to make purchases via outside websites or communication tools such as WhatsApp—thus, they won’t have the security of any return or reimbursement policies.
'Phantom' drop-offs and SMS scams
Fariz also pointed out the increase in what are known as "phantom scams" — instances where people are deceived into paying for goods or services that either do not exist at all or are never actually provided.
He mentioned that phishing scams, wherein individuals are deceived into disclosing confidential data via bogus text messages, are increasingly prevalent.
He mentioned that in a recent incident, fraudsters pretended to be Ninja Van by dispatching counterfeit package alerts through text messages.
The messages contained a payment link which directed to an imitation site crafted for the purpose of obtaining banking details illicitly.
"Our information security team conducted an investigation and tracked down the source of the breach to a foreign IP address. It was discovered that scammers were mimicking our brand and aiming at the general public," he stated.
"We weren’t alone; numerous other courier services faced similar issues during the same timeframe," he mentioned additionally.
Various other delivery services have also put out comparable alerts.
Based on details shared on Pos Malaysia’s site, fraudulent messages typically feature condensed URLs that lead to deceitful websites or encourage recipients to download harmful APKs.
It was mentioned that typical warning signs include:
- Handling inquiries regarding banned articles.
- Allegations of dedicated hotlines linking to the police or Customs.
- Requests for payments to individual or third-party bank accounts.
- Text messages requesting personal information through unknown delivery service links.
How to stay protected
During the Ninja Van seminar, Raymon Ram, who founded and leads Graymatter Forensic Advisory, stated that contemporary scams have grown considerably more advanced.
He mentioned that contrary to previous cons, which frequently contained misspellings and bad grammar, contemporary scams now boast professional designs, genuine-looking logos, and refined language — thereby making them much more difficult to spot.
Because of this heightened complexity, he advised the public to halt and confirm details before reacting to any investment opportunities or requests for transferring funds.
"Verify if the company has a valid license and is genuine. Pose simple queries such as 'Why are they offering exceptionally high returns?'" he mentioned.
"Scammers are not restricted to emails anymore. They often target victims via WhatsApp and other messaging apps as well. Hence, remain vigilant," he cautioned.
Deputy Chief Superintendent Yap Huat Tian, who serves as the second-in-command of the Selangor police’s Commercial Crime Investigation Department ( Intelligence/Operations ), echoed comparable worries about handling unexpected communications from people purporting to be representatives of official organizations.
He encouraged people not to take such statements at face value; instead, they should confirm the details by reaching out to the organization personally.
"Always confirm by reaching out to the organization directly. Do not depend only on phone calls, emails, or texts. Being careful is preferable to becoming a victim of fraud," he stated.
What initially appears innocent frequently results in serious legal repercussions.
Actions to Take If You Fall Victim to a Scam
Yap stated that individuals who become victims of scams ought to promptly inform the National Scam Response Centre (NSRC). This centre is essential for orchestrating actions aimed at stopping unauthorized transactions and reducing monetary loss.
He mentioned that upon reporting a scam, the NSRC collaborates with pertinent financial organizations to halt dubious transactions and stop additional unauthorized actions.
Nevertheless, he mentioned that the NSRC functions solely between 8 AM and 8 PM.
“Therefore, if feasible, steer clear of conducting transactions after dark, particularly ones with substantial amounts,” he stated.
Once you report it, the NSRC will be able to work with Bank Negara to halt the transaction and stop additional losses.
"The quicker you take action, the higher your probability of reclaiming your funds. The moment you detect an issue, respond without delay," he emphasized.
Individuals can contact the NSRC by calling 997, which functions as the country’s emergency number for lodging complaints about scams.