Malaysia's war against online fraud faces a mounting challenge as scam losses have accelerated dramatically over the past three years. According to data released by the Home Ministry (KDN) in response to parliamentary questions, the financial damage inflicted by cyber criminals has nearly doubled from RM1.57 billion in 2024 to RM2.97 billion in 2025, with the first five months of this year already reaching RM830 million. This alarming trajectory underscores the evolving sophistication of criminal networks operating across digital platforms and the corresponding vulnerability of Malaysian consumers despite heightened awareness campaigns.
Non-existent investment schemes have emerged as the dominant threat, consistently claiming the largest share of fraud losses across all measured periods. These schemes, which lure victims with promises of extraordinary returns on dubious investment vehicles, surged from RM848.62 million in 2024 to RM1.46 billion in 2025—a jump of over 70 percent in just one year. The early 2026 figures of RM361.63 million suggest the pattern shows no signs of abating. Such schemes exploit fundamental human desires for wealth accumulation and financial security, making them particularly effective in markets where investment literacy remains inconsistent among the general population. Victims often include retirees, small business owners, and young professionals seeking alternative income sources, many of whom lose their life savings to these elaborate deceptions.
Telecommunications fraud ranks as the second-most costly category, though the gap between the two crime types is substantial. Losses from telecom-related scams climbed from RM497.12 million in 2024 to RM802.47 million in 2025, before reaching RM235.63 million by May 2026. These schemes typically involve fraudsters impersonating telecommunications company representatives or creating fake platforms to collect payment information. The persistence of this fraud category reflects both the accessibility of telecommunications channels and the trust inherently placed in telecom companies, which criminals exploit through spoofing and impersonation techniques. By contrast, romance or love scams—while deeply traumatic for individual victims—rank third with significantly lower financial impact, recording RM45.87 million in 2024, RM47.44 million in 2025, and RM17.76 million in early 2026, suggesting either increased awareness or shifting victim demographics.
Geographically, the distribution of fraud losses reveals patterns aligned with economic development and digital penetration. Selangor and Kuala Lumpur continue to experience the highest absolute losses, a reflection of their status as Malaysia's commercial and financial hubs. Selangor's fraud losses skyrocketed from RM446.16 million in 2024 to RM986.79 million in 2025, while Kuala Lumpur recorded a similar trajectory from RM293.30 million to RM782.86 million. These figures suggest that greater wealth concentration and higher rates of digital financial engagement in these urban centres create larger target populations and potentially greater sums per victim. However, the trend is not confined to Klang Valley; economically significant states including Johor, Penang, and Perak have registered substantial year-on-year increases between 2024 and 2025, indicating that criminal operations are casting wider nets across Malaysia's commercial landscape.
East Malaysian states, traditionally considered more insulated from such crimes, have not escaped the upward trend. Both Sabah and Sarawak recorded losses exceeding RM110 million in 2025, demonstrating that online fraud operates across geographical and socioeconomic boundaries. This geographic expansion may reflect improved internet infrastructure reaching rural and semi-urban areas, increased smartphone penetration, and digital payment adoption across regions previously reliant on traditional banking. The data suggests that as Malaysia's digital economy deepens, so too does the exposure of ordinary citizens to cybercriminal networks, regardless of location.
Responding to these alarming trends, the Home Ministry has emphasised its commitment to combating online crimes through the National Scam Response Centre (NSRC), a facility established in 2022 that operates continuously around the clock. The NSRC's primary mechanism involves rapid identification and freezing of fraudulent accounts and imposing transaction restrictions to prevent further fund dissipation. Since its inception, the centre has seized RM32.49 million in funds belonging to fraud victims, with RM10.9 million of that amount successfully restored to affected individuals. These figures represent critical progress in an area where recovery rates have historically been disappointing.
The recovery rate improvements demonstrate the increasing effectiveness of the NSRC's operational model. Between 2022 and 2025, authorities seized RM25.2 million from fraud accounts, successfully returning RM7.3 million or approximately 29 percent to victims. However, more recent data from January through May 2026 shows marked improvement, with RM7.25 million seized and RM3.57 million—representing 49 percent of seized funds—returned to victims. This near-doubling of the recovery success rate within a single year suggests that institutional processes are maturing and that coordination between financial institutions, law enforcement, and the NSRC is becoming more effective. The ministry's claim that this trend demonstrates growing public confidence in the NSRC's capabilities appears justified by the statistics.
Yet the numbers also reveal a critical limitation: even with improved recovery mechanisms, fewer than half of seized funds make their way back to victims. The gap between seizure and recovery points to continued challenges in asset tracing, legal proceedings, and international coordination where funds have been transferred across borders. For Malaysian victims, the prospect of recovering even 49 percent of losses remains significantly better than the historical baseline, yet still leaves the majority of their money unrecovered. This gap underscores the need for continuous enhancement of recovery protocols and suggests that prevention remains paramount given the limited success of post-facto intervention.
The dramatic escalation in fraud losses carries profound implications for Malaysia's digital economy and financial security landscape. As e-commerce, digital payments, and online investment platforms become increasingly central to Malaysian commerce and personal finance, the criminal infrastructure targeting these systems has become correspondingly sophisticated and well-funded. The fact that losses nearly doubled within a single year suggests that existing detection and prevention mechanisms are being outpaced by criminal innovation. Financial institutions, telecommunications companies, and digital platforms must invest substantially in authentication technologies, fraud detection algorithms, and user education initiatives to reverse this trend.
Beyond the statistical aggregate, individual victims face devastating consequences that extend far beyond the immediate financial loss. Savings accumulated over decades vanish in moments, retirement plans collapse, and family relationships fracture under the weight of shame and financial hardship. The psychological toll of becoming a scam victim often results in depression, anxiety, and diminished trust in financial institutions. These personal traumas are invisible in official statistics but represent the true cost of the nation's evolving cybercrime crisis. Government agencies and private institutions must balance their emphasis on rapid fund recovery with enhanced victim support services, including counselling and financial rehabilitation assistance.
Addressing this escalating crisis requires a multifaceted approach extending beyond the NSRC's operational improvements. Public awareness campaigns must move beyond generic warnings to provide specific education about emerging fraud schemes, targeting different demographic groups with tailored messaging. Financial literacy programmes should emphasise the improbability of extraordinary investment returns and the importance of due diligence before committing funds. Critically, banks and fintech companies must implement more stringent transaction verification processes, particularly for large fund transfers to new beneficiaries or overseas accounts. International cooperation through Interpol and bilateral agreements with neighbouring countries must be strengthened to pursue cross-border criminal networks and recover funds moved internationally.
The parliamentary question that prompted these revelations demonstrates appropriate legislative oversight of a serious public safety issue. However, the disclosure of such dramatic losses also raises questions about why the Home Ministry and financial regulators did not escalate public warnings and preventive measures more aggressively as the trend became apparent. Moving forward, a more proactive approach—including regular public briefings on emerging fraud patterns, mandatory reporting requirements for suspected scam transactions, and industry-wide standards for customer verification—may help slow the acceleration of losses. Malaysia's position as a regional financial centre and technology hub demands that it establish itself as a jurisdiction where sophisticated fraud protection is the norm rather than the exception.
