Impersonation Scam: Know the tactics. Protect yourself.

Impersonation scam is one of the fastest growing financial crimes in Malaysia. Fraudsters often pose as bank officers, government agencies, and courier companies to steal your money and personal data. 

 

What is Impersonation Scam?

An impersonation scam occurs when a fraudster assumes the identity of a trusted institution such as a bank, government department, technology company, or logistics provider. The goal of these scams is to deceive victims into surrendering money, personal data, or bank account access.
Unlike brute-force cyberattacks, impersonation scams exploit human psychology. They weaponise fear, authority, and urgency. A convincing social media ad, a spoofed email address, or a professionally designed fake website can make the deception feel entirely legitimate even to vigilant, educated individuals.

 

 

Red Flags to Recognise Immediately

Scammers rely on you not recognising the warning signs in the moment. Take the time to know what Public Bank will and will never do.

Public Bank Will Never Public Bank May Legitimately
  • Ask for your PIN or password.
  • Request your full OTP or PAC code.
  • Ask you to transfer money to a third-party account.
  • Instruct you to install APK files or third-party apps from non-official platforms.
  • Contact you via WhatsApp or Telegram as 'official' support.
  • Call you to verify large unusual transactions (no OTP requested).
  • Send official communications from @publicbank.com.my addresses only.
  • Notify you of account changes via registered email or SMS.

 

If You Are Targeted, Act Fast
Speed matters when you are targeted by impersonation scams. Notify the bank immediately if you realised you have been scammed. The faster you act, the greater the chance of freezing fraudulent transfers before they are moved beyond recovery. Make sure you only contact the bank’s official numbers or the National Scam Response Centre (NSRC) at 997 and not the number provided by the scammers.

A Kill Switch feature is also available which enables you to disable your PBe User ID, ATM / debit / credit cards and deposit account from a single access point.

Want to learn more about impersonation scams and more? Visit our online security microsite. Ensure your email address is updated with us to receive our latest newsletters. 

References

This information provided is purely for educational purposes.

1. https://www.kwsp.gov.my/en/w/infographic/impersonation-scam, Recognising And Avoiding Impersonation Scams
2. https://wise.com/my/blog/impersonation-scams, Impersonation scams explained: How to spot and avoid them

Go Back

Also of interest to you

PB SecureSign

PB SecureSign is an easy and secured way to authenticate transactions by using biometric recognition or 6-digit SecurePIN.

Online Security

Security tips and information to assist you in becoming a more knowledgeable and security conscious user.

How to Report Fraud?

If you spot any unusual activities with your account or suspect that your account has been compromised, here are a few things you should do.

Floating icon BMW i5 desktop version