BNM warns public about fake websites and apps stealing personal data
Bank Negara Malaysia posted a warning on X about fake websites and malicious apps impersonating the central bank to steal your data.
What happened1/3 BNM posted a warning on X about cloned sites and fake apps
Bank Negara Malaysia used its official X account to warn the public that scammers are impersonating BNM through fake websites and malicious apps to steal personal and banking information.
The central bank urged everyone to stay alert and verify anything suspicious before entering details. The one place to check: bnm.gov.my/verify.
What to do, step by step2/3 Verify before you type, and report fast if you already did
- Type bnm.gov.my/verify directly in your browser. Do not click a link that arrived by SMS, WhatsApp or email claiming to be from BNM.
- If you already entered banking details or downloaded a suspicious app, call the National Scam Response Centre at 997 immediately.
- Call your bank right after the NSRC call so they can flag or freeze the account. The faster you report, the better the chance of stopping the money.
- Delete the fake app and run a security check on your phone. Change any online-banking passwords you may have typed into the fake site.
Why it matters3/3 A page can look official and still be a trap
BNM's own warning put it simply: "A website may look official, but that doesn't mean it's genuine." Scammers build pages that mirror the look of a government portal so your guard drops before you notice the URL is wrong.
The only reliable check is to type the official address yourself or go through bnm.gov.my/verify. A link in a message can take you to a clone that looks identical.
Questions people ask
Where do I verify if a BNM website or message is real?
Type bnm.gov.my/verify ↗ directly in your browser. Do not follow links sent to you by email, SMS or WhatsApp claiming to be from BNM. If the page is not reached through that URL, treat it as unverified.
I already gave my banking details to a fake BNM site. What do I do first?
Call the National Scam Response Centre at 997 immediately, then contact your bank to freeze or flag the account. Speed matters: the faster you report, the better the chance of stopping the money before it leaves.
