Banks Equally Liable for Enabling Scams — Growing Calls for Shared Responsibility in Malaysia
Banks in Malaysia are facing growing calls to share liability for enabling online scams, according to a report by Daily Express Malaysia. As scam losses continue to mount, victims and advocacy groups are questioning whether financial institutions are doing enough to prevent fraudulent transactions flowing through their systems.
The Khazanah Research Institute (KRI) has previously recommended that banks, telecommunications companies, and digital platforms should share responsibility for scam losses. With Malaysia recording billions in fraud losses annually, the debate over who bears the cost when scammers exploit the banking system has intensified.
When scam victims transfer money, the funds typically move through a chain of mule accounts — bank accounts opened or sold specifically to facilitate fraud. Critics argue that banks should be better equipped to detect and block these suspicious transactions in real time.
Several gaps in the current banking system contribute to the problem. Rapid fund transfers allow scammers to move stolen money across multiple accounts within minutes. Delayed detection of mule accounts means fraudulent accounts can operate for weeks before being flagged. Insufficient real-time transaction monitoring allows large, unusual transfers to pass through without triggering alerts.
Bank Negara Malaysia has issued guidelines requiring financial institutions to implement stronger fraud prevention measures, including enhanced customer verification, real-time transaction monitoring, and faster response to scam reports through the National Scam Response Centre.
Are banks in Malaysia liable for scam losses?
The debate is ongoing. KRI has recommended shared responsibility among banks, telcos, and digital platforms. BNM guidelines require banks to implement fraud prevention measures, but full liability frameworks are still being developed.
How quickly should I report a scam to my bank?
Report immediately. Funds can be moved through mule accounts within minutes. The NSRC at 997 operates around the clock to help freeze suspicious transactions before money is withdrawn.
⚠ Red Flags
- !Requests to transfer to an individual account — Legitimate businesses use corporate accounts, not personal bank accounts for payments.
- !Pressure to transfer immediately — Scammers create urgency to prevent you from verifying the transaction with your bank.
- !Multiple small transfers requested — Breaking large amounts into smaller transfers is a tactic to avoid triggering bank fraud alerts.
- !Unknown recipients — If you are asked to send money to someone you have never met or dealt with before, verify independently.
- !Instructions to ignore bank warnings — Scammers may tell victims to dismiss fraud alerts as routine system messages.
🛡 How to Protect Yourself
- 1Keep all evidence including transaction receipts, chat messages, and screenshots
📞 How to Report
- 1Contact your bank immediately to request a freeze on the transaction
- 2Call 997 (National Scam Response Centre) — the faster you report, the higher the chance of recovering funds
- 3Lodge a police report at your nearest station
- 4Report the mule account via SemakMule (semakmule.rmp.gov.my)
Want to learn more?
Book a scam awareness workshop for your family, community group, or organisation.
View Anti-Scam Programme