Online Shopping & Parcel Scam
Online shopping scams are the second-highest scam type by volume in Malaysia, with 14,881 reported cases and RM 123.7 million in losses in 2025. As more Malaysians shop on Shopee, Lazada, Facebook Marketplace, and Instagram, scammers have found increasingly creative ways to steal your money.
Common variants in Malaysia
Fake sellers on e-commerce platforms — Scammers create convincing seller profiles on Shopee or Lazada, often selling popular items (phones, electronics, branded goods) at suspiciously low prices. They lure buyers into communicating outside the platform via WhatsApp, then request direct bank transfer. Once paid, the item never arrives, and the seller disappears.
Fake delivery notifications — You receive an SMS or WhatsApp message claiming "Your parcel is held at the depot. Pay RM4.99 customs/delivery fee to release." The link leads to a fake payment page that steals your banking credentials. This works because most Malaysians regularly have parcels in transit and cannot remember every order.
Fake refund scams — You receive a call or message claiming to be from Shopee/Lazada customer service: "Your recent order has been cancelled. Click here to claim your refund." The link requests your full banking details to "process the refund" — actually draining your account.
Non-delivery from social media sellers — Sellers on Facebook Marketplace, Instagram, or TikTok Shop offer trendy items. They show "customer reviews" and "delivery proof" (all fake). You pay via bank transfer, receive a fake tracking number, and never get your item.
Counterfeit goods — Some scammers do send items, but they are cheap counterfeits of the branded goods advertised. By the time you realise, the return window has closed.
⚠ Red Flags
- !Prices far below market rate — If a new iPhone costs RM1,500 when retail is RM5,000, it is not a bargain — it is bait.
- !Seller insists on payment outside the platform — Legitimate Shopee/Lazada sellers use the platform's payment system, which offers buyer protection.
- !No verified seller badge or reviews — New accounts with zero history selling high-value items.
- !Urgency and limited stock — "Last 2 units! Transfer now to secure yours."
- !Unexpected delivery fee messages — Legitimate courier companies (Pos Malaysia, J&T, DHL) do not request payment via WhatsApp links.
- !Requests for full banking credentials — No legitimate refund process requires your online banking password or TAC number.
🛡 How to Protect Yourself
- 1Stay on the platform — Always pay through Shopee/Lazada's built-in payment system. Their buyer protection only works if the transaction is on-platform.
- 2Never transfer directly to personal accounts — Legitimate businesses use corporate accounts or platform payment gateways.
- 3Verify delivery notifications — Check your order status directly in the Shopee/Lazada app, not through links sent via SMS or WhatsApp.
- 4Check seller ratings and history — Look for verified sellers with many genuine reviews over months, not just a handful of recent 5-star ratings.
- 5Use Cash on Delivery (COD) for new sellers — If buying from an unverified seller, COD lets you inspect the item before paying.
- 6Screenshot everything — Save chat conversations, payment receipts, and seller profiles in case you need to file a report.
📞 How to Report
- 1National Scam Response Centre (NSRC): Call 997 (24/7 hotline)
- 2Platform dispute: File a dispute through Shopee/Lazada's Resolution Centre within the buyer protection period
- 3PDRM Commercial Crime Division: Lodge a police report for losses
- 4CCID Check Scam portal: ccid.rmp.gov.my/semakmule — check if the seller's bank account has been flagged
- 5MCMC: Report fraudulent social media accounts
Want to learn more?
Book a scam awareness workshop for your family, community group, or organisation.
View Anti-Scam Programme