View
bg-orb

Consumer Social Intelligence Safety and Security Report 2024

Key Topics

Malaysia    |   01 Oct 2023 - 31 Mar 2024

Payment methods

Bank Cards Conversation

Strategies in combating identity theft were raised along with security concerns regarding debit vs credit card use and privacy of the government’s data platform.

Share of Voice Bank Cards

N=7.4k

This chart shows the number of posts from the main search query that mentions specific bank cards and the % of conversations related to each type of card. Shares/reposts are included. The % change in volumes is compared to the previous six months.

Vigilance and Prevention Techniques

  • Safety Comparison: Credit Cards vs. Debit Cards

    Discussions favored credit cards for safety as they use the bank's funds, unlike debit cards which risks customers' own money. Fixing scams with debit cards was seen as less straightforward, especially when linked to savings accounts.

  • Warning Against Using Leaked Credit Card Details from Foreign Sources

    Credit card discussions warned against using leaked credit card details from another country shared on a Malaysian X account, highlighting serious consequences like police involvement and potential court proceedings.

  • Concerns Over Safety of Government Data Platform

    Concerns arose about a government platform consolidating personal data of Malaysians aged 18 and older. Doubts about its safety were raised, with fears of easy access by scammers which sparked privacy worries.

  • Strategies to Combat Identity Theft

    Discussions on identity theft focus on raising awareness about phishing risks and providing preventative measures. Recommendations include setting up Two-Factor Authentication (2FA), avoiding suspicious links and limiting third-party installations on mobile devices.

What People Are Saying

"DO NOT USE STOLEN CREDIT CARD NUMBERS!
If you commit a credit card fraud transaction, you're going to get hauled up by the police and charged in court. It doesn't matter where the credit card is from."

"Be careful guys... money can disappear just like that! Don't answer any calls, don't click any links, didn't give my bank card to anyone... and money can still vanish. Pray I get it back 🙏🏼. #bankfraud #debitcardfraud #moneygone #fraud #saveyourmoney."

"To prevent falling victim to CC scams, a user recommended:
Deactivating e-commerce purchases means you can still use your ATM card to withdraw money or use your contactless payment card in the store. It's just that you can't use the card to buy things online."

Bank Cards - Fraud Types Conversation

Emphasis in vigilance against phishing attacks, recruitment scams and identity theft with prepaid cards emerging as safest option.

Share of Voice Bank Cards - Fraud Types

N=1.6k

This chart shows the number of posts from the main search query that mentions specific fraud types within the bank cards conversation and the % of conversations related to each type of fraud. Shares/reposts are included. The % change in volumes is compared to the previous six months.

Scam Types

  • Recruitment Scams Targeting Credit Card Details

    Recruitment scams are emerging as a novel tactic in the realm of generic fraud, with deceitful recruiters leveraging on the pretext of conducting financial background checks on applicants to obtain credit card details.

  • Fraud Case Involving Malaysian Actor Drives Surge in Prepaid Card Discussions

    Prepaid card discussions surged, doubling from 7% of bank cards' conversations due to a fraud case involving a Malaysian actor. The actor lost RM29,000, prompting advice from a popular account to use prepaid cards for added security.

  • Precautions Against Phishing Attacks

    Users are warned about the dangers of phishing attacks with suggestions to use prepaid cards to mitigate risks. This was sparked by an incident involving a fraudulent package delivery notification which highlights the need for heightened vigilance.

  • Privacy Concerns Surrounding Government Initiatives

    Privacy concerns are raised regarding a new government initiative aimed at creating a central database. These concerns are part of broader discussions encompassing various fraud and identity theft issues.

What People Are Saying

"Ok, My post on recruitment scam yesterday got people to reach out.
I’ve compiled the top 6 recruitment scams that you should know about.
👇👇🔥🔥👇👇
Pls add on to this list and pls repost so we can protect each other."

"In addition to activating 2FA. • Be careful not to click links that have phishing potential • Turn off third party installs in the mobile phone settings so that no malware apps can be installed • Deactivate debit cards on any website, lower the transaction limit, especially on credit cards. May you be protected."

"User recommend using a top-up card instead of a debit or credit card due to the risk of phishing scams:
This means that the scammer takes our data from our debit card number & cc from google when we mistakenly click on your phishing site."

Bank Cards Conversation Over Time, Oct’23 to Mar’24

An actor’s RM29K debit card fraud and sharing of leaked card details led to major discussions on safety and security of all cards.

Chart displays daily conversation volumes (including shares/reposts) on ‘Bank cards’ category query. This visualisation is used to identify key stories (either from the news or social media) that drove conversations and consumer interest.

Payment methods

Non-card Services Conversation

Government and bank’s initiatives promoting cashless transactions, online verification system and loan scam awareness competition prompted discussions as well as the immense increase of fraud cases in Johor.

Share of Voice Non-card Services

N=10.7k

This chart shows the number of posts from the main search query that mentions specific non-card services and the % of conversations related to each type of service. Shares/reposts are included. The % change in volumes is compared to the previous six months.

Source
* Online banking refers to A2A (account to account) transfer using internet banking
** Bank transfer refers to offline banking

Vigilance and Prevention Techniques

  • Loan Scam Awareness Crossword Competition

    A bank hosted a Facebook competition offering RM20 digital wallet credit. Entrants solved a crossword related to common loan scam tactics like low-interest rates, aiming to raise awareness. The competition generated 1.8K comments, mostly entries.

  • Surge in Digital Wallet Discussions Due to Government Initiatives

    Government initiatives promoting cashless transactions sparked a rise in digital wallet conversations. Consumers cautioned against "cash-out" scams on social media, while the government clarified that e-Wallet credit is non-withdrawable.

  • Mixed Reactions to MyDigital ID Initiative

    A government agency introduced MyDigital ID, an online verification system to combat identity theft and online fraud. Some commentators expressed resistance to the initiative, fearing microchip implants or scams. However, they also expressed a desire to understand and explain the system to others.

  • Reports of Fraud Cases in Johor

    News surfaced about Johor reporting over 2,000 fraud cases, including fake loans, phone scams, deceptive job offers, online purchase frauds and impersonation incidents.

What People Are Saying

"When times are tough and things get desperate, we might become less cautious and fall for non-existent loans!

What are the four main warning signs to avoid falling victim to a non-existent loan?

Solve the crossword puzzle to find the 🟡 YELLOW KEYWORD🟡 and stand a chance to win an RM20 [digital wallet voucher."

"Tweet from a government agency:
Until September 2023, fraud is Johor's top commercial crime with 2,616 cases, costing RM166.3 million. At the Johor State Security Working Committee Meeting, I stressed the need for action against fraud. I urge Johoreans to stay cautious and support each other. The State Government trusts security agencies to maintain peace. Our goal is to achieve the Johor Selamat Agenda by 2030."

"For the 100th time to order, please DO NOT DOWNLOAD suspicious .apk files. Sometimes people send courier messages/wedding cards, that tell you to download the file, please don’t tap the link. But how do you know if it's a scam or not?"

Non-card Services - Fraud Types Conversation

Discussions centered on WhatsApp messages and fake courier notifications containing malware; property/car sales deception and bank transfer scams.

Share of Voice Non-card Services - Fraud Types

N=1.4k

This chart shows the number of posts from the main search query that mentions specific fraud types within the non-card services and the % of conversations related to each type of fraud. Shares/reposts are included. The % change in volumes is compared to the previous six months.

Scam Types

  • Warning Against Sales Scams in Other Fraud Conversations

    Individuals cautioned against scams in car or property sales, where fraudulent sellers request down payments into personal accounts rather than company accounts. This deceptive tactic aims to divert funds away from legitimate transactions. Commentators stressed the importance of verifying payments to companies to avoid falling victim to such scams.

  • Warnings About Malicious WhatsApp Messages

    Users shared warnings about WhatsApp messages containing malware particularly APK files. They cautioned against downloading files from suspicious messages to prevent fraud and to protect personal information.

  • Caution Against Bank Transfer Scams

    Consumers were cautioned about a surge in bank transfer scams, ranging from fictitious loan fees to unauthorized ATM transactions and phishing calls for financial information. Vigilance was urged to prevent falling victim to these schemes.

  • Warnings About Fake Package Notifications and OTP Scams

    A consumer highlighted fake package notifications containing malware apps supposedly from a courier company. Discussions also covered OTP scams targeting vulnerable older individuals with fake callers promising deals. An X user verified a suspicious call with a mobile company's customer service to confirm it as a scam.

What People Are Saying

"If you buy a car or a house, if the salesman asks you to pay for a booking transfer to his own bank account, don't believe it. It's a scam. 💀 Payment must go through the company. Buying a house requires paying into the developer's account."

"MyDigital ID is an online identity verification system with high security features capable of reducing the risk of online identity fraud, while also eliminating duplicate identity data and ensuring accurate and trusted self-verification."

"Always take precautions to protect your phone from malware! If you’ve been scammed, immediately call 03-2178 8888 or the National Scam Response Centre at 997 (8am-8pm daily) and make a police report.#DontGetScammed"

Non-card Services Conversation Over Time, Oct’23 To Mar’24

Bank’s action on loan awareness scam competition generated spike in discussions as well as government's program requiring digital wallet details and celebrity fraud incident.

Chart displays daily conversation volumes (including shares/reposts) on ‘Non-card services’ category query. This visualisation is used to identify key stories (either from the news or social media) that drove conversations and consumer interest.

Malaysia Frauds/Scams Related to Cyber Attacks, Oct’23 to Mar’24

Concerns about cyber attacks on banking customers prompted analysis of cyber security threats in Malaysia’s banking industry.

Cyber Attack Events on banks in Malaysia¹

Cyber Attack Methods on banks¹

Source:
  1. Mastercard Cyber Insights Data. Based on data for the period Oct 2023 – Mar 2024
  2. Malware performs undesirable operations such as data theft or some other type of computer compromise. Some of the main types of malware include trojans, viruses, worms and spyware.
  3. Attack patterns within this category focus on the manipulation and exploitation of people using e-mails. Attack examples are Spam, Scams, Phishing and Spear-Phishing.
  4. Mobile device attack focus on disrupting, gathering sensitive information and gaining access to mobile devices (such as iOS, Android, Windows, etc.).
  5. Others include mobile device attacks, web phishing, pretexting, supply chain attack, command and control and persistence techniques.

Cyber attacks dominated discussions as a prevalent type of fraud

  • There were 81 total attacks in Oct 2023- Mar 2024 on banks in Malaysia, 57% of which were executed through malware, email phishing and ransomware techniques.

  • Out of all the fraud-type discussions for Bank Cards and Non-Card services, ~ 40% were related to cyber attacks (29% in bank cards, 52% in non-card services). 79% of cyber attack discussions under bank card services were associated with credit cards, while 41% of cyber attack discussions under non-bank card services were related to Online Banking.

  • 87% of the cyber attacks are found within online news and are primarily associated with attacks on banking institutions and infrastructure. These attacks often capture fraud that boasts high levels of sophistication, through compromising or impersonating organizations and businesses.

Best practices that can be deployed by banks to enhance cyber controls

  • Establish a non-negotiable cyber security culture by strengthening awareness and training program.
  • Collect, monitor and analyze information to build cyber intelligence to make informed data backed security decisions.
  • Establish a program to allow you to manage and monitor your critical third parties to prevent their risk becoming your risk.
  • Effective management of patches and vulnerabilities.

Get More Information

Get More Information

Your message sent successfully!

Message Submitted!

We'll get back to you promptly with a response.