Scam Recovery Agents in Malaysia: Spot the Second Scam

Why a recovery promise deserves another check

In an August 2026 consumer alert, the US Federal Trade Commission warned about scammers offering paid help to people who had already lost money. Its broader recovery-scam guidance describes impersonation of authorities, organisations or businesses and demands for fees before a supposed refund.

This warning describes a scam pattern. It is not a finding that a particular Malaysian company committed fraud, and it does not mean a US reporting service can recover a Malaysian transfer. For a local financial incident, start with your bank and the Malaysian reporting routes below.

Sources: FTC: Recovery scam warning, August 2026 · FTC: Refund and recovery scams

Separate a claimed result from evidence

Before discussing sensitive details, find the organisation's contact route yourself and ask whether the message and case reference are genuine. Do not let a deadline prevent this check. A caller who insists you keep the matter secret from your bank is giving you another reason to stop.

• A screenshot showing a balance is a claim, not evidence that money is in your bank account.
• An unexpected 'tax', 'processing fee' or 'release fee' attached to a refund is a serious warning sign.
• A caller's supplied phone number or official-looking letter is not independent verification.
• Refuse requests for passwords, one-time codes, banking access or remote control of your device.

Sources: FTC: Refund and recovery scams

If you paid the recovery agent

Contact your bank promptly and explain that this was a further payment connected to an earlier suspected scam. BNM's financial-scam guidance points to the bank or NSRC 997 and a police report. Do not assume a second payment is too small or too embarrassing to report.

Give the new transfer its own timestamp, amount, recipient and reference. Explain how the recovery offer arrived and whether you supplied documents or account access as well as money. Follow your bank's instructions; nobody writing an article can determine whether your particular transaction is recoverable.

Sources: Bank Negara Malaysia: Financial scam response

Keep the first loss and second approach distinct

A simple record is easier to explain than a folder of unrelated screenshots. The following is an editorial record-keeping template, not a required government form.

For example: 'Monday: original transfer. Wednesday: unsolicited recovery message. Thursday: another transfer described as an administration charge.' Replace these placeholders with your actual dates and facts; do not guess.

• Original incident: what happened, when, amount and transaction reference.
• Recovery approach: sender, claimed organisation, channel and exact promise.
• New request: fee, payment destination, requested documents or access.
• Your response: anything sent, installed or approved, with the time.
• Official follow-up: bank or police reference, contact date and next action.

Ask for help without exposing more information

You can tell a trusted person that you need help organising evidence or making a call. Avoid publicly posting full bank statements, identity documents or private account details. A public warning can describe the pattern without publishing your credentials or another person's unverified personal information.

If you need professional advice, locate and verify the professional independently. A paid professional service and a cold message guaranteeing recovered funds are different things; a fee by itself does not establish what someone is qualified to do. Do not treat testimonials or a social-media badge as a substitute for verification.