The National Scam Response Centre (NSRC) has fielded nearly 6,000 reports of online fraud through its 997 hotline during the first four months of 2025, according to Deputy Communications Minister Teo Nie Ching. Speaking at a community event in Kulai, Johor on Wednesday, Teo highlighted the scale of the problem while emphasising that the growing number of reports itself indicates rising public awareness of avenues for assistance—yet simultaneously points to a troubling surge in actual scam victimisation across the nation.
The breakdown of reported frauds reveals distinct patterns in cybercriminal activity. E-commerce fraud accounted for 2,566 cases, making it the single largest category and reflecting the rapid expansion of online shopping platforms in Malaysia. Telecommunications-related scams, which often involve phishing, SIM swapping, and impersonation tactics, constituted 1,369 reports. The remaining complaints encompassed schemes offering non-existent loans and fraudulent investment opportunities—categories that particularly target vulnerable populations including retirees, small business owners, and individuals facing financial pressure.
Teo's observation that awareness of the 997 hotline has spread among the public suggests that government messaging around cybercrime response channels has gained traction. Yet she cautioned that this uptick in reporting volumes masks a more concerning reality: the nation faces a persistent and evolving scam epidemic that continues to extract financial and emotional tolls from Malaysian households. The sheer volume of cases processed in just four months underscores why digital literacy and consumer education have become critical national priorities rather than peripheral concerns.
Recognising these challenges, Malaysia's government has fundamentally recalibrated its approach to cybersecurity awareness. The Safe Internet Campaign, which originally launched in 2025 with a narrower focus on schools and educational institutions—encompassing primary and secondary establishments as well as universities and teacher training colleges—now embraces a far broader community-centric model. This strategic pivot reflects an understanding that scam awareness cannot remain siloed within classrooms or campus environments when the threat landscape affects individuals across all age groups and socioeconomic strata.
The expanded initiative will permeate multiple districts across Johor, Malaysia's second-largest state and a region with substantial digital commerce activity. Following Kulai's inauguration as the campaign's first venue, the roadshow will progressively visit Kluang, Muar, Kota Tinggi, Pontian, Segamat, Batu Pahat, Mersing, Tangkak and culminate in Johor Bahru on December 19. This geographical dispersal ensures that residents from urban and semi-rural localities alike gain exposure to protective strategies and institutional support mechanisms.
Teo, who represents Kulai as Member of Parliament, framed the campaign's expansion as essential preventive infrastructure. She articulated that digital safety education serves not merely students but encompasses parents, grandparents, and older citizens who may lack familiarity with online transaction mechanics and thus remain susceptible to deception tactics. This intergenerational framing acknowledges demographic realities in Malaysia where family units often include elderly members who have recently begun using digital payment systems, online banking, and e-commerce platforms without corresponding instruction in common fraud vectors.
The focus on community involvement rather than institutional channelling represents a maturation in Malaysia's cybersecurity governance. Previous iterations of awareness campaigns frequently delegated responsibility to schools, implicitly suggesting that scam prevention was a youth-oriented concern. The revised framework recognises that fraud victimisation transcends age boundaries and that knowledge dissemination must occur through community gathering spaces, grassroots networks, and family-centred education rather than top-down institutional structures alone.
E-commerce fraud's prominence in the NSRC statistics reflects Malaysia's rapid digital transformation and the corresponding emergence of new attack surfaces. As platforms like Lazada, Shopee, and smaller marketplaces proliferate, scammers have developed increasingly sophisticated tactics: counterfeit seller accounts, payment gateway intermediaries, fake customer service contacts, and post-purchase extortion schemes. Malaysian consumers navigating this ecosystem often lack systematic training in verification protocols, secure payment practices, and dispute resolution procedures—vulnerabilities that fraudsters systematically exploit.
Telecommunications scams, meanwhile, exploit the ubiquity of mobile devices and the psychological authority that voice and SMS communications convey. Criminals impersonating government agencies, financial institutions, or delivery services leverage urgency and threat narratives to manipulate victims into disclosing credentials or executing transfers. The relative prevalence of this category suggests that many Malaysians remain insufficiently sceptical of unsolicited digital contacts, despite years of public warnings. This knowledge-behaviour gap underscores why repeated, community-embedded campaigns rather than one-time national announcements prove essential.
Loan and investment scams, though numerically smaller within the NSRC data, often inflict disproportionate financial damage per victim. These schemes typically target individuals experiencing genuine financial distress or seeking income opportunities, employing psychological manipulation alongside false documentation. The victims frequently include gig economy workers, small traders, and retirees seeking supplementary income—groups who may lack formal financial advisory access and therefore prove particularly vulnerable to elaborate fraud narratives.
For Malaysia's broader digital economy, the NSRC's statistics carry strategic implications. Online commerce and fintech adoption drive economic productivity and financial inclusion, yet cybercriminal prevalence creates friction and erodes consumer confidence. Each fraud incident generates cascading consequences: individual financial loss, psychological trauma, platform reputation damage, and reduced transaction volumes. The government's intensified awareness campaign thus represents not merely social policy but economic infrastructure investment aimed at sustaining momentum in digital transformation initiatives.
The Safe Internet Campaign's expansion across Johor will establish a template potentially replicable in other Malaysian states. If successful, the community carnival model—combining entertainment, education, and institutional presence—could become a standardised component of annual cybersecurity governance. The December 19 culmination in Johor Bahru will provide an opportunity to evaluate the programme's efficacy through collected feedback and engagement metrics, informing subsequent iterations.
Moving forward, Malaysia's success in combating online fraud depends not solely on technology deployment or law enforcement capacity, but on systematic elevation of public digital literacy. The NSRC's 5,944 reports represent real Malaysians whose financial security and personal data faced compromise. Each prevented scam through enhanced awareness translates into household resources preserved for productive purposes. By extending its campaign beyond institutional walls into community spaces where ordinary Malaysians gather, the government acknowledges that cybersecurity represents a collective responsibility requiring sustained, inclusive engagement.
