How to Report an Online Scammer in Malaysia: Platform Reports, Community Formats, Police Reports & NSRC Scam Hotline — The Correct Sequence
Decision details
Fits if: Victims of online buy-and-sell scams in Malaysia, and users looking to report suspicious profiles before others get targeted.
Main drawback: Reporting is not a guarantee of fund recovery — recovery rates are low and heavily dependent on response speed. What you gain from a report is disruption: a properly structured report can get an account suspended and protect the next victim.
Compare: Unaltered original evidence (screenshots with dates); exact bank account numbers and handles; concise chronology; reporting through the correct channel for your case type; zero disclosure of third-party full personal details.
In this guide
A report that goes unread is leaked time. The hurdle is rarely lazy officers — it is evidence format. Three audiences (platforms, communities, police) need three distinct evidentiary forms. This page outlines each format in its proper operational sequence.
Core sequence: where did the money go?
If money has left your account, contact your bank or call 997 immediately. Report the transaction and ask for help; then lodge a separate police report at the nearest station as soon as possible. The 997 call is not a police report, and neither a freeze nor recovery is guaranteed. Dated secondary guides describe the best chance as within hours and relay a roughly one-day window; this is not an official deadline. Bank Negara Malaysia says to report the incident to your bank even if more than 24 hours have passed. Keep the transaction receipt and recipient-account details for your reports [source].
If money has not left (you noticed red flags early, or spotted a suspicious profile): head straight to platform and community reports. Your goal shifts from recovery to disruption: getting the account suspended before it hits another wallet.
Platform reports: why must evidence stay in their system?
Report buttons work when evidence sits inside the platform: native chats, listing IDs, profile links. A forum seller testing reports directly noted: “I have reported one and it got suspended already. The other one just reported, waiting for Caurosell to SUS them.” (Lowyat, 2022-05-07 capture — original spelling preserved). The practical takeaways are twofold:
- Reports work — scam accounts created yesterday can indeed be suspended.
- Off-platform chats leave no record — moving to WhatsApp discards your proof from the system with enforcement power over that profile.
Community blacklist: classic forum formats that still work
Community blacklist threads have had a fixed format since early forum days, surviving because every field is designed to be searchable via Ctrl-F by future buyers before transferring money. Original thread rules state: “Plz kindly list down conman/scammer only… Pls use format as above… No need discuss at here… Just to make easy to track which id/account they had been using” (Lowyat scammer list thread rules, active since 2008 — captured 2026-10-01). The standard fields are:
NICK (forum/platform):
NAME:
IC NO:
BANK A/C:
ADDRESS:
CONTACT:
OTHER: (nota ringkas)
LINK:
Privacy protection: why should you never disclose someone else’s full IC?
One crucial rule for 2026: never post someone else’s full IC number in public forums. That format originated in closed forums; in public spaces today, exposing an IC creates legal issues for you — and identity cards sent by scammers usually belong to previous victims. A safe adjustment: handle, bank name plus account number, phone number, platform link, and brief notes. Leave IC details for the police. (The original forum layout: “NICK LYN: (other then LYN also can) / NAME: / I/C NO: / BANK A/C: / ADDRESS: / CONTACT: (HP NO / MSN /etc) / OTHER: (SIMPLE NOTE) / LINK:” — captured byte-exact 2026-10-01.)
Police dossier: how to prepare an unshakeable evidence kit?
When making the separate police report, provide [source] a factual chronology and original evidence:
| Evidence Kit Item | Why This Format Matters |
|---|---|
| Original chat screenshots with visible timestamps | Cropped or edited versions raise doubt; originals are accepted as proof |
| Bank transfer receipt with reference number | The exact timestamp funds moved — the starting point for banking trails |
| Recipient account number and bank name | Essential for account freeze requests and cross-matching other police reports [source] |
| Platform handle and profile URL | The direct bridge for police investigators when requesting platform records |
| One-page chronological summary | Officers review dozens of dispute files daily; concise timelines get understood quickly |
Unaltered records: why must you never delete original chat logs?
One common mistake: never delete any messages. Chats, listings, and receipts are now evidence files. Any urge to clear embarrassing conversations must wait until the case concludes.
Master workflow table: recommended action sequences across dispute types
| Scenario | Step 1 | Step 2 | Step 3 |
|---|---|---|---|
| Money has transferred | Call your bank or 997, then lodge a separate police report [source] | Submit an in-platform report with internal chat logs | Keep original records; any community post should omit IC details |
| Not yet paid, suspicious profile | Report profile to platform | Share in collector community once patterns emerge | — |
| Parcel arrived wrong or empty | Record unboxing video, raise platform dispute same day | Follow parcel dispute procedure | — |
Secondary recovery traps: why should you beware fee-based recovery agents?
A final trap to remember: unsolicited “recovery agents” may approach after a scam and ask for an upfront fee. Seek official help by contacting your bank or calling 997 yourself, and lodge a separate police report. Be wary of anyone who approaches you promising recovery for a fee. [source]
Frequently asked questions
Money has already transferred — where should I report FIRST?
Contact your bank or call 997 immediately to report the transaction and seek help; then lodge a separate police report at the nearest station as soon as possible. The 997 call is not a police report. Dated secondary guides describe the best recovery chance as within hours and relay a roughly one-day freeze window, but these are not official deadlines or guarantees. Bank Negara Malaysia says to report the incident to your bank even if more than 24 hours have passed. A freeze or recovery is not guaranteed [source].
What is the purpose of reporting inside the platform?
Use the report button on the profile or listing, supported by chat evidence within the platform itself. Its effectiveness is not theoretical — a forum seller testing reports against scammer profiles noted: 'I have reported one and it got suspended already.' Platforms act when evidence sits inside their own systems; external WhatsApp screenshots are generally disregarded by automated dispute systems.
What is the standard format for community blacklist reports?
Established forums have maintained a structured format that works because it is easily searchable via Ctrl-F: nickname, name, IC number, bank account, address, contact, brief note, link. Modern caution: never post someone else's full IC number in public forums — submit full identity details to the police; public threads should only carry the handle, bank account number, and phone number to cut off future payments.
What kind of evidence carries the most weight?
Unaltered originals: intact chat screenshots with visible timestamps, bank transfer receipts showing reference numbers, recipient account numbers and bank names, profile links, and a concise one-page chronology (first contact, agreement terms, payment time, and when contact was lost). Do not crop, edit, or delete messages — original logs serve as valid proof.
Is it worth filing a report for small financial losses?
Yes, absolutely — small reports reveal wider patterns: an account receiving multiple small-value reports establishes an actionable scam pattern, whereas zero reports leave no trace. For lower-value disputes, platform suspensions and community threads effectively block subsequent victims.
Someone claims they can recover my money for an upfront fee — can I trust them?
No. That is a secondary scam preying on victims who recently lost money and are feeling desperate. Legitimate recovery happens only through official channels you initiate yourself (calling 997, official police reports, banks), never through third parties approaching you. [source]