From online romance to a fake crypto exchange: Warning signs to check
What the Melaka report established
On 5 November 2026, Bernama reported that police had arrested 13 foreign nationals in a Melaka raid the previous day. Police alleged an online romance scam linked to a non-existent cryptocurrency exchange, with Chinese nationals as the intended victims.
Those are reported police allegations. Arrests are not convictions, and the report does not establish a final court outcome. The warning signs below are general consumer guidance, not additional findings about these suspects or proof that Malaysian residents were victims in this particular case.
When a personal connection turns into an investment pitch
A new relationship does not verify a trading platform. Slow down if someone you met online starts choosing where you should invest, insists that you keep it secret or treats an immediate payment as a test of trust.
Separate the personal conversation from the financial decision. Ask yourself whether you would use this service if the person had not introduced it. Seek an independent view from someone who is not in the same chat group, and avoid sharing sensitive documents with an unverified operator.
Watch for demands to pay more before withdrawing
The SC’s published account of scam tactics describes fraudsters impersonating legitimate firms and requesting extra money under labels such as tax, administration or withdrawal charges. This is established background guidance, not a new claim about the Melaka investigation.
A large balance displayed on a website is not evidence that the money exists or is available to you. If a supposed withdrawal triggers an unexpected request to send fresh money elsewhere, stop and verify the demand independently. Do not keep paying to chase a balance that you cannot substantiate.
Legitimate services can charge disclosed fees. The important checks are who is requesting payment, what the agreed terms say and whether the destination and explanation can be verified through a trusted channel.
Check the operator without using the sender’s links
- Go directly to the regulator. The SC Investment Checker lets you check whether a person or entity is authorised to offer, promote or sell capital market products and services in Malaysia.
- Match the exact identity. Compare the legal entity and regulated activity. Then verify the website and contact details independently. A copied logo or similar name can disguise a different operator.
- Check payment details. Police’s Semak Mule portal can help check suspicious bank-account or phone details. The absence of a warning is not a safety guarantee.
- Keep control of access. Do not give someone your account password, one-time code or wallet recovery phrase, or let them take over your device to “help” you invest.
If you have already transferred funds
PDRM’s 5 November guidance advises victims of online financial fraud to contact 997 immediately and states that the service operates around the clock. You do not need to wait for a promise of repayment from the person who contacted you.
Preserve chat messages, the website address, transfer receipts and relevant account or wallet addresses. For a crypto transfer, retain its transaction hash if available. Provide evidence through official reporting channels, not in a public post exposing your financial details.
Be cautious if a new stranger promises guaranteed recovery for another upfront payment. Secure affected accounts through their official apps or websites and follow the bank’s and authorities’ instructions. A report is a request for help, not a guarantee that a bank or blockchain transfer can be reversed.
Our guide to checking Malaysian approval claims explains another common distinction: a discussion or announcement is different from verified registration.
Sources checked 10 November 2026. This article offers general fraud-prevention information and does not identify any additional suspect or establish guilt. It contains no recommendation to use a casino or investment platform.