999, 997, and the First Hour After You Realise You've Been Scammed

The caller already knows your name and your MyKad number. He says he’s from the police, or Bank Negara, or the courts — and that your account is linked to a money-laundering case under investigation. The only way to prove your innocence, he says, is to move your savings into a “safe account” while they check it. It sounds absurd written down. On the phone, with a real case number and a voice that never raises, it doesn’t.

That script — the so-called Macau scam — is one strand of a problem that’s grown into billions of ringgit a year. PDRM’s Commercial Crime Investigation Department reported around 67,735 online fraud cases and RM2.7 billion in losses in just the first eleven months of 2025. What actually changes the outcome isn’t luck; it’s knowing which number to call in the first hour, because banks can usually only freeze a stolen transfer while it’s still moving.

The numbers worth saving before you need them

Situation	Number	Who answers
Life-threatening emergency — police, fire, ambulance, civil defence, maritime	999 (or 112 from any mobile, even with no credit or SIM)	MERS 999 call centre, Civil Defence Force
You’ve just sent money to a scammer, or think you have	997	National Scam Response Centre — PDRM, Bank Negara Malaysia and MCMC working the case together
Phishing link, hacked account, suspicious SMS	1-300-88-2999 (Cyber999)	MyCERT, CyberSecurity Malaysia
Scam calls, spam SMS, spoofed telco numbers	1800-188-030	MCMC Consumer Care Centre
Domestic abuse, child welfare, family crisis	15999 (Talian Kasih, 24/7)	Ministry of Women, Family and Community Development

Every call to 999 is free. 997 was relocated to MCMC’s Cyberjaya centre and moved to round-the-clock operation in early 2026 — and, per the minister’s announcement at the time, calling it can now stand in for a separate police report on the same case.

How the money actually disappears

• Impersonation (“Macau scam”). A caller poses as police, Bank Negara, a court or customs, invents a case against you, and pressures a transfer to a “safe” account.
• Parcel plus a fake app. A message about a withheld or dutiable parcel comes with a link to a “tracking” app — actually a malicious .apk file that reads your SMS and steals one-time passwords once installed.
• Love and job scams. A romantic contact or “employer” abroad eventually needs a transfer — for a parcel of gifts, a visa fee, or a training deposit — before anything ever materialises.

What to actually do in the first hour

1. Call 997 immediately if money has already moved — don’t wait to see if it “clears” first.
2. Don’t hunt for a separate police report — a 997 call is treated as one.
3. Check the number or account before paying, not after, at semakmule.rmp.gov.my.
4. Never install an app from a link sent by SMS, WhatsApp or Telegram — get delivery or bank apps only from the official app store.
5. For non-fraud losses (a lost document, not money taken by deception), PDRM’s e-Reporting portal is the right channel instead of 997.

Common mistakes

• Trusting a caller because the number on-screen looks like a real bank or police line — caller ID can be spoofed.
• Treating 999 as the number for a financial scam — it isn’t; that’s 997.
• Installing a “tracking” app because the delivery story felt specific and believable.
• Waiting a day “to be sure” before calling — the window for freezing a transfer is measured in hours, not days.

What’s next

If the scam involved a QR or e-wallet transfer, DuitNow QR Payments explains how those transactions work and where disputes go. If your bank is slow to act on a transaction you’ve flagged, Opening a Bank Account covers the account relationship behind it. And for a trader dispute that isn’t outright fraud — a refund refused, not money stolen — see Consumer Rights and the Tribunal.