What to do in the first hour after a scam

The first hour is about limiting further loss and creating a usable record. Use independently verified bank and police channels; do not spend that time bargaining with the scammer or deleting embarrassing messages.

What the official sources establish

Royal Malaysia Police publicises NSRC 997 and Semak Mule, while the affected bank has its own urgent fraud route. Prompt reporting may support response efforts but cannot guarantee recovery.

What to check

• Exact transaction, recipient, time and amount are available.
• Scammer numbers, accounts, usernames, links, adverts and messages are preserved.
• Bank and NSRC contact details come from official sources.
• Passwords, cards, devices and other exposed accounts are assessed without destroying evidence.

A practical way to decide

1. Call the bank’s official fraud number and NSRC 997 immediately.
2. Follow the official instruction for a police report and provide a short chronology.
3. Secure exposed accounts from a trusted device and warn affected contacts.
4. Keep every case number and monitor for further unauthorised activity.

A useful decision rule

Act through official channels first. Anyone asking for another fee, remote access or one-time password to recover funds should be treated as a new risk.

Common mistake to avoid

Do not publicly post full identity, card or account screenshots while seeking help. Share sensitive evidence only through verified reporting channels.

Keep the evidence

Save the dated product page, quotation or terms you relied on, together with receipts, model or registration numbers and written messages. Public pages and commercial terms can change; recheck the linked official sources before committing money or making a complaint.