How to Spot a Loan Scam in Malaysia: 9 Warning Signs Before You Borrow
A loan scam in Malaysia usually reveals itself through a few clear signs: a request for a fee or deposit before any money is released, unsolicited WhatsApp or SMS offers, no physical office, no licence number you can verify with KPKT, and pressure to decide immediately. If you see any of these, stop and check before you pay anything.
Scammers know that people looking for a loan are often under time pressure. A business owner in Butterworth waiting on a late customer payment, or a family in Ipoh facing an unexpected bill, may be tempted by an offer that looks fast and easy.
This guide sets out nine warning signs, explains how a genuine licensed moneylender operates, and lists the practical steps to take if you think you have been targeted.
Key takeaways
- Licensed moneylenders in Peninsular Malaysia are regulated under the Moneylenders Act 1951 (Act 400) and overseen by KPKT.
- Being asked to pay a fee, deposit or processing charge before the loan is released is one of the clearest scam signs.
- A genuine lender displays its licence, operates from a registered office and uses a Schedule J or Schedule K agreement.
- Never share your online banking login, TAC or OTP with anyone offering a loan.
- If you are targeted, stop contact, do not pay, report to the police and inform your bank.
On this page
- What does a loan scam in Malaysia look like?
- 9 warning signs of a loan scam
- Licensed lender or scammer: how do they compare?
- How do you check a lender before you borrow?
- Loan scam Malaysia: what to do if you are targeted
- How Northern SME can help
- Frequently asked questions
What does a loan scam in Malaysia look like?
Most loan scams follow the same pattern. You see an advert on social media or receive a message offering a quick loan with easy terms. The "lender" asks for a copy of your IC and some basic details, then tells you the loan has been approved.
Before the money can be released, however, you are asked to pay something first. It might be described as a processing fee, a stamp duty charge, a deposit to prove you can repay, or an insurance payment. Once you pay, a new charge appears, and then another, until you stop paying and the contact disappears.
Other scams aim to take over your bank account rather than collect fees. The scammer asks for your online banking username, password or the TAC sent to your phone, claiming they need it to "verify" your account or deposit the loan. With these details, they can move money out of your account.
Understanding how a licensed money lender in Malaysia is supposed to operate makes it much easier to spot when something is wrong.
9 warning signs of a loan scam
Any one of the following signs is reason enough to pause. Two or more together should be treated as a strong indication of fraud.
1. You are asked to pay before you receive the loan
This is the most common scam tactic. A request for a fee, deposit, "processing charge" or stamp duty payment before any money reaches you is a serious red flag. Be especially wary if the payment is to a personal bank account rather than a company account.
2. The offer arrives unsolicited by WhatsApp or SMS
If you did not apply and a stranger messages you with a loan offer, treat it with suspicion. Scammers send messages in bulk and often use names that sound similar to real companies.
3. There is no physical office
Licensed moneylenders must operate from a registered office. If the lender cannot give you an address, or the address does not exist when you check it, walk away.
4. There is no licence number, or it does not match KPKT records
A genuine lender will tell you its licence number and registered company name. If the number is missing, or the company is not on the list published by KPKT, do not proceed.
5. You are pressured to act immediately
Phrases such as "offer ends today" or "only two slots left" are designed to stop you thinking clearly. A legitimate lender will give you time to read the agreement and ask questions.
6. You are asked for your banking login, TAC or OTP
No genuine lender needs your online banking password or the one-time codes sent to your phone. Sharing these can give a scammer full access to your account.
7. Approval is promised with no checks at all
Responsible lenders assess whether you can repay. A promise of approval without looking at your income, documents or credit position suggests the "loan" is simply bait.
8. There is no proper written agreement
Licensed moneylenders must use the prescribed forms: Schedule J for loans without security and Schedule K for loans with security. Being asked to sign blank forms, or receiving no agreement at all, is a warning sign.
9. The interest rate is unclear or above the legal limits
Licensed moneylenders cannot charge more than 12% per annum on secured loans or 18% per annum on unsecured loans. Rates quoted per day or per week, or terms that are never written down, should make you stop. Our guide to common loan terms can help you read an offer properly.
Licensed lender or scammer: how do they compare?
The table below summarises how a licensed moneylender typically behaves compared with the tactics scammers use.
| Area | Licensed moneylender | Likely scam |
|---|---|---|
| Licence | Licence displayed; number can be checked on the KPKT list | No licence number, or number does not match |
| Office | Registered office you can visit | Phone or WhatsApp only, no address |
| Upfront payments | No request for fees before the loan is released | Fee, deposit or "processing charge" demanded first |
| Agreement | Schedule J or Schedule K, with a stamped copy for you | No agreement, or blank forms to sign |
| Interest | Stated clearly, within 12% or 18% per annum | Daily or weekly rates, or never stated |
| Banking details | Never asks for your login, TAC or OTP | Asks for login or codes to "verify" you |
| Approach | Gives you time to decide | Pressure to act immediately |
If a lender ticks every box in the middle column, you still need to make sure the loan suits your budget. A legitimate loan is only a good idea if the repayments are affordable.
How do you check a lender before you borrow?
A few minutes of checking can save you a great deal of money and stress. Follow these steps before you share documents or sign anything.
- Ask for the lender's registered company name, licence number and office address.
- Type the official KPKT website address into your browser yourself and look for the list of licensed moneylenders. Do not use links sent to you by message.
- Check that the company name, licence number and address all match what you were given.
- Search the Financial Consumer Alert List on the Bank Negara Malaysia website to see if the name appears as an unauthorised entity.
- Visit or call the office using contact details you have verified independently.
- Read the full agreement before signing and make sure every field is filled in.
- Keep a copy of the stamped agreement and receipts for every payment you make.
Remember that a trading name and a company name can be different. Ask for both, and check the registered company name against the official list.
Loan scam Malaysia: what to do if you are targeted
If you suspect a scam, act quickly and calmly. The steps below can limit the damage and help protect other people in your community.
- Stop all contact. Do not reply to further messages or calls, and do not click any links they send.
- Do not pay anything. If you have been told one more payment will release the loan, it will not.
- Report to the police. Make a police report and keep copies of messages, call logs, account numbers and any receipts.
- Inform your bank. Contact your bank straight away, especially if you have shared your login, TAC or OTP, or made a transfer.
- Check the BNM Financial Consumer Alert List. See whether the entity is already listed as unauthorised.
- Check the KPKT list. Confirm whether the name used is a licensed moneylender, and be aware that scammers sometimes copy the names of genuine companies.
If you are still in genuine need of funds after this, take your time to find a lender you have verified, and borrow only what you can comfortably repay.
How Northern SME can help
Northern SME is the trading name of BINTANG CASH SDN. BHD., a moneylender licensed by KPKT under licence number WL7536/02/01-4/190528. Our office is at 188, Vantage Desiran Tanjung, Tanjung Tokong, Seri Tanjung Pinang, 11200 Penang, open Monday to Friday, 9am to 12pm.
We serve businesses and individuals in Penang, Kedah, Perlis and Perak, with business loans, SME loans, micro loans, personal loans and more. You can see the full range on our loans page. For complete applications, decisions can be made within 24 hours, terms apply.
We encourage you to check our licence on the KPKT list before getting in touch. You can reach us on WhatsApp at +6017-6785998 or through our contact page.
Frequently asked questions
How can I tell if a moneylender in Malaysia is licensed?
Ask for the registered company name, licence number and office address, then compare them with the list of licensed moneylenders on the official KPKT website. All three details should match. Type the website address yourself rather than using a link sent to you, and also check the Bank Negara Malaysia Financial Consumer Alert List.
Is it normal to pay a processing fee before a loan is released?
Being asked to pay a fee, deposit or processing charge before any money is released is one of the most common warning signs of a loan scam. If you receive this request, stop the conversation, do not transfer any money, and check whether the lender appears on the KPKT list of licensed moneylenders.
What should I do if I have already paid a scammer?
Stop all contact and do not make any further payments. Make a police report as soon as possible and keep evidence such as messages, account numbers and receipts. Inform your bank immediately, particularly if you shared your online banking login, TAC or OTP, so it can advise you on protecting your account.
What is the maximum interest a licensed moneylender can charge?
Licensed moneylenders in Peninsular Malaysia may charge a maximum of 12% per annum for secured loans and 18% per annum for unsecured loans. The rate should be written clearly in your Schedule J or Schedule K agreement. Quotes given per day or per week, or rates above these limits, are a warning sign.
Can a licensed lender contact me on WhatsApp?
Many legitimate businesses use WhatsApp to reply to enquiries. The concern is unsolicited messages from strangers offering loans you never asked for. Whoever you deal with, verify the licence number, company name and office address with KPKT, and never share your banking login, TAC or OTP.
If you would like to check your eligibility with a licensed lender, message us on WhatsApp or use our contact page.
This article is general information and not financial advice. Terms, rates and eligibility depend on your circumstances and the lender's assessment.
