Johor Baru retired bank manager loses RM936,000 to a Macau scam (2026)

In April 2026, a 60-year-old retired bank manager in Johor Baru, Malaysia, lost RM936,000, her life savings, to a "Macau scam". Three callers posed in turn as an insurance agent, a police officer and a deputy public prosecutor. They convinced her she was under investigation for money laundering, had her open a new bank account "for investigation purposes", move her savings into it and hand over her online banking login. She found the account empty on 15 May. Status: Reported to police, under investigation.

How the scam unfolded

Police are investigating under Section 420 of Malaysia's Penal Code, which covers cheating. No suspects have been named.

Tip: a real investigation never needs you to open a new account, move your savings or share your banking password.

What a Macau scam is

In Malaysia, "Macau scam" is the common name for phone fraud where callers pose as officials. It usually starts with a small, believable problem, such as an insurance claim, a parcel or an unpaid bill, then "transfers" the victim to someone with more authority. Each new voice raises the stakes. By the time a "prosecutor" asks for money or account access, the victim has already accepted the story twice. It's a form of vishing and pretexting.

The red flags

• A stranger saying your identity was used for fraud, then passing you to "the police" on the same call.
• Being told you're a suspect, which makes you want to cooperate to clear your name.
• Instructions to open a new account and move your money into it.
• Any request for your online banking login, for any reason.

What would have stopped it

• Hang up on transferred calls that claim to be police. Call the police station yourself using a number you look up.
• Never share banking logins. Assistant Commissioner Raub Selamat warned people not to disclose banking details or transfer money to unknown parties, even when the instructions seem to come from enforcement agencies.
• Talk to someone. A family member or your bank branch can sanity-check the story before any money moves.
• Check new accounts often. Weeks passed before the loss was found.

See also how to prevent vishing and the Phantom Hacker case, which uses a similar chain of fake officials.

Common questions