Malaysian banks and PayNet to pilot industry-wide fraud alerts in the first half of 2027

Implications

Facts

Announcement: Bank Negara Malaysia (BNM) Governor Abdul Rasheed Ghaffour said on 6 October that the banking industry and PayNet are building industry-wide fraud alert capabilities, with pilot testing among selected banks targeted for the first half of 2027. The alerts are intended to prompt customers to "pause, think and verify" before completing a transaction.

Figures: the financial sector prevented about RM1.9 bn of attempted fraudulent transactions in the first half of 2026, ¹ compared with RM1.2 bn in the whole of 2025. ² About about 95% of online fraud cases involved victims deceived into transferring funds themselves. ³ PayNet has flagged more than 1,600 suspicious accounts since October 2025. ⁴

Analysis

Time series: the value of attempted fraud stopped in six months of 2026 already exceeds the full-year 2025 figure, a sign of both more attempts and better detection. The figures cover prevented attempts, not losses, so they do not show whether net fraud losses are rising or falling.

Digital lending link: authorised-push-payment scams target the same mobile channels that digital banks and lenders use for disbursement and repayment. This follows a period of strain on Malaysia's identity and credit-data rails: new MyKad cards failed eKYC checks at several providers in September, and credit bureau CTOS reported unauthorised access to part of its consumer environment. Shared, pre-transaction alerts would add a network-level control on top of each lender's own checks.

Counterpoints and uncertainties

Pilot scope, participating banks and the alert design were not specified, and the timeline could slip. Warnings that customers routinely click through may have limited effect on authorised scams, which rely on persuading the victim.