ON November 4, 2026, a friend in Kuching came across a social media advertisement offering an “airport privilege card” for only RM8. Promoted in a friendly Malaysian voice and bearing the branding of a national airline, the offer appeared genuine and trustworthy.
After making payment by card, however, he discovered that RM863.14 had been charged instead of the advertised RM8. The payment was processed by a merchant in Johannesburg, South Africa, rather than an airline or Malaysian company.
Regrettably, his experience is not unique. Similar incidents are increasingly affecting Malaysians as online scammers employ ever more sophisticated and convincing methods.
How the trap is set
Every element of this scam is carefully designed to appear legitimate and lower victims’ defences. The offer itself is inexpensive, making it seem harmless and discouraging closer scrutiny.
To enhance credibility, scammers often misuse the name and branding of well-known airlines or trusted organisations, creating the impression of an authentic promotion.
The advertisement may feature a familiar Malaysian accent, giving it a local and trustworthy feel. However, advances in artificial intelligence (AI) now make it easy to generate convincing voices that reveal little about the true identity of those behind the scheme.
Ultimately, the scammers’ objective is to obtain card details, which can then be used for unauthorised transactions or recurring charges through overseas merchants that are difficult to trace.
Spotting a scammer before you pay
Most social media scams leave clues. Watch for these warning signs:
- A price too good to be true. Lounge access and “privilege cards” are never sold for a few Ringgits. The tiny price is the hook, not the real charge.
- A big brand on a small, new page. Real airlines and banks have verified accounts with long histories. A recently created page with few genuine posts and comments switched off is a red flag.
- Requests for card details in a chat or form. If a social media account, WhatsApp or Messenger chat asks for your card number, CVV or OTP, assume it is a scammer.
- Pressure to act now. “Only today” offers and countdown timers are designed to stop you thinking.
- Links that don’t match the brand. Misspellings, extra words or unfamiliar domain endings mean it is not the official site.
- A voice or video that feels off. AI voices may have odd pauses, flat emotion or mismatched lip movement.
- A foreign merchant on the payment page. If a supposedly Malaysian service bills through an overseas company, please report to your bank immediately to stop payment.
Protecting yourself
A few simple habits stop most scams:
- Buy only from proven providers. Purchase travel and airline services from the airline’s official website or app, your bank, or well-known licensed platforms – never from a page that merely uses an airline’s name.
- Verify independently. Contact the airline through its official website or published hotline, not the links or numbers in the advert.
- Never share card details on social media. No genuine company asks for your card number, CVV or OTP through comments or direct messages.
- Read your OTP message carefully. Your bank’s SMS or app approval shows the real amount and merchant. If it says RM863.14 instead of RM8, or names a foreign company, do not approve it.
- Set up card protection. Turn on transaction alerts, lower your online spending limit, and disable overseas online transactions unless needed. Consider a separate card with a small limit for online purchases.
- Check the account behind the advert. See when the page was created, whether it is verified and what real customers say. Searching the page name plus “scam” often reveals warnings.
- Talk to someone first. Ask a family member or friend before paying an unfamiliar seller. Scammers rely on us deciding alone and in a hurry.
- Ignore unknown callers; verify agents’ profiles, block suspicious accounts.
If you have already been charged
Act fast – the sooner you move, the better your chance of recovering money.
- Call your bank immediately. Block the card, dispute the transaction and ask about a chargeback.
- Call the National Scam Response Centre (NSRC) at 997. It works with banks and police to trace and freeze stolen funds.
- Lodge a police report. Your bank will usually need one.
- Keep evidence. Screenshot the advert, page, chats, payment page and bank statement before they disappear.
- Report the account to the platform and warn friends and family.
Before paying anyone unfamiliar, you can also check phone numbers and bank accounts on the police’s Semak Mule portal.
Pause before you pay
Social media has made shopping easier but it has also given scammers a stage, a borrowed brand and now an AI voice that sounds like our neighbour. The RM8 offer that became a RM863.14 charge in Kuching is a reminder that the cheapest deal can be the most expensive mistake.
The rule is simple. If a social media account asks for your credit or debit card details, treat it as a likely scam. Buy from proven, official service providers – not from someone using a national airline’s name to promote an illegal business.
Take ten seconds to check. Share this with your parents, your children and your colleagues. One pause could save someone you love from becoming the next victim.
The views expressed here are those of the writer and do not necessarily represent the views of Sarawak Tribune. The writer can be reached at drjohnlau@gmail.com.
