Cybercriminals may send malicious attachments through WhatsApp, SMS, email or other messaging apps. These files are often disguised as invoices, payment receipts, bank statements, delivery notifications or photos.

Opening these attachments may install malware that can steal your passwords, personal information or give attackers access to your device.

Not sure how to identify these malicious files? Pro tip: Be extra cautious of unexpected attachments. Look at the file name and never open files ending in: .vbs, .exe, .bat, .cmd, .js, .scr, .msi, .zip, .rar, and Microsoft Office macro-enabled files (.docm, .xlsm).

If you're not expecting the file, don't open it. When in doubt, verify with the sender through another communication channel before opening it.

Ever answered a call only to hear silence or a quick hang-up?
Scammers may be recording your voice and using AI to clone it for impersonation.

Cloned voices can be used to fake emergencies, bypass voice verification, or even impersonate executives for fraud. These scams are often paired with phishing messages posing as trusted brands, leading to fake rewards or payment requests. Remember, legitimate businesses won’t ask for payments to redeem rewards.

IMPORTANT: Avoid responding to unknown callers. Never say “Yes”, hang up immediately, and always verify any urgent or emergency claims by calling back through official channels such as saved contacts or company directories.

Scammers often pose as real businesses like Maxis using phishing emails, SMS, or WhatsApp. They may direct you to a fake website to check your points through the fake points rewards system and tell you to make a small payment to redeem the rewards. But it's a trap! Legitimate businesses don't have such reward systems. This could lead to identity theft or hackers getting into your bank accounts., sometimes even tricking you into paying way more than what was initially offered.

IMPORTANT: Maxis would never ask for your credit card details or PIN number via email. If you are unsure of the authenticity of the message, do contact the organisation and verify.

A public Wi-Fi scam is when a scammer creates a seemingly legitimate looking fake public WiFi network to steal personal information from unsuspecting users. On top of that, even a legitimate public WiFi connection can pose security risks as it can easily be hacked.

For example, you connect to a WiFi network at a cafe to make an online purchase. However, you may not realise that the attacker is collecting your login credentials, credit card information, and other sensitive data.

IMPORTANT: Maxis would never ask for your credit card details or PIN number via email. If you are unsure of the authenticity of the message, do contact the organisation and verify.

A QR code scam is when a scammer creates a fake QR code that looks legitimate to steal personal information or money.

For example, you scan a QR code at a restaurant and enter your information to order food and make payment. But the QR code was fake, and your information is actually being sent to the attacker.

IMPORTANT: Maxis advises its customers to verify the source of the QR code. Only scan codes from trusted sources, and be cautious of unexpected requests for personal information or payments.

The Social welfare scheme fraud is where fraudsters send text messages claiming to be a trustworthy organisation, offering financial aid. They may ask for information such as bank account numbers, causing victims to lose their money, stealing their identity in the process.

An example could be receiving an SMS offering RM500 e-wallet financial aid, but in return, victims are asked to provide their bank details, leading to unauthorised transactions.

IMPORTANT: Maxis reminds customers to be vigilant against social welfare fraud. Do not disclose personal information to unknown sources and protect yourself by verifying information sources.

Ever received missed calls from international numbers you do not recognise? They are likely scam calls generated by fraudsters. They will call a user and hang up right before it is answered, hoping the person will return the call. These numbers are charged at premium rates, and users who call back will be hit with exorbitant charges.

IMPORTANT: Never return calls to international numbers that you don’t recognise.

When browsing the web, you might encounter pop-ups that ask you to click on a link to fill out a survey or choose a gift box to win a "prize" (such as phones, electronic devices or accessories). You will then be led to a payment page where you have to “redeem the prize” by paying a small amount via credit card, or enter your personal details or bank details.

IMPORTANT: Maxis will never ask you to fill out forms with personal details. If you are browsing the web and receive this pop-up, please exit the browser immediately.

SIM cloning is a serious issue where scammers create duplicates of your SIM card to access information stored on your phone.

For example, you receive a notification of unusual activity on your account. Turns out your SIM card has been copied, giving the scammer access to your personal data and mobile number, possibly resulting in financial loss, identity theft, and unauthorised use of your phone number.

IMPORTANT: Maxis will never compromise on the security of its users and is continuously implementing advanced measures in protecting against SIM swapping, with secure authentication processes and customer education.

Transaction Authorisation Codes (TAC) are a security measure to prevent unauthorised transactions and activities, but scammers have found different ways to get around the system by using you as the bait.

For example, scammers try to obtain the TAC such as impersonating a Maxis employee and contacting the victim to “reward” them with free data and credit. The unsuspecting user is asked to share the TAC received via SMS before receiving their prize, but when they do, credit is syphoned from their prepaid account.

IMPORTANT: This method can also be applied to your bank account.

Targeting online shoppers, this scam tricks buyers into downloading an APK file on their phone to obtain their personal details.

Scammers would use social media to advertise services for sale. Upon agreement, victims have to download an APK file and are asked to register their personal information, email or even credit card number. A 'page error' would pop-up upon registration, and scammers would take this opportunity to syphon money from victims’ bank accounts.

IMPORTANT: Avoid downloading APK files, especially from unverified sources.