Romance Scams in Malaysia: How to Identify One and What Evidence to Preserve

Malaysia's romance scam problem is severe and growing. In 2023, PDRM recorded over 5,000 love scam cases with losses exceeding RM153 million. The actual figure is believed to be three to four times higher — most victims, particularly men, never report out of shame.

The perpetrators are not lone individuals. They operate from organised compounds — primarily in Myanmar, Cambodia, and the Philippines — where teams of workers manage dozens of fake relationships simultaneously using scripts, fabricated identities, and AI-generated profile photos.

Understanding how these operations work is the first step to recognising one before it costs you everything.

Contact typically begins on Facebook, Instagram, LinkedIn, or dating apps. The profile is attractive, successful, and often claims to be an overseas Malaysian — a doctor working in the UK, an engineer on an oil rig, a businessperson in Singapore.

The initial conversation is warm, attentive, and flattering. The scammer invests significant time building rapport. They remember details you share. They ask thoughtful questions. They are available at unusual hours (because they are working in shifts).

Red flags at this stage:

• Profile created recently with few connections
• Photos that appear professionally taken but reverse-search to stock images or stolen from another person's social media
• Reluctance to video call (or video calls that are suspiciously brief or low quality)
• Rapid escalation of emotional intimacy

Once trust is established, the scammer introduces a financial opportunity — typically a cryptocurrency trading platform, a forex investment scheme, or a business venture. They share "proof" of their own returns. They offer to guide you through the process. This financial angle often overlaps with identity theft tactics — the same perpetrators who run romance scams frequently use stolen identities to operate the fake investment platforms.

The platform they direct you to is fake. Initial small withdrawals are permitted to build confidence. Then larger deposits are encouraged. When you attempt to withdraw significant funds, the platform demands "taxes," "fees," or "verification deposits" that never end.

Red flags at this stage:

• Investment platform not registered with the Securities Commission Malaysia (SC)
• Platform URL registered recently or with privacy-protected registration
• Returns that are implausibly high (20%+ monthly)
• Pressure to invest more before withdrawing

If the investment angle fails to extract sufficient funds, the scammer introduces a personal crisis — a medical emergency, a legal problem, a business deal that needs urgent bridging funds. The emotional investment you have made makes it difficult to refuse someone you believe you love.

1. Reverse image search their profile photos using Google Images or TinEye. Stolen photos often appear on other profiles or stock photo sites.

2. Request a live video call and ask them to perform a specific action — wave with their left hand, hold up a piece of paper with today's date. AI deepfakes and pre-recorded videos cannot respond to real-time requests.

3. Check the investment platform against the Securities Commission Malaysia's list of licensed entities at sc.com.my. If it is not listed, it is not legitimate.

4. Search the person's name and photo on PDRM's scam alert portal and the National Scam Response Centre (NSRC) database.

Do not confront the person or delete any communications. Preserve:

• All message history — WhatsApp, Telegram, Facebook Messenger, Instagram DMs, dating app messages. Export full chat histories.
• All profile information — screenshots of their profile, photos they sent, any documents they shared (passports, medical certificates, business cards — these are often fabricated but forensically useful)
• All financial records — every transfer you made, to which account, on which date
• The investment platform — screenshots of your account, the platform URL, any communications with "customer support"
• Any phone numbers or email addresses used in the communication

• PDRM CCID: +603-2610 1559 or lodge a report at your nearest police station
• National Scam Response Centre (NSRC): 997 (24-hour hotline)
• Securities Commission Malaysia (for investment fraud): +603-6204 8999
• Your bank: Immediately if any transfers were made

Romance scam perpetrators are sophisticated. They use VPNs, spoofed numbers, and multiple layers of fake identity. A police report alone rarely leads to prosecution without a forensic evidence package that traces the digital footprint of the perpetrator.

A professional forensic investigation for identity and impersonation cases can: identify the real accounts behind fake profiles, trace the financial flow of transferred funds, document the attack methodology, and produce a report suitable for PDRM's cybercrime division and civil proceedings.

If you have lost a significant sum, the forensic documentation is not optional — it is what separates a case that gets investigated from one that gets filed and forgotten.

You are not alone, and you are not foolish for being targeted. These operations are run by professionals. Getting professional help to pursue them is the appropriate response.