"Pay a Deposit First"? That's a Loan Scam — 6 Red Flags of Advance-Fee Fraud

Advance-fee loan fraud survives because it arrives at exactly the wrong moment — when you need cash urgently and an offer appears that sounds faster and cheaper than anything else. The scammer's product isn't a loan. It's hope, sold one "small fee" at a time until you stop paying. Bank Negara Malaysia maintains a growing Financial Consumer Alert List of entities running exactly this play.

How the scam actually works

1. The hook. An ad, SMS or WhatsApp message offers a loan at an unusually low rate — often "no CCRIS check, instant approval".
2. The fake approval. Minutes after you share your details, congratulations: "approved". Sometimes there's an official-looking letter or app screen.
3. The fee. Before disbursement you must pay — a deposit, "processing", "insurance", "stamp duty", a "release charge". It goes to a personal bank account, not a company.
4. The escalation. Pay once and a new obstacle appears: your account is "frozen", the amount was "keyed in wrongly", a tax is due. Each fix costs another transfer.
5. The vanish. When you stop paying, the "lender" blocks you. The loan never existed; the fees are gone.

The 2026 playbook: WhatsApp, APKs, fake slips

• Impersonating real brands. Scammers pose as staff of licensed lenders and banks on WhatsApp and Telegram, borrowing real logos and licence numbers. The brand is real; the "agent" is not.
• APK install links. You're told to install an app from a link or file — "our secure portal" — instead of Google Play. Sideloaded APKs can read your SMS (including bank TACs) and empty accounts. Never install a loan app from a link.
• Fake "proof" of disbursement. A doctored bank slip or a cheque deposit that shows as a floating balance — used to convince you the money is "stuck" and one more fee will release it.

6 red flags of a loan scam

1. Any payment before disbursement. Deposit, processing, insurance, stamp duty — the word changes, the scam doesn't.
2. Payment to a personal account (or a name that doesn't match the company).
3. Too-good terms: far below market rates, "guaranteed approval", "no checks, blacklist OK".
4. WhatsApp/Telegram-only existence — no office, no SSM registration, no KPKT "WL" licence number you can verify.
5. An APK file or link to install instead of an official app store listing.
6. Manufactured urgency: "offer expires in 1 hour", "quota almost full", pressure to pay before you can think or verify.

What a licensed lender will never ask

A KPKT-licensed money lender operates under the Moneylenders Act 1951: charges are disclosed in a written agreement before you accept, and interest on unsecured loans is capped at 18% per year. There is no legal mechanism for collecting a "release fee" into someone's Maybank account. CreditXpress (Opg Capital Holdings Sdn Bhd, KPKT licence WL3337/07/01-11/020227) charges nothing before disbursement — ever. You apply with your MyKad, see the full rate on screen, and the money reaches your bank account; the first ringgit ever to move is ours to you, not yours to us. Two minutes on the i-KrediKom app verifies any licence.

Already paid? The first 30 minutes

1. Call your own bank first. Ask them to flag/recall the transfer and note the receiving account as suspected fraud.
2. Dial 997 — the National Scam Response Centre (NSRC). The faster you call, the better the chance of freezing funds in the mule account.
3. Lodge a police report at any station or via PDRM's e-Reporting. Bring transfers, chat screenshots, phone numbers and account numbers.
4. Check and report the account on semakmule.rmp.gov.my — PDRM's mule-account database.
5. If you installed an APK: disconnect the phone from the internet, uninstall it, change your banking passwords from another device, and tell your bank.

One more thing: don't let embarrassment stop you from reporting. These operations are industrial — thousands of Malaysians are targeted the same week you were. Every report helps close a mule account faster.