This post is kind of long, but I hope this post will benefit others in preventing people from getting scammed.
TL;DR: (1) I did not get scammed. (2) You still can get scammed no matter how careful you are. (3) Reading how scammers operate would help prevent you from getting scammed. (4) Do NOT give any info to strangers who call you, even if you knew the number, phone number can be hacked…. blame the telco!
All scams are exploiting two main things: your fear or your greed.
You may think you won’t fall into the trap, but think again, you can never be too careful enough.
Scammers can’t scam you if they cannot gain your trust first, most scammers failed on that, but be aware, good scammers will scam you when you least expected.
Two days ago, I received a call from a number that is already in my phone contact list as Public Bank Credit Card Centre. The ‘officer’ asked me if I have made a transaction at a certain place. I told him I was having the card with me and never went to that place. Then he proceeded to tell me my full name, identify number, phone number etc. and asked me if those info are correct. In my mind, the call is from the centre and it is obvious they knew my info. Then he told me the card number of the alleged transaction, the billing address is not my address. So, he asked for my permission to block the card. He said I need to make a report with Bank Negara (Central Bank) or else I would be billed the RM8K+ of the credit.
Well, you may think why I bother to continue to talk to the officer. Firstly, the call is from the credit card centre that I already knew. Secondly, it is not uncommon to receive such a call to verify transaction. Thirdly, he didn’t ask me any info. I usually very careful not to give any info when someone call me. The fact that I knew that number is the correct credit card number does make me lower my guard a little. Somewhat, I have trusted the officer a bit, that is the first requirement of a successful scam. Fourthly, there were just too many data breach in Malaysia that I am not surprise at all my info is all over the place, so I really believed that this particular identify theft was real.
At that point of time, I was fully aware of the various scams going around, and knew to be careful with such calls. At that point of time, since i believed my identify has been stolen, I just think I need to make a report at Bank Negara. My immediate concern at that time was what other breaches were done using my identify. I was put in a state of fear, one of the requirement for a successful scam.
Everything seems fine, nothing to worry about, and I just need to make a report. I was prepared to google Bank Negara number and give a call.
Then, the officer said he would transfer my call to Bank Negara straight due to the urgency. That is first hint that it was a bit weird, but I did not suspect anything. Before I could ask him for the phone number, he already “transferred” the call.
I have heard about Bank Negara scam before, but I did not read the full details.
A Chinese man, introduced himself as Inspector Chong Eng Long, took the call. He spoke very fluent Malay, and continue to speak Malay despite my attempt to speak English with him.
He asked me what number called me earlier, I told him it was Public Bank number. He asked for the number, but when I tried to find the number at my call history, I could not find it. That is the second hint that it was fishy, I still did not suspect anything. It was obvious now that I was still in the same call as the call earlier.
I did make a mistake telling him my current address and office number, as I believe they (including the first caller) already have this info. ☹
Then he proceeded to tell me that the case would be investigated under certain Act and all that, in perfect Malay, sounds pretty believable that he was a police officer.
Then he said he needed to ask me some info that would be voice-recorded, and the recording would be used as High Court evidence. Sounds fair enough for me.
He asked me if I want the question and answer to be in Chinese or not. I told him Malay or English is fine for me, but I may most likely mixed English with my so-so Malay. Then he asked if I want to use Cantonese. That is another hint something not right. I told him I cannot speak Cantonese.
I still did not suspect anything, though I feel a bit weird at this point.
Then I asked him, what he wanted to ask me in the voice-recording. He said he needed to ask me for my other bank account info. I asked him, “You are Bank Negara, shouldn’t you already have all my info?”
I asked how long the question and answer session would take, he said the voice-recording would take 30 min and there must not be any noise or another person’s voice. Sounds fine to me. i told him I am expecting someone in my house soon, and I could not possibly remember all my bank info without checking my computer.
He said may be it is better I go to the Bank Negara branch at KL (he gave the correct address) to make the report, that sounds pretty much like the words from typical police officers as we have stereo-typed them to be. His seemingly lack of enthusiasm to take my report does make me trust him a little bit more.
When things are moving very fast, it is very hard to think clearly, especially you believed you are talking to a police officer. You may think it is so obvious I should hang up, but when you are in the situation, it is very different story.
Something tell me something is not right, but it is not strong enough for me to hang up the phone straight at that point. Something made me, an angel perhaps, to tell him it is better he gave me the phone number so that I can call him back with all the bank info on my hand.
Right after I hang up the phone, I was pretty certain I was pretty close to be a victim of a scam, even though I think I eventually would not tell him my bank info, but you would never know when you are in that situation at that time.
I then checked that the number he gave me was indeed Bank Negara number and when I called back the number, as expected, it went to a voice machine that informed me about the operating hours, it was a public holiday that day.
I called back the same bank phone number, and the real bank officer told me I did not have the alleged credit card, and they never have any cards that start with those digits I gave them.
I have to say, scammers are getting more and more complicated.
So, the lessons to be learned are:
- There is still a possibility that you still can get scammed no matter how careful you are. Do not assume you won’t. Always on your guard.
- Reading how scammers operate would help prevent you from getting scammed. I read about Bank Negara scam before, but I did not read in detail, else I would have recorded the voice conversation and play along.
- Do NOT give any info to strangers who call you, EVEN if you knew the number, phone number can be hacked…. blame the telco! I thought I was careful enough in this and have encountered such scammers before without problems. In the case here, I simply did not realize our telco company can be that sucks, despite knowing such phone hack can happen!!!!!!!!
Similar scams in the news just one day ago: https://www.nst.com.my/news/crime-courts/2017/12/309867/bank-executive-and-police-sergeant-inspector-cons-woman-rm90000