What is malware
Scammers use malware - a harmful & nasty software that installs itself on your device - to relocate funds from your account & commit identity theft.
How do malicious apps work?
a. They are sent through chats, links, attachments, etc.
b. The app will ask for your permission to be the default SMS app.
c. If you tap ‘Allow’, it can steal your SMS, TAC or OTP and compromise your banking details.
What do I do if I tapped ‘Allow’, and my eWallet details are compromised?
a. Uninstall suspected malicious app.b. Change your eWallet and financial passwords.
What will happen if you install the fake app
a. The fake app will display a fake payment page for you to proceed with the payment.
b. This fake payment page in the malicious app is designed to steal your credentials.
What you need to know about mule accounts?
a. A mule account is an account used to receive and transfer funds obtained illegally.
b. A scammer may contact you and persuade you to rent out your eWallet to them (to conduct illegal activities) in exchange for a reward.
c. A mule account can be charged under Malaysian laws, including blacklisting the account holder.
How to prevent a Mule account scam?
a. Never accept job offers, rewards, or any offers that may seem too good to be true in exchange for your eWallet account.
b. Do not help anyone to receive or transfer funds from/to third parties.
c. You could be violating the law if illegal activities or transactions are found in your eWallet account and legal action may be taken against you.
How does phishing link work?
Phishing links are URLs / links sent to your mobile number via SMS / WhatsApp / other messaging apps for various reasons. Please be reminded that Touch ‘n Go eWallet will NOT send links to users for login or any purposes.
Suspicious links that brings you to a fake “Touch ‘n Go” or “Touch ‘n Go eWallet” login page that looks real.
The scammer will get all your details the moment you key them into the page.
Touch ‘n Go eWallet will NOT send links to users for login or any purposes.
Always login to your Touch ‘n Go eWallet only via the app downloaded from the OFFICIAL App Store or Play Store.
What is phishing call and how does it work?
Scammers will call you and impersonate themselves as employees of any companies. They will ‘verify’ you with your personal details such as your IC number, vehicle number, etc. These scammers will then ask for your login credentials such as your OTP SMS.
Touch ‘n Go eWallet employees will NEVER request for your OTP SMS.
Touch ‘n Go eWallet employees will NEVER share their employee ID with you.
Touch ‘n Go eWallet employees will NEVER request for your Personal Identification Number (PIN).
Be alert and vigilant! Scammers are meant to be convincing. They know how to trick you into providing your details.
NEVER reveal your OTP SMS.
NEVER reveal your login credentials such as your security question and answer/ OTP SMS / Personal Identification Number (PIN).