Touch 'n Go eWallet Fraud: How Malaysians Are Losing Money to Scammers

Touch 'n Go eWallet has become the heartbeat of daily transactions in Malaysia. From paying for nasi lemak at the mamak stall to splitting bills with friends, over 20 million Malaysians rely on TNG eWallet every day. But as adoption grows, so does the creativity of scammers targeting the platform.

Bank Negara Malaysia reported a 67% increase in financial fraud cases involving e-wallets in 2025, with Touch 'n Go eWallet being the most frequently impersonated brand. এখানে রয়েছে how scammers operate and how আপনি পারেন protect yourself.

The Fake Top-Up Scam

This is the most widespread TNG eWallet scam in Malaysia. It works like this: you see an advertisement on Facebook, Instagram, or Telegram offering discounted top-ups. "Reload RM100, get RM150 in your eWallet!" The offer seems too good to pass up.

You contact the seller, who asks you to transfer money via bank transfer or another eWallet. They promise to top up your TNG eWallet instantly. Of course, after you pay, the seller vanishes. Your WhatsApp messages go unanswered, and the social media account disappears.

Why People Fall for It

The scam works because TNG eWallet does offer legitimate promotions and cashback. Scammers exploit that expectation. They use stolen logos, fake testimonials, and even create WhatsApp Business accounts that look official.

কীভাবে এড়াবেন It

• Only top up through official channels: the TNG eWallet app, authorised reload agents, or your linked bank account.
• No legitimate promotion requires you to transfer money to a personal account.
• Report suspicious ads on the platform where you see them.

WhatsApp ফিশিং Links

Malaysia's most popular messaging app has become the primary delivery system for TNG eWallet ফিশিং আক্রমণs. You receive a WhatsApp message — sometimes from an unknown number, sometimes from a compromised contact — containing a link.

Common messages include:

Message Type	Example
Prize notification	"Tahniah! You won RM500 TNG credit. Claim here:"
Account suspension	"Your TNG eWallet will be suspended. Verify now:"
Cashback offer	"Special CNY cashback RM88. Tap to claim:"
Security alert	"Unauthorized login detected. Secure your account:"

The link leads to a website that looks exactly like the TNG eWallet login page. You enter your phone number and PIN, and the scammer now has your credentials. Within minutes, they drain your balance or link your eWallet to their device.

লাল সতর্কতা to Watch For

• The URL is not tngdigital.com.my — look for misspellings like tng-digital.com or touchngo-wallet.my.
• The message creates urgency ("Act within 24 hours or your account will be locked").
• You are asked to enter your PIN or password outside the official app.
• The message arrives from an unsaved number or a contact who would not normally send you such links.

Social Engineering via Phone Calls

A newer and more sophisticated attack involves scammers calling you directly, posing as TNG eWallet customer service. They might say:

• "We detected a suspicious transaction on your account."
• "Your eWallet has been flagged for money laundering."
• "আপনাকে করতে হবে verify your identity to keep your account active."

The caller sounds professional, may know your name, and might even reference a recent transaction. They ask you to share your TAC (Transaction Authorization Code) or guide you through steps that ultimately give them access to your account.

This is a form of social engineering. Real TNG eWallet staff will never call you to ask for your PIN, TAC, or password. If you receive such a call, hang up immediately and report it through the app.

The Fake Merchant QR Scam

At pasar malams and small stalls, scammers place their own QR কোড stickers over legitimate merchant QR কোডs. You scan what you think is the restaurant's payment code, but the money goes to the scammer's account. The merchant does not realize the swap until end-of-day reconciliation.

কীভাবে চিনবেন It

• Look for QR কোডs that appear to be stickers placed on top of other stickers.
• Verify the merchant name that appears on your screen before confirming payment.
• If the display name does not match the business, do not proceed.

Protecting Your TNG eWallet Account

এখানে রয়েছে a comprehensive checklist:

Action	Why It Matters
Enable biometric login	Adds a layer beyond your PIN
Set transaction limits	Caps potential losses
Never share your TAC	This is your one-time password — treat it like cash
Check linked devices regularly	Remove any device you do not recognize
Enable transaction notifications	Spot unauthorized activity immediately
Use a strong, unique PIN	Avoid birthdays or repeated digits

কী করবেন If You Have Been Scammed

Time is critical. Take these steps immediately:

1. Open the TNG eWallet app and change your PIN.
2. Call the TNG eWallet hotline at 03-5022 3888.
3. File a report at the nearest police station — you will need the report number for further action.
4. Report to Bank Negara's BNMTELELINK at 1-300-88-5465.
5. Lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) at aduan.skmm.gov.my.

Sharing Sensitive Information নিরাপদে

One reason ফিশিং works so well is that people are accustomed to sharing links, account details, and transaction references over WhatsApp without any সুরক্ষা. If আপনাকে করতে হবে share sensitive financial information — like account numbers, transaction references, or ভেরিফিকেশন কোডs — sending them in plain text over chat is risky.

Tools like LOCK.PUB let you wrap sensitive information behind a password. Instead of pasting your bank details directly into a WhatsApp message, you create a পাসওয়ার্ড-সুরক্ষিত link that expires after being viewed. The recipient needs the password you share separately — ideally via a different channel like a phone call.

This approach significantly reduces the risk of sensitive information being exposed if your WhatsApp account is compromised or if messages are forwarded accidentally.

The Bigger Picture

E-wallet fraud in Malaysia is not just a TNG problem — it reflects a broader challenge as the country accelerates toward a cashless economy. The government's push for digital payments under the MyDIGITAL initiative means more Malaysians are transacting digitally than ever before, and not everyone has had time to develop strong digital security habits.

Stay sceptical of unsolicited messages. Verify before you click. And remember: if an offer sounds too good to be true, it almost certainly is.

---

Stay safe online. Protect your links, memos, and sensitive data with password সুরক্ষা at LOCK.PUB.