KUALA LUMPUR: Cybersecurity researchers at Kaspersky have identified a wave of Ramadan-themed scams circulating online, designed to impersonate government aid programmes and steal Telegram credentials.
In one campaign observed by the firm, scammers deployed a fraudulent “Bantuan Ramadan RM500” page. Victims are prompted to submit personal details and phone numbers linked to their Telegram accounts, under the guise of checking their eligibility for festive financial assistance.
The primary objective of the scheme is account hijacking rather than immediate financial theft. Once attackers gain access to a Telegram account, they often use it to spread further scam messages or malicious links to the victim’s contacts, allowing the fraud to scale rapidly through trusted social circles.
Cybercriminals frequently exploit festive periods and aid disbursement windows by mimicking the language, visual design, and tone of official announcements. This makes it increasingly difficult for users to distinguish fraudulent messages from legitimate government communications.
These festive-themed scams are part of a broader cyber threat landscape in Malaysia. According to Kaspersky telemetry, 18,875,669 distinct web-borne cyber-threats were detected locally throughout 2025, highlighting the persistent risks facing the nation’s internet users.
Simon Tung, general manager for ASEAN and Asia Emerging Countries at Kaspersky, noted that people often overestimate their ability to spot a scam.
“With advances in technology, cybercriminals can mimic websites of trusted brands, organisations and familiar narratives, making fraudulent messages appear convincing at first glance,” said Tung.
“This is why having dedicated cybersecurity protection on smartphones and computers is increasingly important.”
How to stay safe from online scams
To mitigate the risk of falling victim to these schemes, Kaspersky recommends the following measures:
- Verify before clicking: Avoid links sent by unknown accounts on messaging apps, social media, or via suspicious emails—especially those offering financial aid.
- Check suspicious numbers: Use trusted anti-scam resources, such as the Semak Mule portal, to verify if a bank account or phone number has a history of fraudulent activity.
- Call 997: If you fall victim to a scam, contact the National Scam Response Centre immediately. The 997 hotline operates 24 hours a day to assist victims.
- Install trusted security software: Reliable cybersecurity solutions can detect and block phishing attempts and malicious links in real time.
