SCAMMERS TODAY ARE BETTER THAN YOU THINK

 

The typical MO may still be the email, but sophisticated scams now go much further. They may use personal or business information obtained from data brokers or illegal sources to make their approach appear genuine.

With AI, scammers can generate convincing messages, professional attachments, logical explanations and even imitate the language and style of legitimate organisations. A displayed sender address can also be spoofed. Checking the sender address alone is no longer enough.

Watch what happens when you reply or make contact. If the return email, phone number, WhatsApp, payment details or other contact information differs from the organisation’s officially published channels, STOP and verify independently.

Deepfake videos, fake websites, testimonials and reviews are now part of the toolkit. Some fake websites even appear in search results. You may search for the company yourself or ask AI about it and still find information that looks legitimate. Some syndicates even operate overseas call centres and employ people trained in psychological manipulation.

A company may even be registered and have a business address. That does not automatically make the business, investment scheme or promoter legitimate. Some addresses may simply be rented temporarily to create an appearance of credibility.

This is especially dangerous with so-called AI trading, robo-trading and investment platforms.

In Malaysia, verify independently through legitimate authorities such as the SC, BNM, PDRM/CCID and other relevant enforcement or regulatory channels.

But remember: use the exact registered company name. Scammers may create names almost identical to legitimate companies, changing only a word, abbreviation, punctuation or corporate suffix.

And never assume: “It is not on the warning list, therefore it must be legitimate.” A scam may operate for only one or two months, collect substantial funds and disappear before complaints or investigations result in an official warning.

Some criminals may even calculate that the potential gain outweighs the penalty. When one is caught, others may quickly change the company name, bank accounts or operating structure. Sometimes the people presented as the “bosses” are merely the small fish, while the real masterminds remain hidden.

So, contact the organisation only through independently verified official channels, not the details supplied by the person who approached you.

Luxury cars. Sports cars. Extraordinary profits. Glowing testimonials. Claims that “everyone is making money.”

Ask yourself:

“If this looks too good, too convincing and promises too much, what am I missing?”

Don’t be impressed by how convincing a scam looks.

Be impressed by how thoroughly you verify it.

In the age of AI, verification is no longer optional. It is your first line of defence.

SCAM ALERT: Don't Let a $12.2 Million "Contract" Fool You

I received an email claiming to be from a Contract Administrator of ExxonMobil in the United Kingdom, offering me a supposed US$12.2 million contract opportunity.

At first glance, it may sound like the kind of business opportunity anyone would be interested in.

But there were several HUGE red flags.

1. The sender's email doesn't match the company.

The email came from ......................... @ .......com dot br a Brazilian domain - while claiming to represent ExxonMobil UK.

2. The "secret contract" story - a no hush-hush thing

The sender claimed there was an "overpriced contract" worth US$12.2 million that had supposedly remained undisclosed within the organisation.

3. They proposed "re-profiling" the funds through me as the contractor. This is extremely suspicious and potentially suggests an attempt to involve the recipient in financial wrongdoing.

4. No proper procurement process.

There was no tender reference, project details, scope of work, official procurement procedure, contract number or legitimate corporate contact.

5. The message tries to create curiosity and greed.

"US$12.2 million", "undisclosed", and "mutually beneficial partnership" are precisely the kind of phrases designed to make people respond before thinking.

The email was already detected by my email system as Junk/Trash.

My advice:

• DO NOT REPLY.
• DO NOT CLICK THE LINKS.
• DO NOT PROVIDE YOUR COMPANY REGISTRATION, BANKING, IC/PASSPORT OR OTHER PERSONAL INFORMATION.
• DO NOT PAY "PROCESSING", "REGISTRATION" OR "LEGAL" FEES.

And remember:

A famous company's name in an email does NOT make the email genuine.

If you receive something similar, verify the opportunity independently through the company's official website and official corporate contact channels never through the contact details provided in the suspicious email.

For business owners, consultants and contractors especially, please stay alert. Scammers know that a seemingly legitimate high-value contract can be very tempting.

When the money sounds too good and the process sounds "too secret" - stop, verify and investigate.

HOW MCMC RESPOND TO ONLINE SCAMS - BEFORE YOU SAY ANYTHING, READ THIS FIRST

To those who thinks that Malaysian Communications and Multimedia Commission is not doing a good job (Think Again - get the facts right)

Malaysian Communications and Multimedia Commission (MCMC) has responded to the rising tide of online scams in Malaysia.

1) Content Take-Downs and Enforcement Actions

a) Significant removal of scam content

In 2024, MCMC, alongside social media service providers, removed 66,507 scam-related contents. From 1 January to 26 February 2025, an additional 19,200 items were taken down.

From January to mid-April 2025, approximately 30,427 scam-related items and 10,493 fake contents were removed.

By 1 April, MCMC had taken down 32,436 scam-related posts, amounting to an estimated RM799 million in scam losses.

As of 1 August 2025, the total number of removed scam posts reached 49,082, reflecting the ongoing threat and volume Malay Mail

2) Regulatory Measures and Collaboration

a) Stronger partnership with the Securities Commission Malaysia (SC) - MCMC formally stepped up cooperation with the SC to enhance regulatory oversight of online scams. The effort includes joint enforcement, public education, and leveraging artificial intelligence for faster detection and takedown of scam content,

b) New subsidiary legislation in progress - MCMC is preparing a subsidiary regulation under the Online Safety Act (gazetted in May 2025). This includes requiring identity verification for social media advertisers (similar to Singapore) and transparency of ad sponsors (modeled after Taiwan). As of 15 July 2025, they have removed 46,817 scam content items in accordance with community guidelines,

3) Educating the Public and Enhancing Digital Literacy

Safe Internet Campaign (KIS) - MCMC launched the Safe Internet Campaign targeting primary and secondary schools, as well as public universities. By May 2025, nine schools had participated, raising digital awareness among younger Malaysian.

4) Fact-checking tools and chatbot

Tools like Biar Betul on RTM, the AIFA (Artificial Intelligence Fact-check Assistant) chatbot, and the portal Sebenarnya.my help users verify news and scams. As of July 31, 2025, AIFA had processed over 142,000 messages, about 769 per day.

5) Tackling Fake and Impersonated Accounts

a) Removal of impersonating accounts

In September 2025, MCMC took down 31 Facebook accounts falsely claiming to represent the National Scam Response Centre (NSRC). They warned the public to obtain NSRC information only through official channels and urged vigilance against impersonators.

It’s definitely not an easy task, try handling it yourself and you’ll understand. Instead of complaining, let’s show our support for Malaysian Communications and Multimedia Commission.

Cults, Charisma, and Cash: The Dark Web of Manipulation in Religion, Influence, and Crime - overview by Nik Zafri

Not every guru is wise. Not every movement is noble. Question everything.

Cults have both captivated and horrified the world, cloaked in charisma, religious undertones, and promises of salvation or special knowledge. While many think of cults as isolated religious oddities, the cult mindset and mechanisms have quietly evolved, seeping into modern scams, fake influencer cultures, and even organized crime. At the core, it’s not just about belief, it’s about control, manipulation, and ultimately, money.

Terrorism often begins this way too through cult-like indoctrination, amplifying grievances, promising martyrdom, or utopia. The ultimate currency? Blind loyalty, chaos and cash.

A. CLASSIC CULT MOVEMENT EXAMPLES

1. Heaven’s Gate (USA)

A doomsday cult in the 1990s that combined apocalyptic Christianity with science fiction. Members believed that a spaceship trailing the Hale-Bopp comet would transport them to salvation after death. This led to a mass suicide of 39 people in 1997.

2. Aum Shinrikyo (Japan)

Led by Shoko Asahara, this cult mixed Buddhist and Hindu ideas with conspiracy theories. In 1995, they carried out a deadly sarin gas attack on the Tokyo subway. Despite the violence, members were brainwashed into viewing Asahara as a divine figure.

3. Sky Kingdom (Malaysia – Ayah Pin)

Ayah Pin claimed to be a reincarnation of religious figures across major faiths. His commune was famous for its large teapot structure, symbolizing purification. Despite its seemingly peaceful doctrine, authorities saw it as deviant. It drew followers through the promise of divine truth and spiritual superiority, even as critics pointed to manipulation and financial exploitation.

B. MODERN CULT MECHANICS

Cults don’t always need compounds or temples. Today, cult-style tactics appear in subtler forms:

• Fake Influencers and Online Gurus - Self-proclaimed “mentors” or “wealth coaches” build loyal followings using motivational language, fake luxury, and manipulated social proof. They mimic cult leaders, offering a vision, creating an “us vs. them” mindset, and using fear of missing out (FOMO) to retain loyalty,

• Scammers and Ponzi Schemers - using the power of suggestion, many scammers construct narratives that blend religious hope with psychological manipulation. They often play on trust, faith, or status. Many victims don’t just lose money, they lose identity and social support after being brainwashed into defending their exploiters.

C. MANIPULATION, MAGIC AND MIND GAMES

While I'm not denying that black magic is occasionally invoked in cult narratives especially in Southeast Asia, the real power lies in suggestion and psychological manipulation. Among them are :

• Repetition and Isolation eventually breaking down critical and logical thinking,

• Religious symbolism adds emotional weight,

• Charismatic leadership creates dependence,

• Cover-ups and conspiracies are used to protect the inner circle and silence dissent.

D. MONEY TRAIL - ORGANIZED CRIME AND CULT POWER

Many cults have financial operations that resemble organized crime syndicates.

• Money laundering through donations or businesses,

• Flaunting of wealth to attract new recruits ("If God blesses me, follow me!"),

• Land grabs, crypto scams, fake MLMs,

• Sexual exploitation masked as spiritual rituals

• Layered trust networks that prevent whistleblowing

At the heart of it all, even the most spiritual-sounding cult often boils down to power and money. Control of assets, of people, of belief and the ability to extract wealth in plain sight.

CONCLUSION

The cult isn’t dead, it’s just rebranded. Whether through robes and rituals or reels and retweets, the mechanics remain: isolate, indoctrinate, exploit. As lines blur between spiritual enlightenment and psychological enslavement, the world must sharpen its awareness. What starts as a community of belief can easily become a web of manipulation and when power is unchecked, the victims are often invisible until it’s too late.

A BRIEF ON HOW TO DETECT FRAUD IN BANKING AND FINANCIAL SECTORS - Nik Zafri

Please also read my other articles about money laundering and anti-corruption.

Detecting fraud is usually linked money laundering, and corruption in the banking and financial sectors is crucial for maintaining the integrity of the financial system. there are strategies and technologies need to be taken into account.

1. Fraud Detection

a. Transaction Monitoring Systems (TMS)

These systems analyze transaction patterns in real-time or near real-time to detect suspicious activities. They use predefined rules, statistical models, and machine learning algorithms to flag anomalies. This will enable banks to proactively detect and investigate suspicious activities, helping to prevent them from escalating into more significant financial crimes. By identifying and halting illegal transactions early, banks can avoid potential losses and reduce the risk of regulatory scrutiny.

b. Anomaly Detection (AI)

Machine learning techniques (AI), such as supervised and unsupervised learning, are employed to detect deviations from typical behavior. These methods can identify unusual patterns that may indicate fraud. Machine learning models has proven effective in detecting anomalies by identifying unusual patterns in vast datasets. These AI models continuously learn from transaction data, adapting to emerging fraudulent schemes in real-time.

c. Behavioural Analytics

Sometimes, a user behaviour can also indicate fraudulent activity. These include frequent login times, transaction types, and sometimes at different locations and mixture of transactions (frequent use of cash deposit machine with significantly large amounts at different locations and online transfers/interbank transfer) 

d. Multi-factor Authentication (MFA)

Implementing MFA helps in preventing unauthorized access to banking systems, which is a common precursor to fraud. It can pose problems to the customers with too many authentications and verifications but it will protect both customers and bank from fraud and scamming. MFA adds an extra layer of security beyond just a password. Customers must provide two or more verification factors—such as something they know (a password), something they have (a smartphone or security token), or something they are (a fingerprint or facial recognition). This makes it much more difficult for unauthorized users to gain access, as even if they manage to obtain one factor, they would still need the additional factor(s) to successfully log in.

2. Money Laundering Detection (Anti-Money Laundering or AML)

a. Know Your Customer (KYC) and Customer Due Diligence (CDD)

KYC involves verifying the identity of customers, while CDD involves ongoing monitoring of their transactions to help identify potentially suspicious behavior linked to money laundering.

b. Suspicious Activity Reporting (SAR)

Banks are required to file SARs for any transactions that they suspect may involve money laundering. These reports are then reviewed by financial regulatory authorities such as Bank Negara.

c. Risk-Based Approach

Financial institutions categorize customers and transactions based on their risk level. Higher-risk transactions are monitored more closely to detect potential money laundering.

d. Transaction Structuring Detection

Money launderers often structure transactions in small amounts to avoid detection. Advanced algorithms can detect patterns of structuring across multiple accounts or over time.

e. Beneficial Ownership Identification

It's essential to determine the true owners behind complex corporate structures, as money launderers often hide behind layers of corporate entities.

3. Corruption Detection

a. Conflict of Interest Checks

Regular audits and checks can help identify situations where employees or executives of the bank might have conflicts of interest, potentially leading to corrupt activities via specific client favoritisms.

b. Vendor and Third-Party Risk Management

Financial institutions should monitor and evaluate the integrity of vendors and third-party relationships to detect corrupt practices, such as bribery or kickbacks.

c. Whistleblower Programs

Encouraging employees to report corrupt activities internally through protected channels can lead to the early detection of corruption.

d. Internal Audits and Controls

Regular internal audits can identify weaknesses in financial controls that could be exploited for corrupt purposes.

4. Technology and Data Analytics

a. Artificial Intelligence and Machine Learning:

AI and ML are increasingly used to detect complex fraud, money laundering, and corruption schemes. These technologies can analyze large datasets and identify patterns that humans might miss.

b. Blockchain Technology

Blockchain’s transparency and immutability make it a powerful tool in preventing fraud and money laundering, especially in tracking the provenance of funds.

c. Big Data Analytics

Analyzing vast amounts of structured and unstructured data helps in identifying suspicious activities across different systems and jurisdictions.

d. Network Analysis

Analyzing relationships between different entities (e.g., customers, accounts, transactions) can reveal hidden connections that may indicate fraudulent or corrupt activity.

5. Regulatory Compliance and Reporting

a. Regulatory Technology 

Regulatory Technology help financial institutions comply with regulatory requirements by automating the monitoring, reporting, and auditing processes.

b. Continuous Training and Awareness

Financial institutions must regularly train their employees on the latest fraud, AML, and anti-corruption techniques and regulations to ensure vigilance and compliance.

c. Collaboration with Law Enforcement

Financial institutions often work closely with law enforcement agencies such as Bank Negara Malaysia, Security Commission, the Police (PDRM), Company Commission etc. to share information and intelligence, helping to detect and prevent illicit activities.

6. Challenges and Emerging Threats

a. Cyber Fraud

As banking becomes increasingly digital, cyber fraud (e.g., phishing, hacking) poses a significant threat. Institutions must continuously update their cybersecurity measures.

b. Cross-Border Transactions

Detecting fraud and money laundering in cross-border transactions is challenging due to differing regulations and the complexity of tracking funds across multiple jurisdictions.

c. Cryptocurrency Risks

The rise of cryptocurrencies presents new challenges for detecting money laundering, as these digital assets offer a degree of anonymity and are harder to trace.

Conclusion

Detecting fraud, money laundering, and corruption requires a multi-faceted approach that combines advanced technology, strict regulatory compliance, and robust internal controls. As threats evolve, financial institutions must stay ahead by adopting innovative detection methods and continuously improving their risk management strategies.