Malaysia tops personal data leaks in Asia as Scam Calls Surge by 82.81 per cent

KUALA LUMPUR - Malaysia has recorded the highest rate of personal data leaks among key Asian markets, according to the Whoscall Annual Report 2024, released today by TrustTech service provider Gogolook.

The report also highlights a sharp 82.81 per cent increase in scam calls in 2024, signaling a significant rise in digital scam tactics across the country.

The report, which analysed scam data from Malaysia, Taiwan, Thailand, Brazil, Japan, South Korea, Hong Kong, and the Philippines between January and December 2024, found that 72.5 per cent of Malaysian users who checked their data via Whoscall’s ID Security feature discovered that their information had been compromised.

"While phone numbers were the most commonly leaked data type across all countries (98 per cent in Malaysia), what sets Malaysia apart is the high rate of name leaks (89 per cent), followed by addresses and emails.

"This makes impersonation scams more effective, as fraudsters use leaked names to pose as banks, government agencies, or delivery services," said Gogolook Malaysia Business Development Director Voon Chang Liew.

Voon added that with personal details readily available, scammers can execute highly targeted fraud attempts, making tools like Whoscall’s ID Security essential in helping users detect breaches early and take necessary precautions.

The surge in personal data leaks has fueled a dramatic rise in scam activities, with scam calls increasing by 82.81 per cent and SMS scams by 19.97 per cent. The growing reliance on scam calls indicates that fraudsters are using more direct and deceptive tactics to trick victims.

Bukit Aman Commercial Crime Investigation Department (CCID) director Datuk Sri Ramli Mohamed Yoosuf was quoted in a report that financial losses due to scams in Malaysia rose to RM1.57 billion in 2024, up from RM1.22 billion in 2023. He attributed this alarming trend to AI-driven scams, including deepfake videos of celebrities and politicians used to lure victims into fraudulent investments and phishing traps.

"These scams are becoming increasingly difficult to detect, particularly for the elderly, who are often targeted due to their financial savings," he said.

To address this issue, the police has reinforced its strategic partnership with Whoscall by sharing verified scam numbers within the app.

"AI-powered solutions are now a critical first line of defense. As scams become more sophisticated, distinguishing real from fake will only get harder, making tools like Whoscall indispensable in protecting the public," Voon said.

The report identified banking fraud, gambling scams, and phishing as the most prevalent types of scams in Malaysia. Key findings include:

• Scam Calls: The most frequently reported scam calls involved banking or debt collection (25.15 per cent), followed by impersonation scams where fraudsters pretended to be authorities or business representatives (22.40 per cent).
• SMS Scams: Gambling-related scams accounted for 45.16 per cent of fraudulent SMS messages, followed by financial scams (21.47 per cent) involving fake investment schemes and fraudulent money-lending services. Other prevalent scam messages included parcel scams (5.29 per cent), telecom fraud (5.60 per cent), and fake payment reminders (5.82 per cent).
• Phishing & Malicious Links: Whoscall’s URL Scanner found that 16.56 per cent of malicious links were disguised as registration pages, tricking users into revealing personal information. Another 16.52 per cent led to fraudulent software downloads that could install malware or spyware on victims' devices.

Voon said with scams becoming increasingly sophisticated and AI-powered deception on the rise, Malaysians are urged to stay vigilant by verifying unknown calls, avoiding suspicious links, and using cybersecurity tools like Whoscall to protect themselves from fraud.

As scammers continue to adapt, he added that public awareness and proactive digital security measures will be key in reducing the risks associated with personal data breaches and financial fraud.