Landing page banner

The Police would like to alert members of the public to phishing scams involving SMSes impersonating the Royal Malaysia Police (RMP). Since 1 January 2026, at least six cases were reported, with total losses amounting to at least $8,000.

In this scam variant, victims would receive an SMS allegedly from PDRM (the Malay acronym for the RMP) on outstanding vehicle toll payments. Victims would be asked to click on a link to settle the payment, which then redirects the victims to a phishing website prompting them to provide their personal information (e.g., NRIC number, vehicle number, banking details, credit/debit card credentials, etc). Victims would realise that they had been scammed when they discovered unauthorised transactions in their bank accounts or cards. 

The Police would like to advise members of the public to ignore dubious clickable links sent through SMSes claiming to be from RMP. The RMP would not request for outstanding vehicle toll payments as such payments would be collected through the ‘Touch ‘n Go’ system via the ‘Touch 'n Go eWallet’ mobile application. Details on any outstanding payments can be found in the ‘Touch ‘n Go’ mobile application. For more information, members of the public may visit https://www.touchngo.com.my/ > Customer Service > FAQ or Contact Us. 

The Police would like to remind members of the public not to disclose sensitive information such as your banking and credit/debit card credentials, as well as OTPs to anyone. Members of the public should also adopt the following precautionary measures:

1. ADD – Add the ScamShield App to protect yourself from scam calls and SMSes. Set up security features (e.g. set transaction limits for internet banking/credit and debit card transactions, enable 2FA or multifactor authentication for e-wallets, use the Money Lock feature provided by your bank to “lock up” a portion of your money so that it cannot be transferred out digitally by anyone in particular scammers, further protecting your savings from scams).
   
   
2. CHECK – Check for scam signs with official sources. You can check the legitimacy of suspicious messages, phone numbers and website links via the ScamShield app or visit the ScamShield website at www.scamshield.gov.sg. 
   
   
3. TELL – Tell the authorities, family, and friends about scams. f or when you encounter scams. If you suspect that you have fallen victim to a scam, call your bank immediately to report and block any fraudulent transactions as well as make a police report..

If you are in doubt, call the 24/7 ScamShield Helpline at 1799 to check. Fighting scams is a community effort. Together, we can ACT Against Scams to safeguard our community!

Annex A

List of phishing links/URLs used by scammers:

Screenshots of phishing SMS and websites: