Contact your bank immediately using a number on its official website or your card. For a suspected online financial scam, also call the National Scam Response Centre (NSRC) on 997. Calling 997 does not replace the report to your bank.
For suspected online financial scams. This is not a general account-support or case-follow-up line, and the call does not replace reporting the incident to your bank.
What to do first
- Tell your bank about the suspected fraud and ask it to secure affected access, cards or transactions.
- For a suspected online financial scam, also call NSRC on 997. Give both the bank and NSRC the same transaction facts.
- If you think someone can access or control your phone, use another phone or computer that you believe they have not accessed. Do not follow instructions from the suspicious caller or message.
- Keep transaction references, times, messages and screenshots. Lodge a police report promptly after reporting to the bank and, where relevant, NSRC.
Reporting quickly can help the response, but recovery is not guaranteed. Report even if time has passed.
Protect your security details
Do not share a one-time password (OTP), account password or card/app personal identification number (PIN) with someone who contacts you. Do not transfer money to a supposed “safe account”. End the contact and reach the bank independently.
Reviewed 8 October 2026.
BNM: reporting unauthorised transactionsBNM Annual Report 2025: NSRC operates 24/7NFCC: NSRC guidance and reporting steps